CNASR

Coalition of the North American Socialist Republic (CNASR) flag

Note: this page is continually being updated with data from Lindell files, Solarwinds, the 1378 Huawei YouTube channel, and the Twitter account @u7ezgq89sOqZXJU. Full disclosure is a work in progress during documentation archiving.

Help is needed searching archive.org and other references to find the timestamps of the videos that were uploaded to the G McS channel in order to build an accurate timeline.

CNASR conspiracy is the Coalition of the North American Socialist Republic (CNASR) being a CPC network embedded in the United States, having over 2000 activate members.

Conspiracy

CNASR is allegedly involved in hacking operations from 2020 to 2021 in the United States, involving the SolarWinds hack, the Nashville Bombing, the Nathaniel Sergio, Enrique Tarrio, Robert Cortis, and Jade Sacker. CNASR planned operations known as Electric Rain and SunStorm using CyberJavelin operatives.

Criticism

Critics of the CNASR conspiracy state that the documents, YouTube channels, and Twitter accounts that were discovered are the artifacts of a LARP, suggesting that an individual or group of individuals fabricated and edited the artifacts in order to start an artificial conspiracy. A defense of the CNASR conspiracy being valid is based on the timeline of discovered information regarding the 754791756qq.com domain name, which was created and registered on January 2, 2021.

The URL http://www.ahjs.gov.cn/content/detail/5fe5e10f7f8b9af6758b4586.html was discovered multiple times in CNASR hidden messages. The URL leads to a page on a Chinese government subdomain that was published on December 25, 2020. The page contains the first discovered mention of the domain name 754791756qq.com and the jsjxw2015@163.com email address, which are key pieces of information in the CNASR conspiracy. Provided the 754791756qq.com domain name had no previous owner, the implication is that the registration of 754791756qq.com was premeditated and that the CNASR conspiracy is not fabricated by someone with read-only permissions to the ahjs.gov.cn website.

Disclosure

Disclosure of CNASR operations was revealed through Reddit after researching hidden messages found in various social media accounts on YouTube and Twitter involving a series of cryptic videos surrounding the 2020 Nashville Bombing.

S McG channel

On December 25, 2020, shortly after Anthony Quinn Warner blew up downtown Nashville at 12:30pm UTC, surveillance video entitled Nashville Explosion 12/25/20 was uploaded to the S McG YouTube channel at 4:41pm December 25, 2020 UTC. The account that owned the S McG YouTube channel was created on May 26, 2014. The account owner received the footage third-hand. The footage likely came from a security camera located above Studio 154. The S McG channel was brought to Twitter audiences' attention on December 25, 2020 by Twitter user @FordFischer, who mentioned that the Twitter user @TA32556798 posted the same video of the Nashville explosion on Twitter. The Twitter account for user @TA32556789 was created in December 2020 and the tweet containing the video of the Nashville explosion was posted at 4:52 PM December 25, 2020 UTC via the Twitter Web App.

G McS channel

A cached view of the YouTube channel shows that the name was changed from G McS to S McG

On December 26, 2020, another YouTube Channel by the similar name G McS was created and began being populated with 12 cryptic videos. After at least 3 videos were uploaded to the channel, the name of it was changed to S McG. Soon after, the account and channel was deleted. Before it was deleted, the G McS YouTube channel had uploaded 14 videos:

1. 1.1.2_hammer_go
2. 3s.VOD
3. 1995__CARAVAN
4. 11.2.20-Gohstie
5. 6JAN_CARAVAN_PLN
6. RQ_HIT_SOLAR.avi
7. http://torpastephp3x73w.onion/wuvxzkjI/
8. dark temporary
9. elec_rn_1p_summer_gallery
10. 5_sounds_soon
11. pw: jsjxw2015
12. NC_map_color_phase_soon
13. Comp_br005_cold
14. http://torpastephp3x73w.onion/emlFSC5A/

These videos contained various clips, subtitles, links, and QR codes leading to CNASR documents. Though the original channel was deleted, a Reddit user was able to download the videos and upload them to the the backup channel entitled Gill Bates. A second backup has been uploaded to Vimeo.

Video 1: 1.1.2_hammer_go

1.1.2_hammer_go was published on December 26, 2020 and has a runtime of 52 seconds.

The first portion of the video is a clip from a YouTube video entitled LEWIS IS DEAD - BRUCE WAYNE / FERRARI MODULO from the channel LEWIS IS DEAD.

The end of the video shows an image and the text “CAMCORDER TRUTH JIHAD”.

Video 2: 3s.VOD

3s.VOD was published on December 26, 2020 and has a runtime of 12 seconds.

The substring "3s" contained in the video title has no discovered meaning. It possibly is referring to the frame rate of the video.

The video is 12 seconds long and contains 4 frames of a solid color at 1 frame per 3 seconds. The colored frames are in the following order:

1. Black
2. Red
3. White
4. Blue

Video 3: 1995__CARAVAN

1995_CARAVAN was published on December 26, 2020 and has a runtime of 6 seconds.

The first portion of the video displays a graphic of the CNASR flag. Underneath the flag graphic is Chinese text indicating a bitcoin wallet ID and a request for $50 USD before a document will be released.

The second portion of the video shows a QR code.

Video 4: 11.2.20-Gohstie

Ref#: 20201102-REVMEMO was found using data extracted from 11.2.20-Gohstie

11.2.20-Gohstie was published on December 27, 2020 and has a runtime of 16 seconds.

The substring "11.2.20" contained in the title of the video is a reference to the date November 2, 2020.

This first portion of the video shows a blurred clip of 6 people seated in a panel format.

The second portion of the video is a frame displaying the url https://pastebin.com/htpfTbA9, which is a pastebin file titled 21r5 containing the following contents:

http://bcloudwenjxgcxjh6uheyt72a5isimzgg4kv5u74jb2s22y3hzpwh6id.onion/d1/URI:CHK:leqcfs5he6jg62cqslvqsfov54:32cvqrhwswrxaqstrxugwuffyyttdbpdv4u756md7rtj2b2fgwoa:3:10:353241/Screen_Shot_2020-12-28_at_12.55.28_AM.png

The contents of the pastebin lead to the file Screen_Shot_2020-12-28_at_12.55.28_AM.png which is an image of CNASR Document Ref#: 20201102-REVMEMO. This document is the first mention of operation "CyberJavelin".

Video 5: 6JAN_CARAVAN_PLN

6JAN_CARAVAN_PLN was published on either December 28, 2020 or December 29, 2020 and has a runtime of 30 seconds.

The substring "6JAN" contained in the video title is a possible reference to the date electoral votes are counted by the United States Congress.

The first portion of the video contains a clip showing a Vizio monitor VA19LHDTV10T that has a still image with the text “Airplanes & Airports” scrolling from right to left. To the left and right of the Vizio monitor were two speakers. The film being played on the Vizio monitor is entitled Awesome Airplanes , released in 1994 by Simitar Entertainment. The source of this clip is from a video entitled Crappy 1992 Labtec speakers meet creepy VHS animated intros from the VWestlife. YouTube channel.The motive or hidden meaning behind the editing of the video has not been discovered.

The second portion of the video contains a clip of a worker assembling a kind of foundation using metals.

The third portion of the video contains a still image of a delivery truck with a CNASR flag on the side. The still image contains text in the bottom right corner that translates to: “DON’T BE NEAR THE RED LAKE HOUSE”.

The fourth portion of the video contains a still image of text that translates to "DEPOSIT $45 USD TO THE FOLLOWING BTC ADDRESS. ON THE SERVER THERE WILL BE A 1.2GB VIDEO FILE" and a QR code.

Video 6: RQ_HIT_SOLAR.avi

RQ_HIT_SOLAR.avi was published on [DATE] and has a runtime of 1 minute and 21 seconds.

The pastebin URL contained in the video RQ_HIT_SOLAR.avi leads to mrop2.png.

The title has no discovered meaning. The substring "SOLAR" contained in the video title a potential reference to the SolarWinds hack.

This first portion of the video is a clip recorded by someone standing at a higher vantage point near 3 tall antenna towers. The camera zooms in on an aircraft and then zooms out to reveal the 3 antenna towers in the foreground. In the background several miles away, there appears to be an explosion.

The second portion of the video shows 3 pieces of data:

1. A QR code containing the data bitcoin:1E8X3uvamLY4zTi2nrco38fATnRSfkP86B
2. The pastebin URL https://pastebin.com/mFvcF6JG
3. The Chinese "以下上传已由其他客户付费", which translates to "The following uploads have been paid by other customers"

The pastebin is a file entitled "tg5" and has the following contents

http://iuploadi5zdzzx22mxgz7tgsj3z5av2szc76iymunuvvbfmqtmufplad.onion/download/5827619342670365385/mrop2.png

File requested and paid by user on telegram

The URL in the pastebin directs to a mrop2.png.

Video 7: http://torpastephp3x73w.onion/wuvxzkjI/

snt.png extracted from CAS_EYED.zip containing what is known as "The CNASR Payroll Document"

http://torpastephp3x73w.onion/wuvxzkjI/ was published on [DATE].

The title is a tor URL leading to a torpaste file entitled "CAS_EYED" and contained the following contents:

https://ufile.io/azhkzqlf

The contents of the torpaste directed to a file sharing site containing 2.6Mb zip file entitled "CAS_EYED.zip". The zip file contained 3 files:

• __MACOSX (indicating the compressed file was likely created on a Mac machine)
• f.mp4
• snt.png

f.mp4

The f.mp4 video shows a video of the evening sky during sunset. A glowing orb in the sky is visible. The camera shakes until the camera pans downward and stops recording. The string "ELCTRC_RN_OR_COMS" is visible in the bottom left corner, and the string "3261A" is visible in the bottom right corner.

The substring "ELCTRC_RN" contained in the bottom left corner of the f.mp4 video is an abbreviation for the CNASR operation "Electric Rain".

The substring "OR_COMS" contained in the bottom left corner of the f.mp4 video has no discovered meaning.

The string "3261A" contained in the bottom right corner of the f.pm4 video has no discovered meaning.

Video 8: dark temporary

dark temporary was published on [DATE].

8of8.png was found via a pastebin contained in the dark temporary video.

The title of the video has no conclusive meaning, but has been interpreted to mean that someone will be temporarily ceasing communication.

The first portion of the video shows a sequence of solid colors at 1 frame per 3 seconds in the following order:

• Black
• Red
• Black
• Red
• Black
• Red

The second portion of the video is a white frame with the pastebin URL https://pastebin.com/tndz08MG positioned in the top center.

The pastebin tite is "SYSOUT" and contains the following contents:

http://bcloudwenjxgcxjh6uheyt72a5isimzgg4kv5u74jb2s22y3hzpwh6id.onion/d1/URI:CHK:7ms5pgckrahvwodvtvfngtd2f4:76rjhokxazsjcqh2bdmdu6xuuolimg52qjch2jj5ef2k7r3h5eka:3:10:257818/8of8.png

The URL contained in the contents of the pastebin direct to image 8of8.png.

Video 9: elec_rn_1p_summer_gallery

The substring "elec_rn" contained in the video title is an abbreviation referencing the CNASR operation "Electric Rain".

The substring "1p_summer_gallery" has no discovered meaning.

The first portion of the video displays a solid red frame with the pastebin URL https://pastebin.com/WETUYwwL in the bottom right corner.

The second portion of the video shows a screenshot of a Chrome browser with the login portal of http://www.hndyjyfw.gov.cn/login.html.

The third portion of the video is a clip of a person scanning a passport via a USB connected scanner attached to a Lenovo ThinkPad laptop computer. The sticker on the passport contains the following text:

江西护照
China JiangX
TYPE B Chip
ISO 14443 4
YUCHUN

Video 10: 5_sounds_soon

4254534.jpg

The first portion of the video shows a sequence of solid colors at 1 frame per 3 seconds in the following order:

• Black
• Red
• Black
• Red

The second portion of the video shows a solid yellow frame with the pastebin URL https://pastebin.com/62mPTyBS in the top center portion of the frame. The pastebin title is "Untitled" and the contents are the following:

http://bcloudwenjxgcxjh6uheyt72a5isimzgg4kv5u74jb2s22y3hzpwh6id.onion/dl/URI:CHK:4676klmf54o3yidn2z4fn22isq:drbxfwmzqvszzhhtnmp2g2ctd4rk3aupyhw7zljeaw43opzdtnga:3:10:224838/4254534.jpg


GOING DARK FOR NEXT 3 DAYS

MI ACTIVE MSR 

The URL in the pastebin directs to the image 4254534.jpg.

Video 11: pw: jsjxw2015

The substring "pw" contained in the title of the video is the abbreviation for the word "password".

The substring "jsjxw2015" contained in the title of the video is a password for the password protected CNASR Rebuilding America PDF document.

The entire string contained in the title of the video is a valid password for the the username the username jsjxw2015@163.com. which is a valid username for the site 3g.163.com. The account is validated with 2FA as indicated by the login message "please your mobile phone type ********29 for security validation" and the input prompt for a 6 digit code.

Video 12: NC_map_color_phase_soon

NC_map_color_phase_soon was uploaded on [DATE] and is the longest CNASR video known to date.

The title of the video has no discovered meaning.

The video starts with an overlay of the string "BR005" in red letters in the center of the video that disappears after 3 seconds. The text "CNASR" a yellow Hammer and Sickle is visible in the bottom right corner throughout the video.

The string "BR005" is a reference to Eva flight BR005 which makes routine passage between Taoyuan International Airport (TPE) and Los Angeles International Airport (LAX) airports.

This video is an informational broadcast describing the United States' relationship with the Chinese economy and was uploaded with the following captions:

The US congress has reached an agreement on the $900 billion epidemic assistance bill.
This is also in the past 35 weeks since March this year.
The US has put more than 18 trillion US dollars into base currency liquidity into the market.
And various stimulus programs to compensate for the systems vulnerability.
Turn on the US dollar banknote printing machine again.
Although this latest stimulus bill aims to deal with the new coronavirus epidemic.
However, through the previous stimulus plan,
it can almost be seen that the US economy may still be unable to cope with the delay of the new coronavirus vaccine.
Goldman Sachs stated in an emergency conference call in March this year.
50% of Americans will be infected with the new coronavirus (150 million people).
There is a view that some people on Wall Street are the closest to the US dollar banknote printing machine.
Seems to be taking advantage of the new coronavirus
to obtain huge wealth through large scale release of water (LIQUIDATION??)
and most people in the United States will continue to be shrouded in the shadow of the virus.
This we have passed the US economy since March this year.
Did not take epidemic prevention seriously.
Even the phenomenon of falsification of epidemic data was once evident
TV Asahi said.
US CDC conceals the actual number of Americans infected.
The US financial website 'Zerohedge' earlier cited
Expert Charles Hugh Smith wrote that
Many systems in the United States that are considered robust are actually fragile
Even the coronavirus may crash the US healthcare system
The number of beds available in the US hospitals is small
Others want to know who will pay this astronomical bill
These bills will be given to those receiving treatment due to severe cases of the new coronavirus
Because the US Medical System usually generates bills of more than $100,000 in a few days
Canít pay $250,000 per patient in the Intensive Care Unit.
Fees at or above are regarded as free medical care.
In other words, Americans may pay high medical expenses because of inaction.
Once infected with the new coronavirus or facing the possibility of not being able to receive effective treatment.
This explains further why in the context of the US opening of the US dollar instant currency machine.
The epidemic continues to spread. Another reason of the soaring death-toll.
The other side of the story, the US economy is heavily in debt.
The ability of huge debt deficits to respond to the epidemic has become very fragile.
The total federal debt of the United States exceeds 27.5 trillion
Goldman Sachsí analysts recently proposed that according to the current borrowing cost.
The US treasury department should issue a 1,000 year treasury bond.
It is also another proof that the US economic debt addiction phenomenon may continue
And the international beneficiaries of the US dollar banknote machine are the majority of Americans.
The latest USDA report from the US Department of Agriculture says
An estimated 54 million Americans will fight hunger this year.
An increase of 45% over 2019 and equivalent to about one-sixth of the total population of the United States.
Another survey showed that up to 82% of respondents in the United States said,
If they donít borrow money they wonít be able to pay the $500 emergency expenses.
And though the follow research shows
Among the top 0.1% wealth in the US is in the hands of the American elite
For most American working class
Real wages have hardly changed in decades
Other data shows that any night
Over 600,000 Americans are homeless
This once again shows that the US economy may be uncovered
The new corona epidemic has exacerbated this ugly fact
And those who are away from Wall Streetís money printing machines are drunk.
It is worth noting at the medical level
Only the top 10% of people in the US
Are financially safe in a medical emergency
This also explains further
Most people in the US have been in this process for nearly 10 months
Why still canít get effective treatment
At the same time more and more Americans
Are inseparable from products such as china made hand sanitizer and ventilators
According to what is currently know
China has exported about 394 million masks to the US
About 800 Million pairs of gloves, about 650 million sets of protective clothing
About 46 million goggles. Only one item is equivalent to every American
received about 120 Chinese product returns from China
In other words, 39 Billion Chinese return covers arrived in the United States
And as early as March this year
Many states in the US staged competition for ventilator produced by Chinese enterprises
This is just a microcosm of American consumers inseparable from Made in China
Bloomberg reports that 9 out of 10 Americans buy goods made in China
A few weeks ago, American consumers were asked by reporters
"Do you have any substitutes for this Chinese products you imported?" [Edited by BWC Chinese website APP]
Answer - No American consumers like this Chinese Product [Edited by BWC Chinese website APP]

Video 13: Comp_br005_cold

Comp_br005_cold was uploaded on [DATE].

The substring "Comp" contained in the title of the video has no discovered meaning.

The substring "br005" contained in the title of the video is a reference to the same text that was shown in NC_map_color_phase_soon and is a reference to Eva flight BR005.

The substring "cold" contained in the title of the video has no discovered meaning.

The first portion of the video shows a Lenovo Thinkpad laptop resting on top of a black box with 4 antennas with two smartphones in the foreground. The laptop, black box, and smartphones are sitting atop a large black server rack case with a door that is made closed by the person recording the video. To the right of the server rack is a silver box with 8 dials and a seven-segment digital timer.

The second portion of the video is a solid white frame with the pastebin URL https://pastebin.com/A8bxyZ3w. The pastebin is entitled "2es_cas_eyed_2" and contains the following contents:

http://bcloudwenjxgcxjh6uheyt72a5isimzgg4kv5u74jb2s22y3hzpwh6id.onion/d1/URI:CHK:4ujbmgts4j56ng2olcvhp3c3vu:ek4fekd4xtcfhz774pfyl5qeoe3suskgqfhvle5skvhvvdt6ztpa:3:10:22487/notice932__1_.pdf

dark for 3 days

depart for 6jan 

The URL contained in the pastebin directs to the file notice932__1_.pdf

Video 14: http://torpastephp3x73w.onion/emlFSC5A/

http://torpastephp3x73w.onion/emlFSC5A/ was published on [DATE] and was backed up by the Gill Bates YouTube channel. The video is 50 seconds long.

The title is a tor URL leading to a torpaste file entitled "Paste: 1_h241" that contained the following contents:

https://anonymousfiles.io/9P4ydkj3/

The url contained in the contents of the torpaste directed to 16 copy 1.pdf.

The video shows an SUV or pickup truck driving up and parking behind an RV that has a Hammer and Sickle sticker on the rear window. The driver of the SUV or pickup truck parks the vehicle and pans right to show a Macbook running a terminal script or application.

The 1378 Huawei YouTube Channel

The 1378 Huawei YouTube channel was created n January 15, 2021. There are currently 11 videos uploaded to the channel.

Video 1: 电雨 elec_rain order plano to embassy. MI Can lake house 753

电雨 elec_rain order plano to embassy. MI Can lake house 753 was uploaded on 11:05 PM January 15, 2021 UTC and has a runtime of 1 minute and 15 seconds.

The substring "电雨" contained in the title translates to the name of the CNASR operation "Electric Rain".

The substring "elec_rain" is an abbreviated reference to the CNASR operation "Electric Rain".

The substring "plano" has an inconclusive tie to the Huawei office location in Plano, Texas.

The audio throughout the video is morse code that translates to the following:

ALL PERSONNEL EVAC PLANO PRIOR TO INAUGURATION. C7991228V. EMBASSY DIRECTION EVE.

Video 2: 202029410037

202029410037 was uploaded at 1:21 AM January 17, 2021 UTC and has a runtime of 1 minute and 30 seconds.

The video title, "202029410037", is the registration file number for JLS DOC LCC and is referenced by the fourth video.

The video includes clips of United States flag and monuments including the Washington Monument, Lincoln Memorial , and a dome building.

The final clip of the video is of a lightning storm that occurred on June 7, 2020, when the Washington Monument was struck by lightning.

The audio throughout the video is morse code that translates to the following:

DC OP RECOVERED HARDDISKS RECEIVED PLANO 1/8. AUTH PAYMENT RELEASE OLS ACCOUNT EMBASSY DIRECTIVE

Video 3: EQ2050_CSK-131_Rec_tx_00945

EQ2050_CSK-131_Rec_tx_00945 was uploaded at 6:36 AM January 19, 2021 UTC and has a runtime of 1 minute and 12 seconds.

The substrings "EQ2050" and "CSK-131" are both references to Humvee models made by Dongfeng. The Dongfeng Humvee model EQ2050 can be issued with EMP shielding.

The substring "Rec_tx_00945" has no discovered meaning. Possible translations could include "Received transaction 00945".

The first portion of the video shows the United States Capital in the background and the CNASR flag being raised on a flag pole in the foreground. The Hua Wei Security Group logo is visible in the upper right corner.

The second portion of the video shows a map of the United States on the left half of the screen and a text area containing Chinese on the right half of the screen.

The third and final portion of the video shows a CNASR flag waving in the wind. A video montage of urban cityscapes can be seen in the bottom right corner. The Statue of Liberty can be seen in some portions of the lower right video montage.

The audio throughout the video is white-noise and has no discovered meaning.

Video 4: hwscl____extract_svc_loc: JLS LLC 10445

hwscl____extract_svc_loc: JLS LLC 10445 was uploaded at 1:45 AM January 19, 2021 UTC and has a runtime of 30 seconds.

The substring "hwscl" contained in the title is a direct reference to the website for the Hua Wei Security Group (hwscl.com). The Hua We Security Group logo, landing page video, and document pages appear throughout the video hwscl____extract_svc_loc: JLS LLC 10445.

The substring "extract_svc_loc" contained in the title has no discovered meaning.

The substring "JLS LLC 10045" contained in the title is a reference to the company JLS DOC LLC which was registered on October 19, 2020 by Neil Sacker using the address 10445 Wilshire Blvd, Los Angeles, CA 90024. The registration file number for JLS DOC LCC is 202029410037, which is the title of the second video that was uploaded to the 1378 Huawei YouTube channel. Neil Sacker is the father of Jade Sacker, who was seen filming a documentary at the 2021 storming of the United States Capitol. During the January 6, 2020 storming of the United States Capital, Jade Sacker was filmed by John Sullivan (a.k.a. JaydenX) while inside of the rotunda. They were recorded having the following conversation:

Sacker: "You were right we did it" Sullivan: "I was trying to tell you but I couldn't say much"

The video begins with a frame containing a white background with the text "LAX DEP" in the bottom right corner. LAX is the abbreviation for the Los Angeles International Airport and possibly a reference to the city in which Neil Sacker registered JLS DOC LLC.

Video 5: 6800c2bea6be

CNASR JAN 22 2021 Memorandum was posted in a tweet by @u7ezgq89sOqZXJU.

6800c2bea6be was published at 1:10 AM January 24, 2021 UTC and has a runtime of 44 seconds.

CNASR Safety Development Concepts was posted in a tweet by @u7ezgq89sOqZXJU.

The title has no discovered meaning.

The video contains a series of clips showing a Dongfeng water truck model SCS5160GSS made by Dongfeng Motor Corporation in front a building with large red letters spelling RUNLIAUTO. One clip shows the front of the truck is spraying a liquid white liquid onto the parking lot in front of the building. Another clip shows a person standing on the back of the truck spraying a liquid vertically into the air onto the parking lot using a type of water cannon.

The video appears to be sourced from a sales page on Alibaba entitled "Dongfeng All Wheel Drive 6x6 Water Truck Off Road Military 6WD Water Tank Truck Export to Mongolia". Additionally, the video contains the string "https://twitter.com/u7ezgq89sOqZXJU" at the bottom of the screen. The source video has red letters in the middle reading "Whatsapp: 0086 15897603919 Ms.Pinky".

Video 6: 21g423____pastebin.com/ixEydv4n

qeqvf.png was discovered by following URLs hidden in the video 21g423____pastebin.com/ixEydv4n that was published on the 1378 Huawei YouTube channel.

21g423____pastebin.com/ixEydv4n was published at 11:15 PM January 27, 2021 UTC and is 36 seconds long.

The substring "21g423" contained in the title of the video has no discovered meaning.

The substring "pastebin.com/ixEydv4n" contained in the title of the video is a URL that directs to a pastebin file entitled "Untitled" containing the following contents:

https://ibb.co/tPQvN6J

The contents of the pastebin lead to the CNASR document qeqvf.png.

The first part of the video contains a clip showing a simulation of a number of some type of missile hitting a ground target. The source of the first portion of the video may come from a YouTube video entitled US Military Released Micro Drone Swarm From aircraft & a Baseball Machine to destroy Next Enemies that was published on November 30, 2019 on the Military Channel YouTube channel.

The second part of the video contains a clip showing a simulation in the same style as the first part of the video, but the source video has yet to be discovered. The clip shows the same CGI-generated missiles navigating around a spherical barrier partially labeled with "GPS Denies En...".

The third part of the video contains a clip showing a simulation in the same style as the first part of the video, but the source video has yet to be discovered. The clip shows two CGI-generated military personnel at computer terminals.

The fourth part of the video shows a higher quality CGI scene of a barrage swarm being launched from the rear of an aircraft.

The audio in the video is not in English and has not yet been translated.

Video 7: 432_shipto_fenix_rec_pb

432_shipto_fenix_rec_pb was published at 6:45 PM January, 31, 2021 UTC to the 1378 Huawei YouTube channel and has a runtime of 9 seconds. The video was backed up on vimeo.

The substring "432" contained in the title of the video has no discovered meaning.

The substring "shipto" contained in the title of the video has no discovered extraneous meaning apart from the phrase "ship to".

The substring "fenix" contained in the title of the video is a reference to Fenix Ammunition LLC. The first known mention of Fenix Ammunition was in CNASR document qeqvf.png.

The substring "rec" contained in the title of the video may be an abbreviation for the word "received" similar to the video entitled EQ2050 CSK-131 Rec tx 00945.

The substring "pb" contained in the title of the video has no discovered meaning.

The video is the first video in the 1378 Huawei YouTube channel that matches the same hidden message format as the G McS YouTube channel containing 3 frames at 1 frame per 3 seconds. The following text and translations were displayed in the bottom right corner for each respective frame:

Frame	Text	Translation
1	27个人	27 people
2	电雨阶段1 2021年6月12日	Electric rain phase 1 June 12 2021
3	https://pastebin.com/UrQhU39Q	N/A

The string in the first frame is a reference to the "27 individuals tied to extremist groups" as mentioned in CNASR document JAN 22 2021 Memorandum.jpg.

The string in the second frame references the first phase of CNASR operation Electric Rain and the date June 12, 2021. This is the first known clear timeline associated with Electric Rain.

The string in the last frame is a URL to a pastebin file entitled "121r4" and contained the following contents:

docs_posted_when_received last_131

754791756qq.com

Current pw located 市纪委监委：http://www.ahjs.gov.cn/content/detail/5fe5e10f7f8b9af6758b4586.html 

The first known mention of the domain 754791756qq.com was in the G McS YouTube channel.

The first known mention of the domain ahjs.gov.cn was in the G McS YouTube channel. The 754791756qq.com URL leads to a page with an embedded iframe to the file https://anonymousfiles.io/f/p12313244.pdf. The contents of the PDF have not been discovered yet. Prior to 432_shipto_fenix_rec_pb, the contents 754791756qq.com were of CNASR document Rebuilding America which was protected by the password found in pw: jsjxw2015.

Video 8: hotline_data_submit_0125

hotline_data_submit_0125 was published at 8:01 PM February 4, 2021 UTC to the 1378 Huawei YouTube channel and has a runtime of 9 seconds. The video was backed up on Vimeo.

The title of the video has no discovered meaning.

The video is the second video in the 1378 Huawei YouTube channel that matches the same hidden message format as the G McS YouTube channel containing 3 colored frames at 1 frame per 3 seconds. The following colors and text were displayed for each respective frame:

Frame	Color	Text
1	Blue	N/A
2	White	N/A
3	Red	https://pastebin.com/i27Z86uk

The text contained in the third frame of the video is a pastebin URL that leads to a file entited "qqg661" that contained the following contents:

https://ibb.co/Nx2w5vC
https://ibb.co/dBP0D6T
https://ibb.co/yFhSrHj

--------------------------

The URLs contained in the contents of the pastebin lead to the following three images:

1. 12.jpg
2. 12f.jpg
3. 12v.jpg

Video 9: F-16_ca_g33

F-16_ca_g33 was published at 3:05 AM February 6, 2021 UTC to the 1378 Huawei YouTube channel and has a runtime of 2 minutes and 9 seconds.

The substring "F-16" contained in the title of the video may reference the F-16 fighter jet.

The substring "ca" contained in the title of the video may be the abbreviation for Canada.

In early December 2020, an F-16 crashed near the border of Michigan and Canada during a routine training exercise.

The substring "g33" contained in the title of the video has no discovered meaning.

The video contains a clip of a documentary about the Boogaloo Boys.

At the end of the video the pastebin URL https://pastebin.com/mLQhGB4U is displayed, which leads to a pastebin file entitled "9900" that contained the following contents:

https://ibb.co/0QJT5Mt

The URL contained in the contents of the pastebin lead to 6f.jpg.

Video 10: pastebin.com/A1FPX0AL

pastebin.com/A1FPX0AL was published at 12:29 AM February 12, 2021 UTC to the 1378 Huawei YouTube channel and has a runtime of 10 seconds. The video was backed up on Vimeo.

The title of the video is a pastebin URL leading to a file entitled "Untitled" with the following contents:

tor


http://bcloudwenjxgcxjh6uheyt72a5isimzgg4kv5u74jb2s22y3hzpwh6id.onion/dl/URI:CHK:hirdc3xnh2rlk3f4jlxur2p3r4:xi4wmslwphcbpwzzkczen2jgkcjivy6qzkeir26f662b56tho5gq:3:10:404172/1_fgas334.mp3

The URL contained in the contents of the pastebin is a Tor link that lead to 1_fgas334.mp3, a recording of undiscovered origin that talks about Smartmatic electronic voting machines.

The video shows a scene from a room where electronic devices are setup in a room on a wooden floor. The camera shows an unknown black box with two cables connecting to an unknown lighter box propped on a chair. As the camera pans, an unknown white electronic device is shown with four antennas. Finally, the camera pans downward to a smartphone displaying a table of text and data.

Video 11: 中国華衛安保國際 - emb_dir_plano_return_0079_cnct_prt

中国華衛安保國際 - emb_dir_plano_return_0079_cnct_prt was published at 10:11 PM on February 19, 2021 UTC and has a runtime of 1 minute and 49 seconds. The video was backed up to Vimeo.

The substring "中国華衛安保國際 " contained in the title of the video translates to "China Huawei Security International".

The substring "emb" contained in the title of the video may reference the word "embassy", was also referenced in 电雨 elec_rain order plano to embassy. MI Can lake house 753.

The substring "dir" contained in the title of the video has no discovered meaning.

The substring "plano" contained in the title of the video is a reference to Plano, TX, which was also referenced in 电雨 elec_rain order plano to embassy. MI Can lake house 753.

The substring "return_0079_cnct_prt" has no discovered meaning.

The first part of the video contains a clip of a person walking at night through snow that has tire tracks. To the left, the clip shows an RV similar to the one shown in Comp_br005_cold that was published to the G McS YouTube channel.

The second part of the video is an animated clip using Google Earth. The video animates across geographical points across North America while displaying various text and images overlaying the animation. The animation starts at waypoint (indicated by a star-shaped icon) at Washington D.C. and animates to a view of a map of the United States that shows the state of Texas highlighted in the color red.

A static image of the flag of Texas and the Goddess of Liberty statue are shown while the animation pans southward to the Texas-Mexico border, after which the Mexico is highlighted in the color pink. A static image is of the flag of Mexico is then shown overlaying the animation.

A static image of the flag of United States and the United States Capitol is shown while the animation zooms out to show all the remaining states (i.e. not Texas) of the United States highlighted in purple. The animation then zooms in more to show the color highlighting the state of Texas animate from the red to purple. The animation zooms out and back in reanimating to color highlighting of Texas back to the color red, after which a static image of the flag of California is shown overlaying the animation.

The third part of the video contains a 3D animation of showing the cityscape of Houston, TX. The string "1599972" are shown in the color red overlaying the animation and has no discovered meaning.

A static image of the flag of Texas standing next to a Confederate flag is shown overlaying the animation.

The fourth part of the video contains a QR code containing the following data:

https://filebin.net/5uc6npsaz4cblrvt/_______0432tx_2.zip?t=6egt3mhj

The link contained in the contents of the QR code is a filebin leading to a zip file entitled "_______0432tx_2.zip".

Twitter User @u7ezgq89sOqZXJU

In 6800c2bea6be that was uploaded to the 1378 Huawei YouTube channel, a url to the Twitter profile of the user @u7ezgq89sOqZXJU appears at the bottom of the video. User @u7ezgq89sOqZXJU joined Twitter in December 2020. The twitter profile at the time the video was published contained 4 Tweets leading to documents.

The bio of the user at the time the video was published was the string "北美大陆的光明前景" which translates to "Bright prospects for the North American continent". The profile picture of the user at the time the video was published is of the FBI Cessna Citation jet N557PG. An FBI Cessna Citation jet was seen flying over Washington, D.C. during Black Lives Matter protests in June 2020 following the death of George Floyd. The banner photo of the user at the time the video was published is of the Chinese Embassy located in Washington, D.C. On January 20, 2021, the Twitter account for the official Chinese Embassy user, @ChineseEmbinUS, was locked due to a tweet regarding the Ughyers that violated Twitter's policy against dehumanization.

The user at the time the video was published was had one tweet and was following two Twitter users: @GovBillLee and @KamalaHarris.

Prior to to the publishing of 6800c2bea6be that was uploaded to the 1378 Huawei YouTube channel, Twitter user @u7ezgq89sOqZXJU only posted to Twitter one time at 8:00 PM December 28, 2020 UTC via the Twitter Web App replying to user @KerrykeKerry. The reply contained the string "建议不要针对新订单提出此类索赔。反对红矛会为你感到遗憾" which translates to "It is recommended not to make such claims for new orders. Opposing Red Spear will feel sorry for you".

User @u7ezgq89sOqZXJU's first Tweet was published at 12:33 AM, January 24, 2021 UTC via the Twitter Web App. The tweet only contained the string "Cold."

The second tweet was published at 12:34 AM January 24, 2021 UTC via the Twitter Web App. The tweet only contained the string "意思" which translates to "meaning".

The third tweet was published at 12:45 AM January 24, 2021 UTC via the Twitter Web App. The tweet contained a link to an image of the CNASR JAN. 22 2021 Memorandum document.

The fourth tweet was published at 1:05 AM January 24, 2021 UTC via the Twitter Web App. The tweet contained an uploaded image of the CNASR Safety Development Concepts document in Chinese.

On January 26, 2021, two more tweets were published. Additionally on January 26, 2021, Twitter user @u7ezgq89sOqZXJU stopped following Twitter users @GovBillLee and @KamalaHarris and started following the user @Huawei.

The fifth tweet was published at 7:42 AM January 26, 2021 UTC via the Twitter Web App. The tweet contained the following text that has no discovered meaning:

FAS.

1,55

CAR.

The sixth tweet was published 7:55 AM January 26, 2021 UTC via the Twitter Web App. The tweet contained a video that is 27 seconds long showing the same Vizio monitor with two white speakers used in 6JAN CARAVAN PLN published in the G McS Youtube channel. A person in the video appears to be using a VCR to display a VHS tape. The film displayed on the Vizio monitor is from an educational tourism series entitled Video Visits distributed by International Video Network. The film being displayed on the Vizio monitor is entitled Video Visits: France. Only the first 20 seconds play before the Twitter video ends. The source of this clip is from a video entitled Crappy 1992 Labtec speakers meet creepy VHS animated intros from the VWestlife YouTube channel. The motive or hidden meaning behind the editing of the video has not been discovered.

On January 27, 2021, two more tweets were published.

The seventh tweet was published 2:12 AM Jan 27, 2021 UTC via the Twitter Web App. The tweet contained an uploaded image of a document in Chinese.

The eighth tweet was published 2:12 AM Jan 27, 2021 UTC via the Twitter Web App. The tweet contained an uploaded image of page 5 of the CNASR Safety Development Concepts document in Chinese.

On January 29, 2021, one more tweet was published.

The ninth tweet was published 11:41 PM Jan 29, 2021 UTC via the Twitter Web App. The tweet contained uploaded images promoting books written by Bob Avakian lik Constitution for the New Socialist Republic In North America.

On February 2, 2021, one more tweet was published.

The tenth tweet was published at 7:06 PM February 2, 2021 UTC via Twitter Web App. The tweet contained the following contents:

sm-2.pdf

18029465-1

The string "sm-2.pdf" contained in the contents of the tweet is a reference to a PDF file that was referenced in the contents of the web page at 754791756qq.com. The contents of 754791756qq.com at the time the tweet was published was of an embedded iframe of https://anonymousfiles.io/f/sm2-.pdf. It is unclear what the intended hidden message may be since the contents of the tweet and the URL of the embedded iframe conflict.

The string "18029465-1" contained in the contents of the tweet has no discovered meaning.

On February 3, 2021, one more tweet was published.

The eleventh tweet was published at 1:28 AM Feb 3, 2021 UTC via Twitter Web App. The tweet contained the following contents:

51.050961, -93.995457

dp_point_7

The string "51.050961, -93.995457" are latitude and longitude coordinates to a location near Red Lake, Ontario.

Source notes

• The domain 754791756qq.com was registered on January 2, 2020
• The domain 163.com is registered by Guangzhou NetEase Computer System Co., Ltd in China