Operation "Gotta get 'em all!"
From http://uncovering-cicada.wikia.com/wiki/TOR_2_ver_2_back_ONLINE#PINGING we got a third onion address which dumps the following message via HTTP:
curl -i --socks4a 127.0.0.1:9050 "http://pklmx2eeh6fjt7zf.onion"
< HTTP/1.1 200 OK
< Date: Tue, 15 Jan 2013 12:44:19 GMT
< Server: Apache/2.2.22
< Last-Modified: Sat, 12 Jan 2013 20:40:28 GMT
< ETag: "380b2-74d-4d31d6c1a0700"
< Accept-Ranges: bytes
< Content-Length: 1869
< Vary: Accept-Encoding
< Content-Type: text/html
<
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Standby for coordinates.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=sQDQ
-----END PGP SIGNATURE-----
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
26.41968, 127.73254
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=U6r6
-----END PGP SIGNATURE-----
|
* Connection #0 to host pklmx2eeh6fjt7zf.onion left intact
Coordinates are in Okinawa, Japan. So WE NEED SOMEONE IN OKINAWA http://goo.gl/maps/KRmyR
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
38.977845, -76.486451
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQIcBAEBAgAGBQJQ8cuvAAoJEBgfAeV6NQkPzjYQAJRGr5ovfviw3vw1DN/M91t2
xinXxaGIhBWUIsKixiaGfafVcY2cAmpDYfADmZMFn1K7K6cgZkMY1UQxyjVS4w0l
wBP0yNODfRnFIXpBqfeGiby+eI97p8aB/HfAfIXdDeDWVaeGITnd5G/2tBy3+TO6
/sYNtFLTVg3HmkwjSK9oYbIGBWNzD0IAO+5zWBYp756H6AQiQlre5IGV4LYRoiNK
fB95hekOVgOSqppmAjSydFd30RqOec/hY/VeSBASf25lmiFxMJKakuNxkK0CHj3I
cQsiRUxUsVSrVzeQHlD4X05+4pvRiwCnVa9oGRyaLbD0ySPfoCFPIbqwZj+zEV42
l6Izyn11wnYRKQTtcTKSM1Kk5yJ8y5lwiGhby5lHzfNiet2hnLtY56JI/dqjqfO1
QVtwo+KUGMq57yKKoCx3lrw71N3igHfiWO41GyiHxaibWupF2h7WVL5NDifx1LhS
ZR1GJVzyY1Lsj3V5NbidLgg9me+pHKuv727Pc+X1SqEve/2IYuHcI2M3eJ2LbHAq
sVuZvdZUhNbIfN26ePgMhUCbL/U6RqLSKW1yfZzqfnC76XKBPFoPT9qJdn0Xhzzd
PuJi7TXI15ejz/GO3BFHP05KaodEWIVeqHYKNQ0rf5JtJw3zL2QED8v5YBJ+P/ow
DO6Q1iuhv4YkcxuF23wD
=7qF2
-----END PGP SIGNATURE-----
|
Another set of coordinates was received 16:50 CET Jan 15: https://maps.google.com/maps?q=38.977845,+-76.486451&hl=en&sll=37.0625,-95.677068&sspn=57.902911,135.263672&t=h&z=17
130 Dock St Annapolis, MD 21401 22 ft N
