Difference between revisions of "Blood For Trade"

From Game Detectives Wiki
Jump to: navigation, search
[quality revision][checked revision]
m
m
Line 14: Line 14:
  
 
__TOC__
 
__TOC__
 +
== You Are Cordially Invited ==
 
On 11 December, 2019, an admin on the Vampire: The Masquerade Bloodlines 2 discord server posted a community update with a P.S. line reading:"p.s We hear there's something going down at https://www.bloodfortrade.com/ hmm... Suspicious."
 
On 11 December, 2019, an admin on the Vampire: The Masquerade Bloodlines 2 discord server posted a community update with a P.S. line reading:"p.s We hear there's something going down at https://www.bloodfortrade.com/ hmm... Suspicious."
  
Going to the above website and clicking the continue button goes to a video(https://d3of5gsrbb7n06.cloudfront.net/BP56zaJYS1SEWWCzXUZ7PcsVcqXCWUeu.mp4) of a body bag in the background, with an audio play button for an audio file(https://d3of5gsrbb7n06.cloudfront.net/KBKCKRKCUB9Y.mp3). Below the play button is an "RSVP" link linking to an RSVP form(https://bloodfortrade.app.rsvpify.com/)with questions leading to a promotion for a twitch stream:"Meet me during https://www.twitch.tv/outstar stream session (17:00 - 22:00 CET / 8:00 AM - 1:00 PM PST)"
+
Going to the above website and clicking the continue button goes to a [https://d3of5gsrbb7n06.cloudfront.net/BP56zaJYS1SEWWCzXUZ7PcsVcqXCWUeu.mp4 video] of a body bag in the background, with an audio play button for [https://d3of5gsrbb7n06.cloudfront.net/KBKCKRKCUB9Y.mp3 an audio file]. Below the play button is an RSVP link linking to an RSVP form(https://bloodfortrade.app.rsvpify.com/)with questions leading to a promotion for a twitch stream:"Meet me during https://www.twitch.tv/outstar stream session (17:00 - 22:00 CET / 8:00 AM - 1:00 PM PST)"
  
The website is currently being further investigated by Detectives.<br/>
+
The following is a transcript of [https://d3of5gsrbb7n06.cloudfront.net/KBKCKRKCUB9Y.mp3 the audio file]:
 
 
In the website's source code there are a few particularities.
 
# There is mention of the robots.txt file in an HTML meta, which is non-standard.
 
# The URLs of the media files hosted at Cloudfront have strange names. The subdomains are always random but Cloudfront does not modify filenames.
 
 
 
=== Transcript  KBKCKRKCUB9Y.mp3 ===
 
The following is a transcript of [https://d3of5gsrbb7n06.cloudfront.net/KBKCKRKCUB9Y.mp3 KBKCKRKCUB9Y.mp3]:
 
 
<pre>
 
<pre>
 
You don't know me, but I know you. Your... kind.
 
You don't know me, but I know you. Your... kind.
Line 41: Line 35:
 
</pre>
 
</pre>
  
== robots.txt ==
+
In the website's [https://www.bloodfortrade.com/robots.txt robots.txt file]
  
 
The contents of robots.txt is usually meant for search engine bots but the file's contents do not match this.
 
The contents of robots.txt is usually meant for search engine bots but the file's contents do not match this.

Revision as of 18:02, 14 December 2019



Blood For Trade
Active since 2019-12-12
NewExample3.png
https://www.bloodfortrade.com/
Type Official
Creators Alice & Smith & Paradox Interactive
Discovered 2019-12-12

Main Page > List of Investigations > Blood For Trade

You Are Cordially Invited

On 11 December, 2019, an admin on the Vampire: The Masquerade Bloodlines 2 discord server posted a community update with a P.S. line reading:"p.s We hear there's something going down at https://www.bloodfortrade.com/ hmm... Suspicious."

Going to the above website and clicking the continue button goes to a video of a body bag in the background, with an audio play button for an audio file. Below the play button is an RSVP link linking to an RSVP form(https://bloodfortrade.app.rsvpify.com/)with questions leading to a promotion for a twitch stream:"Meet me during https://www.twitch.tv/outstar stream session (17:00 - 22:00 CET / 8:00 AM - 1:00 PM PST)"

The following is a transcript of the audio file:

You don't know me, but I know you. Your... kind.
I'm not a... kindred soul, but I am in the know. I know about the societies crawling in the cracks.
I know what you need.

Maybe you're not ready, maybe you're too squeamish for commerce of this... audacity.
But the nights favor the bold
I dare you to RSVP. Tell the other sharks.
This is going to happen with or without you.
The goods are wrapped and ready.
I have something you want, you have something I want.
This can be mutually beneficial.
Think of me as your remora.

In the website's robots.txt file

The contents of robots.txt is usually meant for search engine bots but the file's contents do not match this.

SZ40
Wheel-KH.ITA2.5/8/9
1-43:7.1-47:2.1-51:6
1-53:9.1-59:7.1-37:6
1-61:7.1-41:6.1-31:7
1-29:9.1-26:4.1-23:6

The SZ40 refers to the Lorenz-machine[1], a machine used to encrypt messages during World War II. The following line describes the how the machine should be configured.
Wheel type is "KH" and the input format is ITA2, configured as 5/8/9. The next lines are the positions of the wheels within the Lorenz machine. These lines contain several wheels per line, seperated with a period symbol.

wheel range value
1 1-43 7
2 1-47 2
3 1-51 6
4 1-53 9
5 1-59 7
6 1-37 6
7 1-61 7
8 1-41 6
9 1-31 7
10 1-29 9
11 1-26 4
12 1-23 6

This configuration can be used on an online Lorenz machine [2].

strange filenames

Coming back to the odd filenames. The MP3 file is being hosted on Cloudfront are not garbled by Cloudfront themselves. The filename of the audio file KBKCKRKCUB9Y.mp3 must have been chosen on purpose.
With the Lorenz machine set to Receive, the text "KBKCKRKCUB9Y" is translated to "SHORTVERSION".
This being the short version implies there is also a longer version.
Set the Lorenz machine to Send and input "LONGVERSION", this is translated to "OY5VEY9E9UT"

Transcript of OY5VEY9E9UT:

(???)
This is exciting and terrifying, like riding a shark by the tail, what will they do.
OK, OK.
* deep breaths *
I am my own law * 3
I know you, it's time we make a deal, I've waited long enough.
I am due, I need, need, NO, fuck no, c'mon no weakness, no fear, do not show the predators fear.
OK, OK, OK
* deep breaths *
- i am my own law * 3
You don't know me, but I know you. Your... kind.
I'm not a... kindred soul, but (I'm in) the know, I know about the societies crawling in the cracks.
I know what you need.

I know things about you that would make a statue of the virgin Mary cry tears of blood.
No, too much, too much.
* deep breaths *
I am my own law * 3
Just know that I know things you don't want out there.

Now that's not a threat, not really, I'm not stupid, not a threat but a promise that getting rid of me is not worth the hassle and agony, especially when working with me can garner such rewards.
He, *giggle& he is dead. He's dead, he's DEAD!
Maybe he overreached, flew too close to the sun, but his clumsy masterpiece lives on, and I control his databases.
Some of you know what that means, the rest of you soon will.
I have something you want.
I'm extending an invitation.
Maybe you're curious, I suggest you RSVP.
Maybe you want to kill me, In which case you should still RSVP.
Spread the word, tell the rest of the sharks.
I have something you want.
You have something I want.
This can be mutually beneficial.
Think of me as your, remora.
And do be careful, suns coming up.


Outstar Twitch Stream

Leading up to the Twitch Stream, a quest appeared on Tender prompting detectives with a fill in the blank titled "Tell Us A Secret":

I 'believe|think|has been told' that 'I|Him|Angela|Malcolm|Outstar' 'did nothing wrong|made a huge mistake'

Additional an email from Tender reminded Detectives about the Stream about to begin (email) Paradox account users also received an email

During the Outstar Twitch Stream on Saturday, 14 December, during the first break, Outstar received a call and went off stream. At the same time, the stream turned to the familiar Tender stream page hinting users to go to the Tender App. The Tender App was updated with a new Quest, with a video and a text prompt. The transcript of the video is below:

As we embark on this journey together, we here at Tender ask that you are honest with yourself throughout this experience: do you often find yourself feeling wistful? Has your appetite changed as well as your sleep patterns? Are you looking to channel your feelings into something more? Art is physical form given to the world of the mind. In every piece we see depicted  our greatest emotions such as love, sadness, fear and anger, to broaden your own ability and freshen your mind. It is good to consider how different artists depict similar ideas. The theme is "Embrace". You are to find each on your own with a little guidance. To begin, this greek myth was from the spanish painter Goya, but he used Roman names.

On researching the hint in the final line, Detectives found the painting "Saturn Devouring His Son". Entering this into the text box completed the quest and a new quest opened titled "Why are you here?". This contained a fill in the blanks response page which read:

I 'overcame|destroyed|lusted for' 'a baloon|a bike|a song' with the help of 'my sorrow|a lewd poem|my pain'