ARG Puzzle with 3.5 BTC Private Key Prize, Game Over

[S4VV4S]

Been following along but haven't posted.  I think a wiki is a great idea, and we can mark the users that made "breakthrough" discoveries so the eventual winner can donate to the clues that helped them the most (if they choose, I would for sure)

When it comes to these games it's mostly (well to the most part) about bragging

Agreed, but the prize pool is starting to get up there.

By the time we get to step 5+ it will be much higher
(At least that is what I think).

And yes the prize is good too

[S4VV4S]

The following addresses have all received coins from 1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ:

1sosB9wN5ij84GKfo6Xxx8FWyh5fPXVXu
1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz

-snip-

404 5 1 O 9 # CHCK USE 404! DOB BBD DO NOT DHTTP

thanks for adding

From what I can tell Alice is telling us is not a URL?

Also, I have not made clear what PB stands for but then again maybe it doesn't matter.

[shorena]

Been following along but haven't posted.  I think a wiki is a great idea, and we can mark the users that made "breakthrough" discoveries so the eventual winner can donate to the clues that helped them the most (if they choose, I would for sure)

When it comes to these games it's mostly (well to the most part) about bragging

If I should win Id divide pirates style. 2 parts for me, since however gets the loot gets to be captain 2 parts for OP (as the vessel that made this possible) or any other artist that OP seems fit.  1 part each for every crew member. Ppl that helped out here currently 1 that helped out IRL and 1 for a nice dinner for my wife, since we had wedding day yesterday and I was solving riddles.

[zonkism]

Reposting... because I had an error in the last post...


The following addresses have all received coins from 1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ:

1sosB9wN5ij84GKfo6Xxx8FWyh5fPXVXu
1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz

Based on the transaction chain I can only feel comfortable with these above addresses being associated with the OP.

This means the following transactions are associated with OP


1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .001011 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .001011 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .001011 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .023 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .022 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .021 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .02 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .19 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  -  .01799999 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .017 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .016 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .015 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .014 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .013 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .012 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .011 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .01 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .00899999 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .007 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .006 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .004 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .002 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .001 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .023 BTC
1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .001 BTC

1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ  - .05 BTC

1sosB9wN5ij84GKfo6Xxx8FWyh5fPXVXu - .01010011 BTC

1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD - .00098765 BTC (public note : (no more clues)

1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ - .06 BTC

1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD - .00404 BTC (public Note: http)
1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD - .001 BTC (public not: Public Note: 01100011 01100001 01101110 00100000 01101110 01101111 01110100 00100000 01100100 01101111
                                                                                                                        00100000 01101110 01101111 01110100 00100000 01100110 01100110 01110011)
1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD - .00057235 BTC

1sosB9wN5ij84GKfo6Xxx8FWyh5fPXVXu - .001 BTC

1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .00404 BTC - 404
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .005 BTC -   5
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01 BTC -    1
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01001111 BTC - O
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .0009 BTC -     9
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .00100011 BTC - #
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01000011 BTC - C
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01001 BTC -    H
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01000011 BTC - C
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01001011  BTC - K
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01010101  BTC - U
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01010011  BTC - S
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01000101 BTC - E
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz   .0101001 BTC - R
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .00404 BTC - 404
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .00100001 BTC - !
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .010001 BTC - D
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01001111 BTC - O
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .00100001 BTC - B
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .00100001 BTC - B
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .00100001 BTC - B
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .0010001 BTC - D
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .010001 BTC - D
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01001111 BTC - O
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .0100111 BTC - N
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01001111 BTC - O
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .010101 BTC - T
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .0010001 BTC - D
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .01001 BTC - H
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .010101 BTC - T
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .010101 BTC - T
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz - .0101 BTC - P

404 5 1 O 9 # CHCK USER 404 ! DOB BBD BO NOT D HTTP

[Krona Rev]

The following addresses have all received coins from 1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ:

1sosB9wN5ij84GKfo6Xxx8FWyh5fPXVXu
1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz

-snip-

404 5 1 O 9 # CHCK USE 404! DOB BBD DO NOT DHTTP

thanks for adding

From what I can tell Alice is telling us is not a URL?

Also, I have not made clear what PB stands for but then again maybe it doesn't matter.

I think some of this is wrong.
0.00100001 should be !, not B. 0.01000010 is B.
Again, I got
[0.00404][0.005]@O[0.0009]#CHCKUSER[0.00404]!DO!!!"DONOT"HTTP

[Mister S]

If PB stood for anything, it would probably be Public Broadcast Service.


My guess is the answers are all directly in the image, no second steps, no complicated Cicada style runaround.

[Prospero]

If PB stood for anything, it would probably be Public Broadcast Service.


My guess is the answers are all directly in the image, no second steps, no complicated Cicada style runaround.

Except when she posted on reddit, she called the image a "shared start point". which implies to me, otherwise.

[daedalus2027]

I'm just throwing food for thought

What if this:

s7ovY8tcakz3CmiuN2rh51HXUobwcB19cGDrghuh42HDdJdJvrJUEraOP4iDcIxbMy2nLi31nmtHdEh irLbwb5yufe3TCSvjwoAUrk9FzRe7aeJ62YTo6ABDiFt

is a "Stealth address" and the redbits and bluebits are the SCAN_SECRET and SPEND_PUBKEY?

[S4VV4S]

-snip-

404 5 1 O 9 # CHCK USER 404 ! DOB BBD BO NOT D HTTP

Can I ask how did you get this result?

Thanks

[shorena]

Someone posted several sources for the picture earlier.
They are all a bit different apparently:

4chan:

Code:

stegdetect 1403553226437.jpg

Corrupt JPEG data: 4 extraneous bytes before marker 0xd9
1403553226437.jpg : negative

4 bytes before 0xd9

raw data

Code:

B5 10 00 02

google cache (?):

Code:

stegdetect cryptiCitpyrc.JPG

Corrupt JPEG data: 18 extraneous bytes before marker 0xc4
cryptiCitpyrc.JPG : error: Invalid JPEG file structure: SOS before SOF

18 bytes 0xc4 and invalid structure

raw data 0x18 bytes:

Code:

6D 6E 74 72 52 47 42 20 58 59 5A 20 07 D9 00 03 00 1B 00 15 00 24 00 1F

-> mntrRGB XYZ Ù


18 bytes:

Code:

42 20 58 59 5A 20 07 D9 00 03 00 1B 00 15 00 24 00 1F

-> B XYZ Ù

Reddit:

Code:

stegdetect Uc6VAnV.jpg
Corrupt JPEG data: 6 extraneous bytes before marker 0xd9
Uc6VAnV.jpg : negative

6 bytes before 0xd9

Code:

04 00 00 00

[S4VV4S]

Someone posted several sources for the picture earlier.
They are all a bit different apparently:

4chan:

Code:

stegdetect 1403553226437.jpg

Corrupt JPEG data: 4 extraneous bytes before marker 0xd9
1403553226437.jpg : negative

4 bytes before 0xd9

google cache (?):

Code:

stegdetect cryptiCitpyrc.JPG

Corrupt JPEG data: 18 extraneous bytes before marker 0xc4
cryptiCitpyrc.JPG : error: Invalid JPEG file structure: SOS before SOF

18 bytes 0xc4 and invalid structure

Reddit:

Code:

D:\Dropbox\Dropbox\JustInCase\riddle\stegdetect-0.4>stegdetect Uc6VAnV.jpg
Corrupt JPEG data: 6 extraneous bytes before marker 0xd9
Uc6VAnV.jpg : negative

6 bytes before 0xd9

Brother, why are you still bothering with stegdetect?

Did you check the image I have posted earlier?
It will return negative, yet it has hidden content.....

[zonkism]

-snip-

404 5 1 O 9 # CHCK USER 404 ! DOB BBD BO NOT D HTTP

Can I ask how did you get this result?

Thanks

My conversion script had an error..   So that is not correct.

[shorena]

Brother, why are you still bothering with stegdetect?

Did you check the image I have posted earlier?
It will return negative, yet it has hidden content.....

out of ideas

[S4VV4S]

Brother, why are you still bothering with stegdetect?

Did you check the image I have posted earlier?
It will return negative, yet it has hidden content.....

out of ideas

Same here 

[Yakamoto]

Well small idea (That may or may not be helpful), does anyone thing the asymmetry of the upside-down triangle has anything to do with it?

I dunno, just a wild gander to see if this sparks any ideas. I know very little about cryptology and the sort, but I'm hoping this helps someone out there.

[xELx]

So are we assuming that the "donot" is not a clarification to us using "cannot" earlier but rather an instruction to not use http? Is this implying that we shouldn't be looking for a link or should we try using https?

Check user? is this saying we should be looking more at coin_artist? What about coin_artist's last picture: https://i.imgur.com/7zg1g9E.jpg

Does the binary mean anything here?

[micaman]

Another mental discharge:

A representation of Bohr's Atom

http://pt.wikipedia.org/wiki/Niels_Bohr


His work involves color spectrums:

(that thing about the eyes not seeing could be related to InfraRed or UltraViolet, invisible spectrums)


And we could easily fall into periodic tables:
Pb = Lead http://www.americanelements.com/pb.html



Damn... my head hurts.

[S4VV4S]

Well small idea (That may or may not be helpful), does anyone thing the asymmetry of the upside-down triangle has anything to do with it?

I dunno, just a wild gander to see if this sparks any ideas. I know very little about cryptology and the sort, but I'm hoping this helps someone out there.

Not sure about that, but the yellow triangle in the triangle is making me wonder.....

[S4VV4S]

So are we assuming that the "donot" is not a clarification to us using "cannot" earlier but rather an instruction to not use http? Is this implying that we shouldn't be looking for a link or should we try using https?

Check user? is this saying we should be looking more at coin_artist? What about coin_artist's last picture: https://i.imgur.com/7zg1g9E.jpg

Does the binary mean anything here?

Not sure about that. The OP of the dont use http thing didn't clarify about their findings yet and I didnt find that yet.

[Prospero]

So are we assuming that the "donot" is not a clarification to us using "cannot" earlier but rather an instruction to not use http? Is this implying that we shouldn't be looking for a link or should we try using https?

more likely an .onion address