UPDATES (June 2nd, 2018)

There are three new reports from Forensicator that merit attention:

Did Guccifer 2.0 Plant His
Russian Fingerprints?

Media Mishaps:
Early Guccifer 2 Coverage

Guccifer 2's West
Coast Fingerprint

Also, since the last update I posted, we have seen The Daily Beast produce an article in which an anonymous source has claimed Guccifer 2.0 left the GRU headquarters IP address in a log of a social media operator and an article from Buzzfeed in which an effort is made to reinforce the narrative of Guccifer 2.0 and WikiLeaks having ties.

I have tackled both of these in a recent article.

Updates from February 17th, 2017

Most of Guccifer 2.0's First Batch of Documents Were Constructed With GMT+3 Timezone Set

Recently a new blog has emerged featuring some new analysis of the DataStore and other elements of Guccifer 2.0's first batch of documents. The evidence found does suggest that while editing his first 3 documents Guccifer 2.0's local timezone setting was GMT+3, the same as Moscow as well as Crimea/East Ukraine and Romania (accounting for daylight savings time). However, there is some inconsistency when the other documents in the same batch are analyzed (something that the author of the blog hasn't got to yet it seems).

However, there are unsubstantiated claims in some of the articles there and some of the articles published initially made some claims that appear to have been misinterpretations made in analysis. Fortunately, the author has been responsive to criticism and resolved some of those issues already. A brief review will be published soon, if you want to check this out, it's: Loaded For Guccifer

Origin of Flood's Name Discovered - It's NOT From A Copy of MS-Word Being Used On June 15, 2016

While this new discovery will require some updates and corrections to a few articles and updates to the main page (oh joy!!)... it's not the only update/change/correction needed... there's also the fact that the Flood<->Biden<->West Wing office theory's viability has just been decimated by new evidence discovered by Forensicator.

I've written a very brief outline from my perspective of what I know has been discovered (just as an early warning so people know not to push the possibility of the Flood-Biden-WH-Ukraine meeting correlations):

Guccifer 2.0 Mysteries Solved

Forensicator will be publishing a report that covers a lot more and explains in detail all the evidence found and various discoveries that make it clear that the true origin of Flood's name in Guccifer 2.0's documents has now been identified.

It's interesting how and why this was discovered... but that's a story for another day.

Updates from December 31st, 2017

A few updates have been made to the main page (for mobile devices), I'll get responsive CSS applied across most of the site over the next week or two.

ICYMI: My first article for Disobedient Media was published on December 26th and was republished on Zero Hedge, The Duran, Gateway Pundit and other sites:

Fancy Frauds, Bogus Bears,
Malware Mimicry?

Updates from December 20th, 2017

We're back, no bandwidth restrictions, fuck the haters!

Updates from December 17th, 2017

An over-zealous investigative journalist caused a panic with the previous hosts. While their technical director knew about my sites and was willing to take a stand against snooping the other director wasn't aware of anything and had an investigative journalist try to intimidate him. This caused a panic that ended up with service being terminated.

An article explaining what happened, who was behind it, what they did, the false accusations they've made, the slander made against me, the dishonest way they have described many decent independent media sites, their aggressive interrogative communications and more is prepared.

Introducing Duncan Campbell

There is currently a challenge being made by Duncan Campbell regarding the conclusion about EDT timezones in Forensicator's study of the NGP-VAN archive. However, I question the strength of this challenge and the motives of the challenger. We'll cover this in more detail soon.

Campbell has also said he's written to Stephen McIntyre regarding an issue relating to WInRar 4.2. To quote him:

"Mr Binney and I have written to Mr McIntyre several times, asking him to review his suggestion that WinRAR v4.2 displays time zone settings. He has not replied. WinRAR 4.2 does not display any time zone setting when used to open compressed files. Do you agree? If not, please explain your reasoning and observations"

Stephen McIntyre, responding within minutes via Twitter DM, has stated he hasn't received communications from Duncan Campbell and has asked him to re-send.

Correction: Assange Did NOT Draw Distinction on Hacks versus Leaks - It's just a common misconception.

Dear reader, I owe you an apology... I made a mistake... a correction has been made to the main page.

I had wrote that Julian Assange had stated that publications were from leaks and not hacks. This isn't true. He hasn't actually made a statement specifically drawing that distinction. The article now states that Assange has implied the emails were leaked in contrast to Guccifer 2.0's claims that they were hacked.

Updates from December 14th, 2017

FAQs have had to be removed from the main page for now some articles may go to 403 errors temporarily due to restrictions with the new host. Will aim to get everything restored/resolved by the end of the weekend.

Updates from December 5th, 2017

Articles in progress:

Uretsky, Bernie, Brown & The Breach
Fancy Flaws Or Malware Mimicry?
Political Motivation & Agenda

External Links:

A few videos and articles have been published recently by third parties.

These cover various aspects of the DNC "hack", the Guccifer 2.0 persona and CrowdStrike.

RED ALERT: DEEP DIVE on CROWDSTRIKE: Fake report, FBI connections, Michael Flynn

William Binney Warning:
Surveillance Turns
Inward & Political

Looking for Seth Rich’s Killer? Here’s a Curious Coincidence for You

John Cardillo | CrowdStrike "coincidences" reveal DNC ties

‘This Is Obviously Not a Hack’:
Dems Ignore Technical Evidence
in DNC Leak Case.


Updates from December 1st, 2017

Recently, a fairly well known publication has decided to investigate the Guccifer 2.0 case, even including accounting for some of the research that has come out this year. While the stated intent is to learn the truth about Guccifer 2.0, we can only be sure of the objective when they publish.

I'll post an update when more is known about this.

I've written a new article that covers the absence of relevant evidence that came from CrowdStrike, about it's contradictory claims and the reason why incident-specific evidence should have been captured and reported on (even though nothing of that nature was published by CrowdStrike)

Did CrowdStrike Engage In A Clandestine Leak Investigation?

Updates from November 9th, 2017

RussiaGate Gaslighting & Recent Smears

Some of you will have realized by now that a RussiaGate media campaign was launched recently, the results of which we've seen across the media over the last week.

It's probably fair to assume this was likely in response to Bill Binney (former NSA Technical Director) meeting with the CIA's Mike Pompeo to discuss some of the evidence discovered this year that conflicts with the mainstream RussiaGate narrative.

Legacy Press Smears VIPS Report After
CIA Director Meets With Bill Binney


The FBI's Shadowy Past & Why Mueller Will Not Fully Investigate The Alleged Hacking of The DNC

I've written a new article about Shawn Henry, Robert Mueller, their history at the FBI, Sabu, Lulzsec, Anonymous, Guccifer 2.0, "acts of war" they oversaw and more...

Henry, Sabu & Guccifer 2


DMs Added

I've added some missing DMs between Nevins and Guccifer 2.0.

I've also added Raphael Satter's tweeted screen grab of part of a conversation he had with Guccifer 2.0 (Nothing new unfortunately, just the same claim he made elsewhere that he was WikiLeaks source, even stating that he doesn't know if/when WikiLeaks would publish - a strange claim to make considering WikiLeaks had already published emails that Guccifer 2.0 claimed to be the source of in the month before he stated this!)

Updates from October 30th, 2017

I've written a new article countering claims of collusion between WikiLeaks and Guccifer 2.0 (as proposed in a New Yorker article titled "Julian Assange A Man Without A Country"), the new article is: "Khatchadourian's Collusion Delusion".

Steve Cunningham has recently posted an article up titled: "Florida Journalist Has More DMs with Guccifer 2.0" showing that there were a few more DMs between Guccifer 2.0 and Aaron Nevins that I haven't archived and transcribed yet. - I will add these soon but for now, if you want to see the other DMs, go check out the article.

I will be making some adjustments regarding content flagged as disputed soon, more details on that in the next update.


  • further discoveries have been made both in relation to files and to an individual I've reported on previously, I won't go into detail for now as the data is still being parsed/validated/etc. but there will be some new information to report on soon.

  • someone has sent out FOIAs to DHS to request documents from agencies relating to the Guccifer 2.0 case, it's still at an early stage, if anything informative emerges I'll be sure to post an update with more details and copies of the documents received.

Updates from October 24th, 2017

It seems I'm around the 3000 mark on 'followers' on Twitter, so just want to say...

The support, assistance & encouragement from many of you has gone far beyond what the 'follower' title suggests, many of you are friends, co-contributors, fellow citizen journalists/researchers and so much more.

If nothing else, I owe many of you my gratitude, so, THANK YOU to everyone.

Regarding the road ahead, I'll be keeping the G2 site updated but will be looking to expand operations to deal with more than just Guccifer 2.0/RussiaGate in the New Year. I'm currently juggling with a few ideas relating to citizen journalism, independent media, accountability of mainstream media, detecting organized social media sockpuppetry and more.

For now though, there are a few more articles to write and publish.

The first of these will be posted here within the next 24 hours.

Updates from October 3rd, 2017

Washington Post published an article containing what I suspected to be specious claims.

I decided to inquire...

Facebook Detected Russian Hackers
Setting Up Guccifer 2.0 Account?

Stephen McIntyre has been taking a closer look at the cf.7z archive (the archive released when Guccifer 2.0 claimed he had hacked the Clinton Foundation). However, contrary to my conclusions, McIntyre has made discoveries that he states are likely to be indicative of a genuine hack/hacker:

Guccifer 2: From January to May, 2016


I've noticed some file modification timestamps in that archive from before the DNC was supposedly first hacked (Summer 2015) and am wondering whether we're seeing timestamp preservation, etc. in parts but haven't had time to analyze the files myself. I'll look into this during the week ahead.

Finally, last night, I published the results of a study conducted on Guccifer 2.0's Tweets and WordPress activity:

Data From Twitter And WordPress Is Giving Intelligence Committees The Opportunity To Gain Insights Into The Real "Guccifer 2.0"

The results suggest that Guccifer 2.0 was most likely operating in US timezones.

Some have suggested this could be scheduled. I suspect we'll likely find analysis of live DM conversations will be able to put that theory to rest so will probably pursue that soon too.

Check back for more news & updates...

Updates from September 23rd, 2017

It's been 3 weeks since I've updated and quite a lot has happened.

I posted a nice article for a change (I wanted to write something positive), but not before first slapping down some sillyness from TechDirt's Karl Bolt...

Thank You!

Dirty Techniques

...then came news that Robert Mueller, the House & Senate Intelligence Committees, House & Senate Judiciary Committees as well as Deputy Attorney General Rod J Rosenstein had all been sent a report by Skip Holden notifying them of many of the discoveries made by independent researchers as well as a number of issues relating to the JAR and ICA reports from December 2016 and January of this year...

Focus On The Decision-Makers
They Have Been Informed

Non-Existent Foundation for
Russia Hacking Charge

Decision Makers Have Been Informed Of Evidence Against Russia Hack

(Disobedient Media)

...this encouraged me to finally carry out the 5th of my escalation phases - to bring the issues to the attention of the international community via their embassies in my country (UK) - as well as keeping up with the usual chores...

Phase #5

Is Salon's Sheffield
Skipping & Spinning?

Skip then followed this up by taking things further - reaching out to United Nations members & more...

United Nations


There has also been more Guccifer 2.0 & DNC Hack related research coming out. Some of which has come from Stephen McIntype.(@ClimateAudit) where he has analyzed Wikileaks email dates in relation to CrowdStrike's involvement with the DNC network and Guccifer 2.0's "cf.7z" archive, released following a supposed hack on the Clinton Foundation.

This was followed up by Forensicator, who was intrigued by McIntyre's findings and subsequently provided additional analysis too via an article titled: "Guccifer 2.0 CF Files Metadata Analysis".

Thanks goes out to Steve Cunningham for reminding me of a few G2 comms that needed adding.

Language analysis contents have been updated.
Two new sets of DMs have been added.

Updates from August 28th, 2017

The first of these gives a good recap of some of the technical evidence that has come out this year. The second is Redacted Tonight, featuring comedian Lee Camp, covering the memos from VIPS members and the recent article that featured in The Nation.

I had been promising a positive, up-beat article, something more uplifting than bashing the writers that have been assailing Patrick Lawrence's article in The Nation lately, so, I've posted one covering all the good things that have happened lately, aptly titled "Thank You!"

There are more things I'm working on but the element of surprise would be ruined if I gave details out at this stage, so for strategic purposes, I'll give more details when those are complete (some time in the next couple of weeks).

You will also likely hear more from other parties in the very near future but I can't say how/when that will occur as it's not really a process that concerns me directly or that I have any direct involvement in.

Updates from August 14th, 2017

Have cleaned up the section regarding Warren Flood and improved quality in a few other areas thanks to some helpful advice and healthy criticism recently received.

I've posted up two new articles to dissent the dissent against the dissent of the fake Guccifer 2.0 narrative.:

The First Attack Dog Steps Forward
New York Magazine (10 Aug 2017)

The DNC Responds To
The Nation Article

...and I'm thankful to see that I'm not alone...

New York Magazine Attacks The Nation For Questioning Russian Hacking Narrative

(Elizabeth Vos - Disobedient Media)

Update: Anyone Who Questions The Russia Narrative Is A Conspiracy Theorist

(Michael Tracey - TYTNetwork)

DNC Makes Unbelievably Feeble Response To Latest Russiagate Debunking Evidence

(Caitlin Johnstone)

Updates from August 11th, 2017

I can at least now say that, after 173 days since the initial discovery, the deliberate placement of the "Russian fingerprints" has now made it into the mainstream:

A New Report Raises Big Questions
About Last Year’s DNC Hack

Why Some U.S. Ex-Spies Don't
Buy the Russia Story

Thank you to Skip Folden, Patrick Lawrence & all VIPS members for helping to get this information to the surface.
Thanks also to The Nation & Leonid Bershidsky (Bloomberg View) for reporting on this.

h/t: u/tvor_22, whose analysis of RSIDs helped validate the deliberate process used to taint the documents..


Regardless of any download speeds achievable on the Internet today, the following points still apply::

1) The speeds observed are most consistent with USB2.0 transfer speeds.
2) There are FAT filesystem anomalies in the files (such as you'd get from moving files to a USB stick)
3) The timestamps remained persistently in the Eastern timezone.

Updates from August 6th, 2017

I've posted a new article up titled "Guccifer 2.0 - Six Months In" that summarizes what has been discovered so far and covers topics including Forensicator, VIPS interest & memos, timestamp/meta-data integrity considerations, the various types of attacks being used to try to undermine reporting on the new discoveries (and how to handle them), various topics that should not be conflated with the Guccifer 2.0 persona (because such links aren't substantiated at all) and more.

There's a good video on YouTube via 'BlackPilled' that gives an overview of quite a few of the things covered on this site in a way that makes the information covered very easy to process, it may be handy for those that don't want to have to read a lot to get a good general overview of what is a complicated, multi-faceted subject:

Obligatory "Flood-Innocence" Warning:
For those that aren't aware, Flood's name may be more of a hint at where a laptop used by Guccifer 2.0 could have come from than actually being the identity of the perpetrator, it's worth noting that the only place where his name should have been used in conjunction with company name GSA is at the White House - and that would have been back in 2010-2011


I may be writing a few articles elsewhere soon about non-Guccifer 2.0 related topics.

I'll post an update here with the details as and when those are published.

Updates from July 16th, 2017

Forensicator Updates

The Forensicator's analysis has opened eyes, got people asking questions and several people have been replicating/validating (and trying to challenge) the findings. This, in turn, has given people more confidence on this topic..

Some recent videos covering this have come from H. A. Goodman and Tim Black (who discuss the findings on "No Sell Outs") as well as Rick Amato's Politics & Profit.

The site that first broke the news was, of course, Disobedient Media, an independent media outlet I personally witnessed have several staff work extremely hard, some losing sleep on multiple nights, just to make sure their reporting was concise and valid. - I can't thank them enough for giving Forensicator's analysis the coverage it deserved and perservering with a technical analysis that was essential for them to understand in order to report on it properly.

Some sites ran with it as-is and gave attribution without adding spin or unrelated topics into the equation. ZeroHedge was a good example of doing that well.

Unfortunately, there were many versions of the story that added partisan spin or engaged in baseless speculation about Seth Rich despite us cautioning against it!. - We cautioned against it for a good reason and by not heeding our advice, those that engaged in it did the opposite of helping get justice for Seth.

The Forensicator Articles So Far:

Guccifer 2.0 NGP/VAN Metadata Analysis
RAR Times: Local or UTC
MB: Mega Bytes or Mega Bits?

Updates from July 9th, 2017

Introducing: The Forensicator and the Digital Forensic Analysis of Guccifer 2's NGP-VAN Archive

As some of you may know, over the past few weeks I've been in contact with someone who has been working on a digital forensics analysis of the NGP-VAN archive that was released by Guccifer 2.0 in September of 2016.

It's now time to introduce you to the site where you can find that analysis.

For those that can, please validate (or challenge, where relevant) the findings.

The author is keen to get feedback on their efforts so far..

The Forensicator

Updates from June 23rd, 2017

  1. Independent Seth Rich Investigations
    Over the last 2 months, I've been privileged to have access to a couple of research groups (as many as 30 people in each) communicating over Twitter that have been very resourceful and that help each other to find & validate information for their projects. I know some of the researchers are working very hard to get answers about Seth Rich, even attempting to track down his former roommates. They also have a list of 40 questions they're trying to get answers to. BullTruth magazine has an article on them and their recent efforts which I recommend checking out for anyone interested.

  2. Washington Post & The Latest Deep State Propaganda
    The new Washington Post article about Putin is a prime example of propaganda in the mainstream press, if I can find time I'll write an article breaking down the bs. For now, I'll just point out that the only real revelation in relation to Putin was that Brennan's source of intelligence (as opposed to evidence?) is a Kremlin insider. - Almost all of WAPO's revelations were actually about the activities of the Obama administration, intelligence agencies & USIC leaders (some of which have reputations for stone-walling, lying or worse).

  3. Robbin Young DMs - Evidence Dispute Page Updated
    I've updated the dispute page in relation to Robbin Young to include details of Robbin releasing new 'uncropped' DMs as well as subsequent analysis by Hannibal Moot (BullTruth Magazine).

  4. Guccifer 2.0 : DNC/CrowdStrike's "Russian Hacker"
    Besides my recent article that tries to make sense of Henry & Alperovitch's contradictory, specious claims in an article released on 14 June 2016, there are numerous reasons to suspect CrowdStrike of conspiring with the DNC leadership to create the fake Russian hacker persona. - I've listed 15 of them, along with a few other points here.

  5. Guccifer 2.0 : Digital Forensics Analysis
    Wouldn't it be interesting if there was something that could show G2 was likely to be operating in the Eastern Time zone and appeared to have initially collated files over a LAN connection? - Stay tuned...

Sources, contacts, followers & supporters:
Without the invaluable help & support I've had from many of you my efforts here would mean absolutely nothing and I would be invisible. Please know I really appreciate your help and that I don't take it for granted. Thank you to all of you for everything you do.

In Europe?
If you're in Europe, please consider signing the Whistle Blower Protection petition.

Updates from June 15th, 2017

New Article Published

New article out: "The Washington Post Article on the DNC Hack - Fact or Fiction?"

Yesterday, I also made a statement asserting that Shawn Henry and Dmitri Alperovitch are very likely behind Guccifer 2.0 or are connected to those behind the persona. - I've been sat with their names for over 2 months and considering the Washington Post article analyzed in the article above, it's hard, from my perspective and with all the research I've done over the last 6 months to see how it could have really been carried out by anyone else.

I'm currently working on an article covering deception, propaganda, manipulation & perception management (titled "Information Warfare & The Perception Management Industry"), once this is published, I will move on to publishing another new article in relation to further evidence that has been discovered.

New Guccifer 2 DM Related Articles

BullTruth magazine's 4th in the series:
The Guccifer 2.0 Chats — The Final Chapter?

Steve Cunningham via RightSideNews:
Guccifer 2.0's Darling Robbin Young Continues to Disclose Images of Chats

Updates from June 2nd, 2017

New Disobedient Media Article
For any that haven't seen it yet, Disobedient Media have a new article out: "Did Guccifer 2.0 Fake “Russian Fingerprints?" and even if you don't want to read an article that covers the stuff I've been doing (understandable as you hear enough of that from me directly!!), you might want to check them out anyway as they've covered various topics that are likely to be of interest to quite a few people that visit this site.

In light of some very fair observations made in the article highlighted above, I have made some changes to the "Evidence of Intent" articles and references to them across the site so that the titles are now more specific to the scope of what the evidence there actually covers.

Latest Articles

I've published 2 new articles, a sanity check on some of the chaos surrounding Guccifer 2.0 & an attempt to explain in plain English the processes Guccifer 2 used to create his first batch of files.

"New" NGP-VAN Files?!

The "new" NGP-VAN archive going around - seems to be bloated by 400Mb through duplication (there are folders and archives of the same content within the new archive).

I did wonder if there was anything I might have missed so I also used UltraCompare on the two different directories (with all archives extracted) and that only resulted in discovery of the 4 unique files (the 'lock' files I'd mentioned on Twitter recently) which account for 367 bytes of the 400Mb increase.

NOTE: I was unaware of the source of this new archive until after I'd already initially inspected and commented on it. I will continue to refrain from offering any public opinion on the source and will just focus on information.

Relevant PSA: If you find a USB stick (as was claimed regarding the source of the new archive), consider the risks of malware. If you find it conveniently where you're the most likely person to discover it (eg. discarded on your driveway, outside your house, etc), be weary that it could have malware on it with you as the intended victim, it's a common method of infiltration because of human nature, people are curious and lot of people end up plugging it in (often to their main computer) to have a sneak peek at what's on it.

Updates from May 29th

More DMs Added

New DMs have been added: Anon-Source-1 | Lee Stranaham | HelloFLA

Guccifer 2 and the Podesta Emails

Having checked through Guccifer 2's first forty documents allegedly hacked from the DNC, @jimmysllama has discovered that there may be a problem with the premise they're from the DNC. - For more details check out the post at: https://jimmysllama.com/2017/05/28/9867/

Guccifer 2.0, The DCCC Voter Turnout Model & Aaron Nevins - More DM Manipulations!?

Hannibal Moot of BullTruth magazine has been applying some well-placed skepticism to more DMs that have been published recently. - It turns out that the HelloFLA DMs exhibit the exact same anomaly that applied to Robbin Young's DMs.

The full series so far:

The Guccifer 2.0 Chat Hoax pt. 1

The Guccifer 2.0 Chat Hoax pt. 2

The Guccifer 2.0 Chat Hoax pt. 3

UPDATE: I've attempted to contact HelloFLA via DMs to inquire about the anomaly observed, about the 250Mb and 2.5Gb discrepancies in reporting (250Mb was what he'd reported in the past but the reports that came out asynchronously across the MSM recently state 2.5Gb) & also about the exclusivity of the data in the DCCC documents (as it looks like most of it was based on data already available to both parties, so the notion of the turnout model, etc. being worth millions is highly questionable). (It's also far more relevant to congressional races than to the general election).

Hannibal Moot has confirmed over Twitter that he has also contacted HelloFLA since discovering the anomalies.

Updates from May 28th

If someone throws a name at you as being an identity behind Guccifer 2.0, ask whether they would have had access and the capabilities demonstrated - not many will fit all 3.

  1. Would that person have intentionally fabricated "Russian Fingerprints" on the first 5 documents they released in an effort to undermine leaks by framing them on Russia? (Did they have the motive or are they directly tied to someone that did have motive at that time?)

  2. Would they have had any ability to access DNC documents without hacking? (G2's breach claims were discredited and could never be independently verified, yet he still had access to files AND could only ever get files from the Democratic party)

  3. Would they be technically capable of carrying out a professional cyber-misdirection campaign that managed to fool the USIC & cyber-security industry for 8+ months? (What has now been exposed about Guccifer 2.0 suggests the operation involved counterintelligence and cyber-security expertise)