List of websites Updated 2024-12-15 +Created 1970-01-01
View more
As a JSON: github.com/cirosantilli/media/blob/master/cia-2010-covert-communication-websites/hits.json. OurBigBook Markup to JSON conversion helper cia-2010-covert-communication-websites/bigb-to-json:
cia-2010-covert-communication-websites/bigb-to-json cia-2010-covert-communication-websites.bigb
Hit criteria: has Wayback Machine archive, and clear indication of a known communication mechanism. The mechanism itself doesn't need to be archived however, a link to it is enough given other supporting elements: IP range, site style, date, web archive date pattern. JS commons are always quickly visually inspected, other mechanisms we look only at filename patterns. Commented edge cases that didn't make the cut can be found mostly under Section "IP range search" and Section "2013 DNS Census virtual host cleanup heuristic keyword searches".
ipdomainWayback Machinelanguagecountry mentionscommsthemenotes
?all-sport-headlines.com2011ArabicJARnewssplit images[ref][ref]Arabic-looking alphabet, image only so can't Google translate easily.
?firstnewssource.com2011FarsiIranJARnewsCopyright 2009. Split images. rss-items.
?global-view-news.com2011EnglishJARnewssplit images[ref][ref]
?globaltourist.net2010EnglishJARtravelsplit images[ref][ref], rss-items. speed.jar "speed test" JAR pattern. Seems to have been legit both before.
?hassannews.net2010ArabicSWFnewsCSS or archive quite broken. Split images[ref][ref]. rss-items.
?health-men-today.com2011ArabicJARnewsrss-items. Encoding broken.
?intlnewsdaily.com2011EnglishJARnewsrss-items
?newdaynewsonline.com2011EnglishJARnews
?newsincirculation.com2011ArabicJARnews
?newsworldsite.com2011PashtoAfghanistanJARnews
?pars-technews.com2011FarsiIranJARnews"pars" presumably means "Parsi" or something of the same root
?sportsnewsfinder.com2011ChineseChinaJARnews体育新闻发现者 (sports news finder)
?terrain-news.com2011PashtoAfghanistanJARnews
?theworldnewsfeeds.com2011EnglishJARnewsrss-items. Split images[ref][ref]
?todayoutdoors.com2011EnglishJARsports, travelsplit images[ref][ref]
?todaysnewsreports.net2010ArabicJARnews
?weblognewsinfo.com2011EnglishJARnewsSplit images, rss-items.
?opensourcenewstoday.com2010ArabicJARnewscopyright 2010
?techwatchtoday.com2011EnglishJARtech, newsMarked copyright 2008. Split images[ref][ref]. Later legit.
?cyhiraeth-intlnews.com2011EnglishJARnewsen.wikipedia.org/wiki/Cyhyraeth "The cyhyraeth is a ghostly spirit in Welsh mythology, a disembodied moaning voice that sounds before a person's death." WTF! So the serious looking black actress lady is meant to represent the voice of death?. Split images[ref][ref]. rss-items
?24hoursprimenews.com2009EnglishJARnewssplit images[ref][ref]
?dailynewsandsports.com2013EnglishJARsports
?europeannewsflash.com2011EnglishJARnewsSplit images[ref][ref]
?farsi-newsandweather.com2011FarsiIranJARnewssplit images[ref][ref]
?iranfootballsource.com2011FarsiJSsports, football
?iraniangoalkicks.com2008FarsiIranJARsports, football
?iraniangoals.com2009FarsiIranJSsports, football
?mywebofnews.com2011ArabicJARnewsSplit images[ref][ref]. rss-items.
?news-latina.com2011EnglishJARnewscopyright 2007
?outlooknewscast.com2011FarsiIranJARnews
?rastadirect.net2010EnglishJARfansite
?todaysengineering.com2011EnglishCGIengineering
?worldofonlinenews.com2011EnglishJARnewssplit images[ref][ref]. Later legit.
62.22.60.42newsupdatesite.com2011EnglishJARnewsrdns source
62.22.60.46flyingtimeline.com2011EnglishJARairplanes
62.22.60.48currentcommunique.com2011EnglishEgyptSWFnews
62.22.60.49telecom-headlines.com2011EnglishJStech
62.22.60.52collectedmedias.com2011FrenchJSnewsMarked copyright 2008
62.22.60.55thefilmcentre.com2011EnglishJSfilms
62.22.60.56traveltimenews.com2011EnglishJSnews
62.22.61.193awfaoi.org2010ArabicIraqJARnot-for-profitThis was the first clear .org hit with comms we've been able to find. Title translation: "Arab women to help Iraq", so perhaps "awfaoi" stands for "Arab Women For A O? Iraq". This fits well into the .org theme. Marked copyright 2008.
62.22.61.197rc5sports.com2011EnglishJARsports
62.22.61.198inside-vc.com2011EnglishCGIfinance"vc" is a standard abbreviation for venture capital
62.22.61.202bailsnboots.com2011EnglishSWFsports, cricket"Bail" is one part of the thing your're supposed to hit with th eball in cricket.[ref]
62.22.61.203the-cricketer-online.com2011EnglishJARsports, cricketmarked copyright 2009.
62.22.61.204hollywoodscreen.net2011EnglishJSfilms
62.22.61.206worldnewsnetworking.com2011ArabicJARnews
62.22.61.212nuestrasfinanzas.com2011SpanishJARfinance
62.22.61.217court-masters.com2011EnglishJARsports, tennis
62.22.61.219allworldstatistics.com2011EnglishJSstatistics
62.22.61.220newsjaka.com2011EnglishIndonesiaJSnews"jaka" presumably means Jakarta, the capital of Indonesia. There is a Indonesia section on the left sidebar. But the news are quite global however.
63.131.229.2fightskillsresource.com2011EnglishJSsports, martial arts
63.131.229.4unitedterritorynews.com2011EnglishJSnews
63.131.229.9show-dustry.com2011EnglishCGIentertainmentThe website name is a neologism with "show" and "industry".
63.131.229.11mythriftytrip.com2011EnglishCGItravelthrifty means: "using money and other resources carefully and not wastefully"
63.131.229.12cyberreportagenews.com2011EnglishJARnewsrdns source
63.131.229.13sunrise-news.com2011EnglishJARnewsrdns source
63.131.229.15cricketnewsforindia.com2013EnglishIndiaJSsports, cricketarchive quite broken, lots of missing files, including the JS
63.131.229.16nutricion-saludable.net2010SpanishCGIhealth
63.131.229.20fixashion.net2011EnglishJSfashion
63.130.160.50theglobalheadlines.com2010EnglishJARnewsthis has several archives from 2013, marked as Live Web Proxy Crawls and explained "mostly by the Save Page Now", so presumably by counter intelligence or amateurs
63.130.160.51hai-pow.com2011EnglishJARsports, martial arts
63.130.160.53echessnews.com2011ChineseChinaJARsports, boxingChinese title: 我的象棋世界 (My Chinese Chess world). rdns source. Split images[ref][ref]
63.130.160.60boxingstop.net2010PolishPolandJARsports, boxing
63.130.160.62azerinews.org2009AzerbaijaniAzerbaijanJARnewsrdns source. Split images, rss-items.
64.16.204.55holein1news.com2010EnglishJARsports, golf
64.16.204.58tech-topix.com2013EnglishCGItechArchive quite broken, but link to CGI comms.
65.61.127.163capture-nature.com2011EnglishJARphotographyReuters example. Since became legitimate, Ciro contacted the owner, and he was unaware of the domain's history.
65.61.127.166globalnewsbulletin.com2013EnglishTunisia, Afghanistan, Iran, EgyptCGInewsPHP pages, images /images/index_01.jpg
65.61.127.169crossovernews.net2011EnglishJARsports, basketball
65.61.127.174dedrickonline.com2010GermanJSsports
65.61.127.175altworldnews.com2013EnglishCGInewsEpoch times link, PHP pages
65.61.127.178tee-shot.net2011EnglishSWFsports, golfnice domain name
65.61.127.182pangawana.com2011ArabicAfghanistanJSnews
65.61.127.183cutabovenews.com2011EnglishAlgeria, various othersJSsports, basketball
65.61.127.184worldwildlifeadventure.com2011EnglishJARtravel
65.61.127.186explorealtmeds.com2013EnglishJARhealththe JAR was not archived, but there's a link to it
65.218.91.9welcometonyc.net2010EnglishCGItravel
65.218.91.17alljohnny.com2004EnglishCGIfansitemega early hit from 2004 to 2005. Then a gap, then they redid the domain: 2011. Same authors given content similarities e.g. "Submit Your Favorite Carson Moment". Reusing the domain after all these years, the lack of OPSEC is just mind blowing! New website marked Copyright 2003. Part of Oleg Shakirov's findings. One of the Reuters websites. Search documented at: Searching for Carson.
66.45.179.192thegraceofislam.com2011EnglishCGIreligion, Islam
66.45.179.193arabicnewsunfiltered.com2011ArabicJARnewsrdns source
66.45.179.194raulsonsglobalnews.com2011EnglishJARnews
66.45.179.195aryannews.net2010PashtoAfghanistanJARnewsrdns source. Heil.
66.45.179.199attivitaestremi.com2011ItalianCGIsports
66.45.179.201hitthepavementnow.com2011EnglishCGIsports, running
66.45.179.202newimages.org2011TurkishTurkeyJARphotographyJAR unarchived
66.45.179.203noticiascontinental.com2011SpanishSouth AmericaCGInews
66.45.179.205noticiasporjanua.com2011SpanishJARnews
66.45.179.206podisticamondiale.com2010ItalianItalyJARsports, runningmarked copyright 2010
66.45.179.207reflectordenoticias.com2011SpanishJARnews
66.45.179.208havenofgamerz.com2011EnglishCGIgamingmarked copyright 2009
66.45.179.210sa-michigan.com2011EnglishJARsports"sa" is an abbreviation for the site title "Sports Alive"
66.45.179.211absolutebearing.net2010EnglishCGItravel, sports, boats
66.45.179.213myportaltonews.com2011EnglishJSnews
66.45.179.214investmentintellect.com2011EnglishJARfinance
66.45.179.215nigeriastar.net2011EnglishNigeriaJARnewsContains link to unarchived JAR
66.104.169.163doctorsoncallsite.com2011EnglishJARhealth
66.104.169.164lightandshadowonline.com2010EnglishJARphotography
66.104.169.168plugged-into-news.net2010EnglishJARnewsJAR uses .zip extension! First instance, wow
66.104.169.171golf-on-holiday.com2011EnglishJARsports, golf
66.104.169.172perspectiva-noticias.com2011SpanishJSnews
66.104.169.175aquaswimming.com2009EnglishJARsports, swimming
66.104.169.177dojo-temple.com2011EnglishCGIsports, martial artsTODO meaning of "kama"? Kama lol?
66.104.169.179neighbour-news.com2010EnglishGermanyJARnewsMentions of Goethe-Institut and Germany all over. JAR unarchived
66.104.169.180medicatechinfo.com2010EnglishJShealth
66.104.169.181brickmanfinancialnews.com2011EnglishJSfinance
66.104.169.182casanewsnow.com2011EnglishJARJAR unarchived. TODO why "casa"? Doesn't seem to have any link to Spanish or Portuguese.
66.104.169.184bcenews.com2011AlbanianAlbaniaJARnews
66.104.173.163runakonews.com2011EnglishAfricaCGInews"Runako" is an African given name.
66.104.173.164shoppingadventure.net2010EnglishJARtravel, shoppingJAR unarchived
66.104.173.165entertaining-ly.com2011EnglishJARentertainment
66.104.173.166zubeenews.com2011EnglishJSnews"Zubee" is a Muslim name: muslimnames.com/zubee.
66.104.173.169smart-financeology.com2011EnglishJARfinance
66.104.173.175media-coverage-now.com2010EnglishSWFnews
66.104.173.176jbc-online-news.com2011EnglishJSnewsTODO meaning of "JCB". JS unarchived.
66.104.173.177webscooper.com2011EnglishJARnews
66.104.173.178dk-dcinvestment.com2010EnglishJARfinanceTODO meaning of "dk;dc".
66.104.173.180stara-turistick.com2011CroatianJARtourism
66.104.173.181playbackpolitics.com2011EnglishJSnews
66.104.173.182snapnewsfront.net2011EnglishJapanJSnews
66.104.173.183ingenuitytrendz.com2011EnglishJARtech
66.104.173.184armashoy.com2011SpanishSpainSWFgunsmeaning: "Weapons Today". In First World countries the CIA felt it would be safe to touch edgier subjects like guns
66.104.173.185baocontact.comEnglishJARHTML archive almost empty, but JAR was archived. One wonders what "bao" refers to, could be Chinese, but the small snippet of visible website is in English.
66.104.173.186myworldlymusic.com2011EnglishPakistanJARmusicJAR unarchived
66.104.173.189hitpoint-gaming.com2011EnglishJSgamingMarked copyright 2010
66.104.175.34itwebtoday.com2011EnglishJStech
66.104.175.35drglobalnews.com2011EnglishJARnewsTODO meaning of "dr"? rdns source.
66.104.175.36adilnews.net2010ArabicSWFnewsAdil is an Arabic masculine name
66.104.175.40beyondnetworknews.com2011EnglishEgyptCGInews
66.104.175.41grubbersworldrugbynews.com2011EnglishJSsports, rugby
66.104.175.44yourtripfinder.net2010EnglishCGItravelcomms not found, CGI from unarchived subpage assumed
66.104.175.45rollinsnetwork.com2011EnglishCGItechCGI linked to but not archived
66.104.175.46infosharenews.com2011EnglishJARnews
66.104.175.47southasiaheadlines.com2011EnglishBangladesh, Bhutan, India, Maldives, Nepal, Pakistan, Sri Lanka TibetJARtravelJAR linked to but missing from archive
66.104.175.48worlddispatch.net2010ArabicSWFnews
66.104.175.49webworldsports.com2011ArabicJARsports
66.104.175.50fly-bybirdies.com2011EnglishJARtravel
66.104.175.51businessexchangetoday.com2011EnglishCGInews, financePHP pages
66.104.175.52mensajeradenoticias.com2011SpanishCGInewsCGI unarchived
66.104.175.53info-ology.net2010EnglishJARnews
66.104.175.54marketflows.net2011EnglishJARfinance
66.104.175.57metanewsdaily.com2010EnglishCGInews
66.175.106.134paddlescoop.com2011EnglishBangladesh, Pakistan, India, EnglandJARsports, cricket
66.175.106.137kessingerssportsnews.com2010EnglishJSsports
66.175.106.138factorforcenews.com2009EnglishJARnews
66.175.106.142kanata-news.com2010EnglishCanadaJSnews"Kanata" is a place in Ottawa, Canada. The name is likely of Indigenous origin.
66.175.106.143thecricketfan.com2011EnglishJARnews
66.175.106.146inews-today.com2011EnglishEgyptJARnewsMarked copyright 2008
66.175.106.147starwarsweb.net2010EnglishSWFfansitewell, not even the CIA can escape Star Wars. TODO identify boy.
66.175.106.148activegaminginfo.com2011ChineseJARgamingthe website is entitled "活跃游戏" which means "Lively games", or "active games" as in the domain name itself
66.175.106.149feedsdemexicoyelmundo.com2011SpanishMexicoJSnews
66.175.106.150noticiasmusica.net2010Brazilian PortugueseBrazilJARmusic
66.175.106.155atomworldnews.com2011EnglishEgyptJARnews
66.175.106.158nouvellesetdesrapports.com2011FrenchEgypt, TunisiaJARnews
66.237.236.227newsandmusicminute.com2011PashtoJSmusic
66.237.236.229pearls-playlist.com2011EnglishSWFmusic
66.237.236.230beyondthefringe.info2012EnglishJARrugsJAR unarchived
66.237.236.231primetimemovies.net2009EnglishJSfilmsJS unarchived
66.237.236.235persephneintl.com2013JARarchive very broken, JAR unarchived. Full title: "Persephne International", reference to Greek Goddess of "spring, the dead, the underworld, grain, and nature"
66.237.236.236directoalgrano.net2010SpanishJARnews
66.237.236.240actualizaciondebeisbol.com2011SpanishJSsports, baseball
66.237.236.243mygadgettech.com2009ChineseCGItechArchive very broken
66.237.236.247comunidaddenoticias.com2011SpanishEcuadorJARnews
66.237.236.249sumerjaseahora.com2011SpanishCGIsports, SCUBA divingsubmerge yourself now
69.84.156.69al-ashak-news-me.com2011ArabicJSnews
69.84.156.71worldfinancetoday.net2011EnglishJARfinance
69.84.156.72autonewsarabia.com2011ArabicJARcars
69.84.156.74blue-moon-news.com2011ArabicJSnews
69.84.156.76tnc-urdu.com2011UrduJARtechTODO meaning of "tnc"?
69.84.156.82arabicnewsonline.com2011ArabicJARnewsrdns source. Some very similar domains: modernarabicnews.com, arabicnewsource.com. Needed more creativity here! Later legit.
69.84.156.83unganadormundial.com2010SpanishCGIsports, fitness
69.84.156.88diariodeelmundo.com2011SpanishJARnews
69.84.156.89todaysarabnews.com2011ArabicJARnewsJAR unarchived.
69.84.156.90stickshiftnews.com2011EnglishJARcars
69.84.156.91theinternationalgoal.com2011SpanishCGInews
72.34.53.174electronictechreviews.com2011EnglishJARtechJAR unarchived. Split images, rss-items. Present at "Mass Deface III" pastebin.
72.34.53.174just-the-news.com2011ArabicJARnewscopyright 2009. Present at "Mass Deface III" pastebin. JAR unarchived.
72.34.53.174kickitnews.com2010ArabicJARsports, footballcopyright 2009. Present at "Mass Deface III" pastebin.
72.34.53.174moyistochnikonlaynovykhigr.com2011RussianRussiafansitecopy of myonlinegamesource.com, but on a Russian transliterated domain rather than the English one, very interesting
72.34.53.174myhealthlibrary.net2011EnglishJARhealthpresent at: "Mass Deface III" pastebin.
72.34.53.174myonlinegamesource.com2011RussianRussiagamingCan't find comms, but stylistically perfect. rss-items. Present at "Mass Deface III" pastebin.
72.34.53.174mytravelopian.com2011EnglishJARtravel
72.34.53.174recursosdenoticias.com2011SpanishJARnewsSplit images, rss-items. Present at "Mass Deface III" pastebin.
72.34.53.174sayaara-auto.com2010ArabicJARcars
72.34.53.174technologytodayandtomorrow.com2011EnglishJARtechrss-items. Present at "Mass Deface III" pastebin.
72.34.53.174todaysnewsandweather-ru.com2011RussianRussiaJSnewsJavaScript with SHAs
74.116.72.227dayenews.com2011EnglishJARnewsrdns source. Previously 69.74.45.67.
74.116.72.229guide-daventure.com2011FrenchFranceJARtravel
74.116.72.231bleachersfootballnews.com2011EnglishJARsports, footballTODO meaning of "Bleacher"? Possible reference to Bleacher Report.
74.116.72.232indirectfreekick.com2011EnglishJARsports, football
74.116.72.233wwiichronicles.net2011EnglishCGIhistory
74.116.72.234petroleumagenews.com2011EnglishJARoil
74.116.72.235the-open-book-online.com2011EnglishJSliterature
74.116.72.236techtopnews.com2011EnglishJARtech
74.116.72.239crickettoday.info2013PashtoJSsports, cricketJS unarchived. The requested URL /cricket.js was not found on this server
74.116.72.240zafernews.com2011ArabicJARnews
74.116.72.242gdgtsource.com2011EnglishCGItechPresumably "gdgt" stands for "GaDGeT", which is mentioned on subtitle
74.116.72.246vuvuzelanews.com2011EnglishJARsports, footballVuvuzela is this plastic horn, popular in football stadiums. The term is of African origin. Later legit. rdns source. Previously at 69.74.45.86.
74.116.72.247ballbatstumpsandbails.com2011EnglishJARsports, cricket
74.116.72.249round-trip-travel.com2010EnglishCGItravelthis got archived a lot of times, though all seem to be Alexa crawls.
74.116.72.250arabicnewsource.com2011ArabicCGInews
74.254.12.163half-court.net2010EnglishPhilippinesJARsports, basketball
74.254.12.164dailywellnessnews.com2011EnglishJARhealthrdns source. split images[ref][ref].
74.254.12.165dylandon.net2011ChineseSWFmusic"Dylan" presumably a reference to Bob Dylan? "Don" unclear. Maybe Don McLean?
74.254.12.166afghanpoetry.net2010EnglishAfghanistanSWFpoetryAlso at 63.131.229.10[ref] in a range.
74.254.12.168non-stop-news.net2010FarsiJARnews
74.254.12.169soldiersofsouthasia.com2011EnglishJARhistory
74.254.12.171autism-news.org2011EnglishSWFhealthcopyright 2007. Split images. rss-items. Previously at 69.74.45.67.
74.254.12.176pakcricketgrd.com2011UrduJARsports, cricketTODO meaning of "grd"
74.254.12.177networkofnews.com2011EnglishJARnewsrdns source. Later legit.
74.254.12.179wineconnaisseur.net2010EnglishJSwine
74.254.12.180helpinghandssite.com2011EnglishJARnews
74.254.12.188first-tee-golf.com2011EnglishJARsports, golf
74.254.12.189fabu-foto.com2011EnglishCGIphotography
74.254.12.190viptravelabroad.com2011EnglishJStravel
199.85.212.105mide-news.com2010EnglishCGInews"MIDE" stands for "Middle East". Comms not archived, presumably CGI comms variant.
199.85.212.111newsandsportscentral.com2009EnglishJARnewsrdns source
199.85.212.118just-kidding-news.com2011EnglishJARnewsepic name
204.176.38.130i-pressnews.com2011EnglishJARnews
204.176.38.132turkishnewslinks.com2011EnglishTurkeyJARnews
204.176.38.134photographyarecord.com2011EnglishCGIphotographyCute
204.176.38.135breakingthewicket.com2011EnglishCGIsports, cricket
204.176.38.136politicalworldtoday.com2011EnglishEgyptJARnews
204.176.38.137hi-tech-today.com2011EnglishJARtech
204.176.38.139bigscreenbattles.com2011EnglishJARfilms
204.176.38.141rakotafootball.com2011EnglishJARsports, football"Rakota" is an Indian family name
204.176.38.143noticiassofisticadas.com2011SpanishCGInews
204.176.38.142senderosdemontana.com2011SpanishJSsports, cyclingTalks about mountain biking and Eurobike 2010, so likely Spain focused, but it is not direct enough to be certain. JS unarchived.
204.176.38.144techno-today.com2011EnglishJARtechwas legit previously.
204.176.38.145tickettonews.com2011EnglishJARnewsrdns source. Epoch times link.
204.176.38.146dps-digitalphotosharing.com2011EnglishJARphotography
204.176.38.147theputtingreen.com2011EnglishJARsports, golf
204.176.38.149sportsnewstodayar.com2011ArabicLebanon, othersJARsports"ar" on domain name presumably means "Arabic"
204.176.38.159kairuafricanews.com2011EnglishAfricaJARnewswhat is "Kairu"? en.wikipedia.org/wiki/Kairu a place in India? en.wiktionary.org/wiki/kairu "frog" in Japanese? rdns source
204.176.39.97beamingnews.com2011ArabicJARnewsNice design. rdns source
204.176.39.98cubriendonoticias.com2011SpanishJARnewsarchive quite broken. JAR unarchived.
204.176.39.100rowleyworldpost.com2011EnglishEgypt, othersJARnews
204.176.39.103economicnewsbuzz.com2011KoreanCGIfinanceLove the kawaii style
204.176.39.104spectranewsonline.com2011EnglishCGInewsmarked copyright 2010.
204.176.39.105entertainmentnewscompany.com2011ChineseSWFfilms, musicTitle: "娱乐新闻公司", lit. Entertainment News Company
204.176.39.110arabnewsatdawn.com2011ArabicCGInewscute, the Arab chick's drink actually has a cocktail umbrella on it. Marked copyright 2010.
204.176.39.115globalprovincesnews.com2010ArabicJSnews
204.176.39.116mahparah-news.com2011FarsiJSnews
204.176.39.119commercialspacedesign.com2013FarsiCGIarchitectureC O N C E P T U A L design. A rare example of a fake company website.
207.210.250.131starrynightnews.com2011ArabicJSnewsinteresting design
207.210.250.132aeronet-news.com2011EnglishJARairplanes
207.210.250.133bakaribulletin.com2011EnglishAfricaJSnewsBakari could either be a given name, or a village in Togo
207.210.250.134deprensaenlarevisiondehoy.com2011SpanishJARnews
207.210.250.135icwb-news.com2011EnglishJARnewsICWB stands for "Inner Circle Worldwide Business (News)", the title of the website
207.210.250.136sportsreelhighlights.com2011EnglishJARsports
207.210.250.138inquiry-human-past.com2011EnglishJARhistory
207.210.250.139thefairwaysaregreen.com2011ThaiJARsports, golf
207.210.250.143archaeologyreview.net2010EnglishJARhistory, archeology
207.210.250.146noticias-caracas.com2011SpanishVenezuelaCGInewsCaracas is the capital of Venezuela. But you knew that, right?
207.210.250.147bailandstump.com2011EnglishJSsports, cricket"Bail" and "Stump" are the two parts of the thing your're supposed to hit with the ball in cricket.[ref]
207.210.250.149globalventurestat.com2008EnglishSWFnews
207.210.250.152al-rashidrealestate.com2010ArabicEgyptCGIfinance, real-estate
207.210.250.153newsintheworld-ru.com2011RussianJARnews
208.254.40.96sixty2media.com2011EnglishVariousJARnewsEpoch times link
208.254.40.99newspoliticssource.com2013ArabicJARnewsOne of the news mentions Snowden
208.254.40.110musical-fortune.net2010EnglishCGImusicimages /images/banner-02.jpg
208.254.40.113ashoka-gemstones.com2010EnglishJARjewelry
208.254.40.117worldnewsandent.com2010ArabicEgyptCGImews
208.254.40.124riskandrewardnews.com2013EnglishCGIfinance
208.254.42.194it-proonline.com2011EnglishCGItechimages /images/header_01.jpg
208.254.42.205driversinternationalgolf.com2011EnglishCGIsports, golf
208.254.42.209mardelsurnoticias.com2011SpanishJARnewsweird mixture of Portuguese and Spanish language external links
208.254.42.215nowfreshfinances.com2011EnglishCGIfinanceCGI unarchived
208.254.42.216circulatingnews.net2010EnglishJARtravel
208.254.42.219westingtonpassnews.com2011EnglishJARnews
210.80.75.36e-commodities.net2011EnglishJARfinance
210.80.75.37trekkingtoday.com2011EnglishJARsports, runningsplit images[ref][ref]. rdns source.
210.80.75.41multinews-33.comJARnewsNo archives of the HTML, but the JAR was archived
210.80.75.43gulfandmiddleeastnews.com2011ArabicJSnews
210.80.75.44whirlybirdinflight.com2011EnglishJARhelicopters
210.80.75.45kings-game.net2011EnglishJARgaming, chessJAR unarchived
210.80.75.46topglobalnewsdaily.com2011EnglishJSnews
210.80.75.49recipe-dujour.com2011EnglishJARcookingnice design
210.80.75.55philippinenewsonline.net2010PhilippinesJARnews
210.80.75.56technewsforme.com2011FarsiJARtech
212.4.16.224lanoticiasdehoyelinforme.com2010SpanishJARnews
212.4.16.232mynewscheck.com2011EnglishCanadaJARnewsrdns source
212.4.16.245financial-crisis-news.com2011RussianRussiaJARnewsrdns source
212.4.16.252minutosdenoticias.com2010SpanishCGInewsCSS
212.4.17.38fightwithoutrules.com2011RussianJARsports, combat sports
212.4.17.41newtechfrontier.com2010EnglishCGItechsince became legit: newtechfrontier.com/
212.4.17.43smart-travel-consultant.com2011ChineseCGItravelajaxtax.js may be of interest for fingerprinting. Title: "智能旅行顾问", lit. Smart Travel Consultant
212.4.17.46atentlaloc.com2009EnglishQuatar, Lebanon, Israel, IranJSjewelryTlaloc is an Aztec deity, and Aten is an Egyptian deity. Both appear to be somewhat linked to gold, thus their usage in a jewelry website. Creative domain name.
212.4.17.53newsresolution.net2010EnglishCôte d'Ivoire, Lebanon, SudanJARnews, UN Peacekeeping
212.4.17.56lesummumdelafinance.com2010FrenchFranceJARfinance
212.4.17.98topbillingsite.com2011EnglishCGIfilms
212.4.17.122b2bworldglobal.com2011EnglishCGInews
212.4.18.14football-enthusiast.com2011EnglishEuropeJSsports, football
212.4.18.129sightseeingnews.com2010EnglishJARtravel
212.209.74.105globalbaseballnews.com2011EnglishJSsports, baseball
212.209.74.106football-de-luxe.com2010FrenchFranceJARsports, football
212.209.74.112developmental-league.com2010EnglishCGIsports, American footballCGI comms variant?
212.209.74.115mediocampodefutbol.com2010SpanishJARsports, football
212.209.74.117myengineeringaffinity.com2011EnglishJARtech
212.209.74.123worldfinancialexchangenews.com2010EnglishSWFfinanceSWF unarchived.
212.209.74.125avoilurefixe.com2011FrenchTunisiaJARairplanes"à voilure fixe" is French for "with fixed wing", i.e. fixed wing aircraft
212.209.74.126headlines2day.com2011FarsiJARnewsmarked copyright 2009
212.209.79.34fgnl.net2011EnglishIranCGInewsfour letter domain! FGNL stands for "Farsi Global News Links" Marked copyright 2009.
212.209.79.37fitness-sources.com2010EnglishJSsports, fitness
212.209.79.40hydradraco.com2011EnglishJARsports, American footballTODO meaning of the name?
212.209.79.41noticiasdelmundolatino.com2011SpanishJARnews
212.209.79.42suparakuvi.com2011FrenchFranceJARnewsa Tour Eiffel image, and young people stuff, i.e. first world stuff. It's for France alright. But TODO meaning of domain name? Ciro's second language French didn't cut it this time.
212.209.79.46cetusdelph.com2011EnglishJSsports, scuba
212.209.79.47willtoworship.com2011EnglishJARreligion, Christianitymarked copyright 2007 (!)
212.209.79.48themvconnection.com2011EnglishJARmusic
212.209.79.51pi-resources.net2010EnglishJSprivate investigators"pi" stands for Private Investigators. The CIA must have had some fun making this one.
212.209.79.53ourscubaworld.com2011EnglishJSsports, scuba
212.209.79.58tech-love-home.com2011ChineseJStechTitle: "消费类电子产品", lit. Consummer Electronics
212.209.79.60first-solo-aviation.com2010EnglishJARairplanes
212.209.79.61china-destinations.org2011ChineseJStraveltitle: "中国目的地指南", lit. "China Destination Guide"
212.209.90.69worldedgenews.com2011EnglishJARnews
212.209.90.80nsmovies.net2010EnglishJARfilms"ns" stands for "Nirguna Saguna", two separate Hindu names/deities. But there are no other Indian references beyond those.
212.209.90.82middleeastjournal.net2010ArabicJSnews
212.209.90.84thenewseditor.com2011EnglishJARnews
212.209.90.87newsandweathersource.com2009EnglishJARnewsmarked copyright 2009.
212.209.90.89pakisports.com2010EnglishPakistanSWFsports
212.209.90.90vriha-aesthetics.com2011ArabicJSnews
212.209.90.92amishkanews.com2011EnglishIndiaJSnewsAmishka is an Indian name, plus some prominent mentions of Bollywood both point to India specifically
212.209.90.93theentertainbiz.com2011EnglishJARentertainment
212.209.90.94eurosportssummary.com2011EnglishJARsports
216.93.248.194esmundonoticias.com2011SpanishJARnewsrss-items. Shares IP with kukrinews.com.
216.93.248.194kukrinews.com2010EnglishJSNewsJavaScript with SHAs. Talks to /cgi-bin/news.cgi. A Kukri is the national weapon of Nepal. Slogan: "Nepal's Sharp Edge", thus matching the website name. Split image header. Copyright 2009. Shares IP with esmundonoticias.com.
216.105.98.139cultura-digital.net2008SpanishCGInewsMarked copyright 2008. Previously legit.
216.105.98.140uaeshoppingspree.com2013EnglishUAEJARshoppingArchive quite broken, but has link to unarchived JAR. Has an unusually personal touch "As you can probably tell from the title of my website, shopping is my very favorite pastime."
216.105.98.145montanismoaventura.com2012SpanishSpainJSsports, mountaineeringJS unarchived. Marked copyright 2010.
216.105.98.147nepalnewsbrief.com2008EnglishNepalJARnewsMarked copyright 2006 (!) If true this would be the earliest known reference to a date in the websites.
216.105.98.152modernarabicnews.com2013ArabicJARnewsHTML archive quite broken, but JAR was archived thankfully.
216.105.98.154everythingcricket.org2011EnglishJARsports, cricketAlso has archives from 2009, but they were a bit broken. The 2011 one is marked copyright 2011, so they actually bothered to updated that.
216.105.98.156familyhealthonline.net2011EnglishCGIhealth
219.90.61.110surya-brahma.com2011SpanishJARnewsSurya and Brahman are Hindu concepts, but the website appears to have nothing to do with India or Hinduism. Interesting.
219.90.61.111classicalmusicboxonline.com2010EnglishCGImusic
219.90.61.116athletepro.net2010EnglishJARsports
219.90.61.117lajornadanow.com2010SpanishJARnews
219.90.61.120theinternationalworld.com2011EnglishJARnewsrdns source. rss-items.
219.90.61.121thepyramidnews.com2011FarsiIranJARnews
219.90.61.122iran-newslink-today.com2011FarsiIranJARnews
219.90.61.123journeystravelled.com2011EnglishJARtravel
219.90.62.229information-junky.com2011EnglishGhanaJARnews
219.90.62.231todosperuahora.com2011SpanishPeruCGInews
219.90.62.233theworld-news.net2010UrduCGInews
219.90.62.234recuerdosdeviajeonline.com2011SpanishSWFtravelmarked "Copyright 2009"
219.90.62.237elcorreodenoticias.com2011SpanishVenezuelaJARnews
219.90.62.237ride-captain.com2011EnglishJARsports, motorcyles
219.90.62.238freshtechonline.com2011EnglishCGItech
219.90.62.241newscentertoday.com2011EnglishJARnewsCopyright 2008. rdns source. rss-items. Later legit, with a pause The domain name you have entered is not available. It has been taken down because the email address of the domain holder (Registrant) has not been verified..
219.90.62.243fitness-dawg.com2021EnglishJARsports, fitness
219.90.62.244easytraveleurope.com2012EnglishJARtravelnice design
219.90.62.245world-news-now.net2011EnglishJARnews
219.90.62.246negativeaperture.com2011EnglishCGIphotographynice domain name
219.90.62.247conquermstoday.com2011EnglishCGIhealthMS means multiple sclerosis. Comms not found, CGI from unarchived subpage assumed. Has a subdomain "heal.conquermstoday.com" according to 2013 DNS Census, but no links to it in the archive.
Read the full article
Raw images Updated 2024-12-15 +Created 1970-01-01
View more
In this section contains a list of images we could find that wre uploaded as raw data to the blockchain, without any special encoding, e.g. as done by the AtomSea & EMBII system.
It is possible that some/most of those were uploaded via the cryptograffiti.info system, but since that indexer stopped working, and since the format is so non-specific, it is not possible be sure as far as we can tell.
These images were indexed by looking for standard transaction output script hashes that contain JPEG or PNG images immediately on the first payload byte based on file signature bytes and indexed/easily downloaded at github.com/cirosantilli/bitcoin-inscription-indexer#image-indexing-and-download.
Figure 1.
western-union-bitcoin-spoof.jpg.gz
.
This ad highlights one of the claimed potential advantages of Bitcoin: cheaper/faster cross border transactions.
This inscription is highlighted at Data Insertion in Bitcoin's Blockchain by Andrew Sward, Vecna OP_0 and Forrest Stonedahl. Finding Gzips with binwalk is hard because the file signature is only 2 bytes long (1F 8B), so there are lots of false positives.
Gzip binary uploaded at: raw.githubusercontent.com/cirosantilli/media/master/bitcoin-inscription-indexer/data/bin/200f3f6f8a91ae438d1924e5cedca98cea7f0197b9eba11343948b5621ca19ed.jpg.gz gunzip 1.12 complains:
western-union-bitcoin-spoof.jpg.gz: decompression OK, trailing garbage ignored
but we were not able to fix that: removing bytes at the end goes straight from "trailing garbage" to "incomplete file" after a certain byte.
Figure 4.
Super Mario coin sprite
. tx bf7ef3216ae09f8252c76e7d0031bc4aa131a23a6900f8371c44ffde7957c8da (2015-03-01). Possibly from Super Mario World for the SNES (1990). No doubt a self-reference to Bitcoin itself. Encoded as a data URL for a PNG image:
<img src="data:image/png;base64,
Visible e.g. at www.pinterest.fr/pin/137993176075040653/.
Figure 5.
JPG thumbnail
. Presumably a JPEG upload test. tx 515a95381e511141229966d722db19db7da66a0d629b1f883d296287632e72b3, block 349362 (2015-03-26) via cryptograffiti.info.
Figure 6.
we love bitcoin
.
A heart next to a bitcoin logo and written "we love bitcoin". Reproduced at: kryptomoney.com/grayscale-report-institutional-investors-retirement-funds-love-bitcoin/
Embedded in the image itself, there's a message in the header comments:
Bitcoin uses peer-to-peer technology to operate with no central authority or banks
which is the opening paragraph of: bitcoin.org/en/
Figure 7.
Iranian lady with polar bear hat.
We don't know if she's actually Iranian, it's just an uneducated guess.
The image data is cut in half. This makes the image an invalid JPEG, but ImageMagick is able to recover and convert to a valid image which is what we show here to make it portable to more browsers. The raw invalid image is present at: raw.githubusercontent.com/cirosantilli/media/master/bitcoin-inscription-indexer/data/bin/b673c7d0c62cce8315ad6cc63a2c8ca8169bf73432435760b808735e1a7fe0e2.jpg, but it can also be generally viewed by most viewers.
This embedding uses a novel more specialiezd protocol on top of a raw daisy chain Bitcoin inscription.
The daisy actually starts at f49e79889b34d355fa8a02f13b9db4ed69c067f975e25339737ef10e4b993d7a and data is encoded as follows:
OP_RETURN 62 00000000 48656c6c6f20776f726c64212052657475726e20626c6f622070726f746f636f6c2076
OP_RETURN 62 00000001 313a204d41474943203d20307836322c205041434b414745203d2075696e7431362c20
OP_RETURN 62 00000002 53455155454e4345203d2075696e7431362c205041594c4f4144203d20757020746f20

OP_RETURN 62 00000000 48656c6c6f20776f726c64212052657475726e20626c6f622070726f746f636f6c2076
OP_RETURN 62 00000001 313a204d41474943203d20307836322c205041434b414745203d2075696e7431362c20
OP_RETURN 62 00000002 53455155454e4345203d2075696e7431362c205041594c4f4144203d20757020746f20

OP_RETURN 62 00000003 33352062797465732e0a

OP_RETURN 62 00010000 ffd8ffe1001845786966000049492a00080000000000000000000000ffec0011447563
OP_RETURN 62 00010001 6b79000100040000003c0000ffe1039a687474703a2f2f6e732e61646f62652e636f6d
OP_RETURN 62 00010002 2f7861702f312e302f003c3f787061636b657420626567696e3d22efbbbf222069643d
OP_RETURN 62 00010003 2257354d304d7043656869487a7265537a4e54637a6b633964223f3e203c783a786d70

...

OP_RETURN 62 00010085 51290358a41fe5408b4435254208d4810a5fe9113044c1ae3aa544656d729756395b87
OP_RETURN 62 00010086 c4e261f55c5d19e1c792c3f78adff1368db58e5a0bb85b2c6753c42de6d973edae0642
OP_RETURN 62 00010087 1b2c8370f203aaa0a6eb7ea0871d8e9ae6534b785b57347171e4df6a5463d7ce77b93b
OP_RETURN 62 00010088 9b8bf96edd1b982e2474a41ad28e3c01e74586d1d1ad7a874c5a1b7c742d2285c371f6
The first block is:
Hello world! Return blob protocol v1: MAGIC = 0x62, PACKAGE = uint16, SEQUENCE = uint16, PAYLOAD = up to
which then gets repeated, probably an error, but now with the sentence completed:
Hello world! Return blob protocol v1: MAGIC = 0x62, PACKAGE = uint16, SEQUENCE = uint16, PAYLOAD = up to 35 bytes
This therefore gives us the name of the protocol as "return blob protocol". We also understand that the 0x62 was aconfiguration parameter.
ffd8ffe1 marks the start of the JPEG.
If the rest of the image were inscribed somewhere random in the blockchain, we'd expect to find the string 6200010089 containing the netxt data chunck on a nearby block, but bgrep did not find it, so perhaps the data just isn't there.
The last tx of the daisy is 43b182065ab2c7d1908ec3cee756d9f626c1e4bd1efa17a7c3993433b653d499 which is followed by 9e6838a3545bd59a708d0c177d6840c7d82b8ac6220138ca3d8133a1376405aa which does not contain any data.
Figure 8.
Erich Erstu
. Alias: 1Hyena. A well built man wearing a gas mask. Google image search leads to: github.com/1Hyena (archive), who is the creator of cryptograffiti.info. It was around after this time that the number of raw images surged dramatically in the blockchain, so it is possible that this is when the service started operating. This further suggests that most raw image uploads we found were made with cryptograffiti.info. tx c206e8fff656f07b27dac831ef9b956792bae4e76a2cb43f14f49f0298bf2c2f, block 416527 (2016-06-16). Embedded text:
Hyena was here on the 16th of June 2016.
and:
Hi mom! I love you.
Figure 9.
Water Deer
. badtaxidermy.com "Water Deer" image, visible at: web.archive.org/web/20200527070011/http://www.badtaxidermy.com/?page=3. tx 357e8ae080e5a1b554eaec2953e3e6e2e7955f3af4559dd0f1bc6381d56aa183, block 416735 (2016-06-16) via cryptograffiti.info. The file contains the strings:
www.badtaxidermy.com
and:
Cryptograffiti.info now allows you to attach JPEG images to your messages.
Figure 10.
hotmine.io
. A mining supplier: hotmine.io/en. twitter.com/uahotmine. tx 8ec01c5e8f3b57adb13079af3b7e40e7acd3986a5ed14325388405771bd43f9b, block 416835 (2016-06-18) via cryptograffiti.info. The file contains the following string embedded into it:
Smart Heating, Bitcoin Mining For You - en.hotmine.io
Figure 11.
Nada from They Live (1988)
.
tx 83df1e5ecc1c7ac455d2855e15cff8fa5771afe2ad1796c8b6b1a8e910e829c4, block 416896 (2016-06-18) via cryptograffiti.info. The file has the following string embedded into it:
I have come here to chew bubble gum and dance on Ethereum's grave.
And I'm all out of bubble gum.
which is a reference to Nada's original dialogue:
I have come here to chew bubblegum and kick ass... and I'm all out of bubblegum.
Video 1.
I'm here to chew bubblegum
. Source. Off-chain film scene for context.
Figure 12.
Cryptocurrenty Minning ad
. Twitter "@dobcrypto": twitter.com/dobcrypto Reuploaded at: imgur.com/gallery/00oOuhm. tx eda07af9584391bb6f5ebb07ba57a51b610751fdf06ae49d9166225c36d97d0b, block 417111 (2016-06-20) via cryptograffiti.info. The file contains the following string:
Subscribe, I will be glad to see you! www.youtube.com/c/dobcryptocurrency
Figure 13.
Chinese wedding
.
A white man and a Chinese woman wearing Chinese traditional dressess holding hands, presumably a token from their wedding. A Chinese poem is visible next to them, with four vertical setences made up of 7 characters each, to be read from right to left. This is a classic Classical Chinese poetry form known as qijue.
A photo of a snowy mountain is shown in the background, fitting the theme of the poem. It looks like an European mountain, possibly Mont Blanc? TODO identify. Perhaps a reference to the nationality of the husband.
TODO transcribe the Chinese text, cursive grass script + traditional characters + ultra-low res put this beyond Ciro Santilli's capabilities/patience ratio. Ciro Santilli's wife's transcribed gave the first column as:
丹珍默然藏山中
A scarlet gemstone hides quietly in the midst of the mountains.
and no Google hits, so maybe an original poem? What a hero. TODO transcribe the rest.
The image file contains the English transalation of the Chinese poem embeded into it:
A scarlet gemstone hides quietly in the midst of the mountains.
Its beauty softly enters the wanderer's dreams.
Fame and fortune become like drifting clouds
But the gem endures like the constellations above.
Figure 14.
Superbuffo
. Googling gives a Toni Caradonna: twitter.com/superbuffo. At twitter.com/Superbuffo/status/1620900765014556672 that twitter account claimed the art or its depiction. www.imdb.com/name/nm9516368/ has some obscure references to him. tx 6240f61bbaeac66cd623e921a153addaf5f379a996f2de0f0c6506d628fe3812, block 417354 (2016-06-21) via cryptograffiti.info. The file contains the following string embedded into it, in addition to a lot of Adobe boilerplate:
Superbuffo the first comedian on the blockchain
Figure 15.
Rene Angelil and Celine Dion
. Reproduced at: web.archive.org/web/20191130174338/https://people.com/celebrity/inside-celine-dion-and-rene-angelils-21-year-marriage/ but cropped to faces. tx e2e5b9cf04d93ae5fc1b54e9208b92b668823e014b251f57510e4702661fa1a6, block 417272 (2016-06-21) via cryptograffiti.info. Embedded text:
You will be here forever
Figure 16.
New Age dance
. Woman dancing a New Age-like dance with New Age-like Indian looking clothes, holding a lamp, and with a rose on her hair. TODO identify. tx 0602dd1b375bc71818db0a40d7a14f438499af3eda9056125eb5a1b74bed790b, block 419676 (2016-07-07) via cryptograffiti.info. The image contains the following text embedded into it (TODO unknown mechanism, does not show up on exifTool:
No alcohol and smoking since 07.07.2016. Love girls!
Figure 17.
Snake penetration sculputure
. Sculpture of what seems to be a snake penetrating a vagina. tx 83f412eb7ff40fe542901186a6d37cba0eb4f8458c574bc02a6f7236c599fe07, block 420122 (2016-07-10) via cryptograffiti.info.
Figure 18.
Wedding invitation
. TODO: make out names, quite low res, no patience. Looks like Cyrillic script. tx 01c3af71c12d49260231dcb3cc86d6ff21b3cd90878e9556482ef3b0908abffe, block 420960 (2016-07-16) via cryptograffiti.info.
Figure 19.
Bitcoin love certificate
. Hard to make out due to ultra-low-res, and in Cyrillic script. Contains three dates: 8.02.1982, 16.07.1992 and 17.07.2016. tx 075d1c78883ccb237b374c7ed7f9ff0f90df3308c48f9e7a29348b815326b769, block 421151 (2016-07-17) via cryptograffiti.info. The file contains the following text embedded into it:
Wedding Wallled 15Nz214yv76BmkKLCi8kAVssa5C7nQHLjx
Figure 20.
Oles Slobodenyuk
.
Wedding picture with people holding "Blockchain" and "Ipa" signs.
Reproduced at: web.archive.org/web/20200926150213/https://freebitcoins.com.ua/zapushhen-ukrainskij-bitkoin-pul-bitcoinukraine/ Google translate:
One of the initiators of the launch of this pool was Oles Slobodenyuk, who earlier created a grocery store in Kiev accepting bitcoins, arranged a TakeMyBitcoin flash mob, and also registered his own marriage in the bitcoin blockchain on the weddingbook.io website.
Oles is for example featured at: uk.sports.yahoo.com/news/bitcoin-miners-heating-homes-free-133053106.html Bitcoin Miners Are Heating Homes Free of Charge in Frigid Siberia by Anna Baydakova (2019)
The image file contains the following text embedded into it:
<Wedding date: Jul 17, 2016
proof link goo.gl/photos/2GToBx1WqRyiQtxQ6
The link is dead of course.
Figure 21.
Nematode
. A... nematode-like shaped hand drawn extremely simple image? A test upload presumably? The squiggle outside of the worm might be a test direction marker. tx 554846025e808df7adec3b1d099e3d4d54b7367cddaa959939cb5ca0fc6abf7b, block 424414 (2016-08-09) via cryptograffiti.info. The image file contains the following string embedded into it:
2016, painting, 135.7 x 130.7 cm (18 DPI)
Figure 22.
Hand written contract
.
Wedding contract written in Czech. Transcription and translation by Petr Kadlec:
Svým podpisem pod tímto textem potvrzuji, že Daniela Dudysová a Pavel Urbaczka v mé přítomnosti dne 20.8.2016 v Ropici projevili vůli uzavřít spolu manželství, přičemž ani jeden z těchto projevů se mi nejevil jako nesvobodný, nikoliv vážný, nesrozumitelný, omylný nebo uzavřený v tísni.
Translation:
With my signature under this text, I confirm Daniela Dudysová and Pavel Urbaczka have, in my presence on 2016-08-20 in Ropice, expressed the will to enter marriage, whereas neither of their expressions seemed to me to be non-free, not serious, in error, or under distress.
Signatures:
Tereza (unreadable) Hana (unreadable) Jakub (unreadable) Radim Kozub (unreadable) (unreadable) Lenka (unreadable)
Petr also conjectures that Jakub may refer to Jakub Olšina from Blockchain Legal. Figure 23. "Wedding on grass" on the same block contains a image of a wedding, presumably the same of the contract. The photo of the man might be the same person as www.linkedin.com/in/olsinajakub/, but a bit younger.
Figure 23.
Wedding on grass
.
The file contains the following text embedded into it:
Danila a Pavel se právě vzali!
which is Czech for:
Danila and Pavel just got married!
So it is a followup to Figure 22. "Hand written contract".
Figure 24.
Onshape ad
. Ad for www.onshape.com/en/, an online CAD company:
#CAD users all over the world are designing in the cloud! Join them by creating a #free Onshape account: hubs.ly/HO3vJ6tO. tx c0bb963cb3ceffc49059f09db94e3fd73caa3b7a8e005160d49e99020ff6b51a, block 426832 (2016-08-25) via cryptograffiti.info. Embedded text:
@Onshape - The Future of Professional CAD
Figure 25.
Pepe the Frog
. ca933de16b6466e40b37c7ee0ec0dcd9a56bc365a567a5fff81ba4927dd61e23 (2016-10-17) via cryptograffiti.info. Embedded text:
In Pepe We Trust
#BITCOINPEPE
Figure 26.
Hello. Yes, this is dog
. knowyourmeme.com/memes/yes-this-is-dog. tx 4b0cd7e191ef0a14a9b6ab1c5900be534118c20a332ff26407648168d2722a2e, block 440418 (2016-11-24) via cryptograffiti.info.
Figure 27.
Ross Ulbricht
. Exact image also reproduced at: ethereumworldnews.com/ross-ulbricht-attorney-dismiss-2018/. tx b25ba2080d15c1277569bd2fee707a216c4e2ee0a1f479349c2309651c261511, block 442225 (2016-12-06) via cryptograffiti.info. Embedded text:
Silk Road saved lives that would
have otherwise been lost on the
streets.
Figure 28.
Tuxedo and rose
. Black and white and intentionally blurred photo of couple, the woman wears a tuxedo, and the man holds a red rose/light-like thing in the middle. tx c67dca17d3e5544d8d2c70d143196e1c1438a09c7371b80086d0a71ec5aec3c8, block 453083 (2017-02-14) via cryptograffiti.info.
Figure 29.
Couple on mountains
. Middle aged couple selfie in front of some mountains. tx 00a64f2ff9aae7a34c21d07b8fc9bad79989f25295ccbddc6fbe73b3685b65a9, block 456370 (2017-03-09) via cryptograffiti.info. The file contains the following Spanish poem, whch confirms that their Spanish looking faces are actually Spanish, perhaps they are at the Pyrenees:
Entre tus brazos y los míos
no hay espacio, tan juntitos
estamos que los pensamientos
son uno.
A veces somos casi dos desconocidos,
raros tan raros cómo distintos,
pero nos engañamos, tú lo sabes yo lo sé,
en realidad somos muy dentro
la misma verdad.
Escondidos en tus ojitos
duermen mis sueños más hermosos,
cuándo los abres frente a mi
se despiertan alegres y rumbosos.
Which translates as:
Between your arms and mine
there is no space, so close together
we are the thoughts
They are one.
Sometimes we are almost two strangers,
strange as strange as they are different,
but we deceive ourselves, you know it, I know it,
actually we are very inside
the same truth.
Hidden in your eyes
my most beautiful dreams sleep,
when do you open them in front of me
They wake up happy and cheerful.
Not easy Google hits so possibly novel.
Figure 30.
Tank Man
.
See also: Section "China".
Searching for the image hash ca4f11131eca6b4d61daf707a470cfccd1ef3d80a6f8b70f1f07616b451ca64e leads to archive.4plebs.org/pol/thread/191157608/#q191162145 which links to the now dead as of 2021: cryptograffiti.info/#ca4f11131eca6b4d61daf707a470cfccd1ef3d80a6f8b70f1f07616b451ca64e.jpg. But
Figure 31.
Mr. Burns You're here forever
.
Mr. Burns from The Simpsons showing a sign:
Don't forget, you're here forever
Still from S06E13 of The Simpsons. A reference to the immutability of the blockchain.
Video 2.
Mr. Burns "You're Here Horever"
. Source. Off-chain source clip for the still.
This transaction is given at Data Insertion in Bitcoin's Blockchain by Andrew Sward, Vecna OP_0 and Forrest Stonedahl. We've decoded it with:
btc getrawtransaction 94e319d09fc236fb9d7a24e60af8f47ed41ca3cc01e9950c925d806153ed8aa3 true | jq -r '.vin[].scriptSig.asm' | sed -r 's/^[^ ]+ //' | sed -r 's/ [^ ]+$//' | tr -d '\n'  | xxd -r -p > tmp.jpg
TODO understand the encoding better. Our indexing scripts Bitcoin Inscription Indexer missed it because the image is encoded on starting on the second constant of the input script and not the first.
This was missed by binwalk because it does not index the valid JPEG signature "ffd8ffdb"... we should patch it... github.com/ReFirmLabs/binwalk/blob/cddfede795971045d99422bd7a9676c8803ec5ee/src/binwalk/magic/images#L107
Figure 32.
Augustana College Old-Main.jpg
.
First tx 1e347cf7521a1318ef31af4f5758efbc45f1bb2a7db9bc1cc469bfe93599eaf7 sets up 48 P2SH outputs and gives ASCII message
Augustana College Old-Main.jpg Reconstruct with data preceding redeemscripts
Then tx 033d185d1a04c4bd6de9bb23985f8c15aa46234206ad29101c31f4b33f1a0e49 redeems those with 48 input scripts that encode the image with ASCII message:
Augustana College Old-Main.jpg Reconstruct with data preceding redeemscripts
Figure 33.
PDF demo
. tx b4f537bc536c392d425af0693e3282bbf697df01debeeaf7f9918b93af6bdd14, block 474646 (2017-07-07) via cryptograffiti.info contains a single page 7.9 KB PDF sample file also present e.g. at: www.studocu.com/en-gb/document/harrow-college-uxbridge-college/assessing-risk-in-sport-unit/pdf-sample-its-nothing-dw/61244699. This image is a screenshot of the PDF made manually to make it easier to view here, the actual inscribed file has been uploaded to: raw.githubusercontent.com/cirosantilli/media/master/bitcoin-inscription-indexer/data/bin/b4f537bc536c392d425af0693e3282bbf697df01debeeaf7f9918b93af6bdd14.pdf. The first lines of the document read:
Adobe Acrobat PDF Files
Adobe® Portable Document Format (PDF) is a universal file format that preserves all of the fonts, formatting, colours and graphics of any source document, regardless of the application and platform used to create it.
Figure 34.
Cat manga
. TODO identify, transcribe japanese. tx 4986e9cd20b75bb534df92e60b232945e18274f4c46d25b8853af9bdda5166b8, block 581526 (2019-06-20).
Figure 35.
Arms crossed
. Nerdy caucasian woman in her late teens/early 20's wearing glasses and a jeans jacked with her arms crossed. TODO identify. tx a55e5e7492848445a9f9ecf55ce566242c9d95e6c46a171fd94a345e8b74c355, block 597374 (2019-10-01) with P2FKH
Figure 36.
Black cat
. No, Google reverse image search is never going to find the exact one amongst billions of pics. tx 8cf28eb9ac221d8cd15298b9ae63eca910b536a5234c133c7e364b29a4e39d21, block 625045 (2020-04-09) with P2FKH.
Figure 37.
Teddy bear
. tx 546124c6ad55acc6e0cd00a66fbd29e9b7df5fe8505e2ebf8470bb44aa35bc16, block 654100 (2020-10-24) with P2FKH. Cost: ~0.002 BTC ~ $25.77 at the time. Transaction made up of 339 * 550 SAT outputs.
Figure 38.
The Starry Night by van Gogh
.
tx 225ed8bc432d37cf434f80717286fd5671f676f12b573294db72a2a8f9b1e7ba, block 685647 (2021-05-31) Stored on SegWit. Googling leads to this hit: github.com/aureleoules/bitcandle by French programmer Aurèle Oulès which is an obscure uploader not known to us before this transaction was found.
tx 8dc2785335c59df6c00257f9b20e5df9b932a717f97066b279e292faba71a67a on block 685737 contains another one, but with a slightly different encoding, presumably Aureole was trying out different things.
Figure 39.
Kitchen mirror selfie in swimming glasses
.
This P2FMS has the peculiarity that each payload constant is preceded by a 04 byte which must be thrown away, we've decoded it manually with:
bitcoin-core.cli getrawtransaction 3110f49fb6047d62e6fa198a0a4b180d9abf7075d6f29472747990ae286295cb true | jq -r '.vout[].scriptPubKey.asm' | head -n-2 | sed -r 's/^....//;s/ 3 .*//' | tr -d ' \n' | xxd -r -p  > tmp.jpg
This transactions is also mentioned at: github.com/bitcoin/bitcoin/pull/28400 "Make provably unsignable standard P2PK and P2MS outpoints unspendable"
Figure 41.
Gulagu.net people
. tx 36e7f004ff22aa1146a00705d166fbca64d174c472a5296ed1f38d4749a74e10, block 710354 (2021-11-19). Rightmost Vladimir Osechkin. Two-stage P2SH inscription.
Figure 42.
Low resolution GIF screenshot of the Bitcoin whitepaper intro
.
The payload starts with: 7b260000 before the acutal GIF, which is why we hadn't found it before using binwalk. TODO what do those bytes mean?
The last payload uses OP_RETURN and encodes the ascii filename:
BTGC:satoshi.gif
TODO what is BTGC?
Figure 43.
A man and his cactus
. tx 4719e7252f4bdefd9f7bdf5058f17af28729b79c303b067eb01c107e57235754 (2024-01-27). Encoded as a data URL for a JPEG image in an OP_RETURN:
data:image/jpeg;base64
Perhaps a meme given the phalic shape of the plant.
TODO decode:
Read the full article
Ludic Science Updated 2024-12-15 +Created 1970-01-01
View more
Maybe Spanish accent, but might also be from some other european language.
Very practical, low-cost experiments.
Read the full article
Getting a list of all currencies from Wikidata with SPARQL Updated 2024-12-15 +Created 2024-11-18
View more
I've had a bit more fun with SPARQL and Wikidata.
This one was way harder than my previous fun with "find the oldest people who won a given prize" (Nobel Prize/Oscar) mastodon.social/@cirosantilli/112689376315990248 because unlike those prizes where all the decisions are centralized, countries are much more complicated beasts, with changing currencies and international recognition.
This was a good experience to see a few ways in which Wikidata is inconsistent, with the same concept being expressed in multiple different ways, e.g. "end time" property of the current vs the superior "end time" qualifier.
Particularly bad is the notion of a "deprecated rank", that should really not exist.
This is exactly the type of semi interactive data munching that I like to do, a bit in the same vein as CIA 2010 covert communication websites and Cool data embedded in the Bitcoin blockchain.
As you might imagine, the secret services use exactly this type of knowledge modelling to do their dirty business, e.g. Gaffer by the GCHQ.
If only I weren't such a rebel, I'd be a perfect fit for the intelligence agencies.
This is the best monstrosity I had the patience to come up with:
SELECT
  ?currency
  (GROUP_CONCAT(DISTINCT ?currencyIsoCode; SEPARATOR=", ") AS ?currencyIsoCodes)
  ?currencyLabel
  (GROUP_CONCAT(DISTINCT ?countryLabel; SEPARATOR=", ") AS ?countries)
WHERE {
  ?country wdt:P31/wdt:P279* wd:Q6256. # is country
  ?country p:P38 ?countryHasCurrency.
  ?countryHasCurrency ps:P38 ?currency.
  ?countryHasCurrency wikibase:rank ?countryHasCurrencyRank.
  OPTIONAL {
    ?currency p:P498 ?currencyHasIsoCode.
    ?currencyHasIsoCode ps:P498 ?currencyIsoCode.
  }
  FILTER NOT EXISTS {?country wdt:P576 ?countryAbolished}
  FILTER NOT EXISTS {?currency wdt:P576 ?currencyAbolished}
  FILTER NOT EXISTS {?currency wdt:P582 ?currencyEndTime}
  FILTER NOT EXISTS {?countryHasCurrency pq:P582 ?countryHasCurrencyEndtime}
  FILTER (?countryHasCurrencyRank != wikibase:DeprecatedRank)
  FILTER (!bound(?currencyHasIsoCode) || ?currencyHasIsoCode != wikibase:DeprecatedRank)
  # TODO makes query take timeout? Why? Needed to exclude PLZ.
  FILTER NOT EXISTS {?currencyHasIsoCode pq:P582 ?currencyHasIsoCodeEndtime}
  SERVICE wikibase:label {
    bd:serviceParam wikibase:language "[AUTO_LANGUAGE],en".
    ?currency rdfs:label ?currencyLabel .
    ?country rdfs:label ?countryLabel .
  }
}
GROUP BY ?currency ?currencyLabel
ORDER BY ?currencyIsoCodes ?currencyLabel
It got quite close to the ISO 4217 list.
I was drawn into this waste of time after I noticed that someone had managed to create the Wikipedia of PsiQuantum which I had tried earlier but got deleted: mastodon.social/@cirosantilli/113488891292906243, and then I made the mistake of having a look at the Wikidata page of PsiQuantum.
Figure 1.
500,000 Transnistrian ruble banknote 1997 series
. This is one of the most widely used currencies which does not have an ISO 4217 code.
Another highlight was 1913 Nobel Prize in Chemistry laureate Alfred Werner who born either in Mulhouse in Alsace, France, or in "Yo no sé qué me pasó" ("I don't know what happened to me" in Spanish), a 1986 song by Mexican singer Juan Gabriel.
Figure 2. Source.
Read the full article