Author
Message
Smith
Boot
Joined: 13 Feb 2007 Posts: 66 Location: Shizuoka, Japan
[ Trailhead ] ? imbeingfollowed.com Has an ARGish feel to it. Someone posted a link to http://www.imbeingfollowed.com/ on the /x/ board of 4chan. While this automatically makes it dubious to say the least, it does have an interesting look to it.
What has been discovered so far:
So far we have found that if you brighten the page you can see a crudely drawn face with some type of symbol inside the eye. It also looks like the image was taken through the peephole of a door.
We have found two text boxes, one for a username and one for a password, and a little circle which serves as an enter button. If you click the circle you will see a blank page with the text "you can't fool me".
If you view the source of the main page you can see this:
<input><input>
We can see the hidden message: It's in the CSS. This is most probably talking about the username and password as it is in the code for the text boxes. We can also see from the source that the CSS is called "imbeingfollowed.com/helpme.css"
By looking at the CSS we can notice a few interesting things. First of all the name of the image on the main page is called 100109.gif,
which is a date. 1st of October 2009. By looking at the whois records I found that the website was created on that exact date. Then we see something that looks out of place in the code. no-repeat;}.1004. The .1004 seems to be out of place in the code, as it seems it would serve no purpose. But it could possibly mean a date, 4th of October. And next to that we see { 18:28; }. Possibly the army time for 6:28pm. I'm guessing this is when the next clue will be given.
This is pretty much all I have found so far.
Also attached is a link to a fiddled with copy of the background, enhanced to bring out the figures.
The Background.
Posted: Sat Oct 03, 2009 9:09 am
StarkMevens
Greenhorn
Joined: 01 Oct 2009 Posts: 9
Saw this, but I'm banned from all boards for telling a guy to GTFO with his invites. Damn thing autobans you for a day for "lockerz" in a post.
Did you try saving the CSS and opening it as rar, txt, jpg, mp3, anything like that?
Posted: Sat Oct 03, 2009 9:14 am
Smith
Boot
Joined: 13 Feb 2007 Posts: 66 Location: Shizuoka, Japan
StarkMevens wrote:
Did you try saving the CSS and opening it as rar, txt, jpg, mp3, anything like that?
It's just text. The image from the background didn't have anything in it that I could find. I'm not that savvy at finding embedded stuff though.
Posted: Sat Oct 03, 2009 9:21 am
Lovely Luke
Veteran
Joined: 17 Aug 2009 Posts: 127
If I'm just stating the obvious then sorry, but if you try to highlight text on the page it reveals that in the top left there is a line of text reading:
"im being followed"
Posted: Sat Oct 03, 2009 9:28 am
chasswow0413
Boot
Joined: 10 Mar 2008 Posts: 62 Location: Taiwan
Site WHOIS Information:
Quote:
Whois Record
Registrant Search:
"WhoisGuard" was found in about 565,517 other domains
Email Search:
is associated with about 844,694 domains
NS History:
1 change on 2 unique name servers over 0 year.
Whois History:
1 record has been archived since 2009-10-01 .
Reverse IP:
533 other sites hosted on this server.
Free Tool:
Download DomainTools Download DomainTools for Windows
Registration Service Provided By: NameCheap.com
Contact:
Visit: http://www.namecheap.com/
Domain name: imbeingfollowed.com
Registrant Contact:
WhoisGuard
WhoisGuard Protected ()
Fax:
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Administrative Contact:
WhoisGuard
WhoisGuard Protected ()
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Technical Contact:
WhoisGuard
WhoisGuard Protected ()
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd. #110 - 732
Westchester, CA 90045
US
Status: Locked
Name Servers:
ns1.lithiumhosting.com
ns2.lithiumhosting.com
ns3.lithiumhosting.com
Creation date: 01 Oct 2009 22:38:43
Expiration date: 01 Oct 2010 22:38:43
Posted: Sat Oct 03, 2009 9:33 am
StarkMevens
Greenhorn
Joined: 01 Oct 2009 Posts: 9
Quote:
"WhoisGuard" was found in about 565,517 other domains
Nothing there.
Maybe we do need to wait until tomorrow...
Posted: Sat Oct 03, 2009 9:36 am
Cristylezo1o
Veteran
Joined: 15 Sep 2009 Posts: 111
If you go to the page source it says help me which is a link to another page source that says form { float: right. so I exited out of that page source when to that first screen again and I clicked on the little circle in the top right conor and it brought me to the next page that reads..you can't fool me
Posted: Sat Oct 03, 2009 10:32 am
StarkMevens
Greenhorn
Joined: 01 Oct 2009 Posts: 9
Cristylezo1o wrote:
If you go to the page source it says help me which is a link to another page source that says form { float: right. so I exited out of that page source when to that first screen again and I clicked on the little circle in the top right conor and it brought me to the next page that reads..you can't fool me
Read the OP.
Posted: Sat Oct 03, 2009 11:20 am
chasswow0413
Boot
Joined: 10 Mar 2008 Posts: 62 Location: Taiwan
Just found this user on livejournal.com:
http://imbeingfollowed.livejournal.com/profile
And his birthday is April 10th.
Maybe related or just a coincidence?
Posted: Sat Oct 03, 2009 11:26 am
Cristylezo1o
Veteran
Joined: 15 Sep 2009 Posts: 111
StarkMevens wrote:
Cristylezo1o wrote:
If you go to the page source it says help me which is a link to another page source that says form { float: right. so I exited out of that page source when to that first screen again and I clicked on the little circle in the top right conor and it brought me to the next page that reads..you can't fool me
Read the OP.
next to the little o is actually a text field where you can type stuff in
Posted: Sat Oct 03, 2009 11:29 am
StarkMevens
Greenhorn
Joined: 01 Oct 2009 Posts: 9
Re: [ Trailhead ] ? imbeingfollowed.com Has an ARGish feel to it.
Smith wrote:
We have found two text boxes, one for a username and one for a password, and a little circle which serves as an enter button. If you click the circle you will see a blank page with the text "you can't fool me".
Quote:
Created on 2004-03-06 18:20:53 (#2429654), last updated 2005-07-11
This is definitely OOG.
Posted: Sat Oct 03, 2009 11:31 am
Cristylezo1o
Veteran
Joined: 15 Sep 2009 Posts: 111
in the source page it looks as though it's saying "return" "post" "check.php" "itsin" "text" "user""thecss""text""pass" "submit" "o"
Posted: Sat Oct 03, 2009 11:48 am
jaeger138
Unfettered
Joined: 20 Aug 2009 Posts: 372
Cristylezo1o wrote:
StarkMevens wrote:
Cristylezo1o wrote:
If you go to the page source it says help me which is a link to another page source that says form { float: right. so I exited out of that page source when to that first screen again and I clicked on the little circle in the top right conor and it brought me to the next page that reads..you can't fool me
Read the OP.
next to the little o is actually a text field where you can type stuff in
Lol, read the other posts
Posted: Sat Oct 03, 2009 11:49 am
Cristylezo1o
Veteran
Joined: 15 Sep 2009 Posts: 111
jaeger138 wrote:
Cristylezo1o wrote:
StarkMevens wrote:
Cristylezo1o wrote:
If you go to the page source it says help me which is a link to another page source that says form { float: right. so I exited out of that page source when to that first screen again and I clicked on the little circle in the top right conor and it brought me to the next page that reads..you can't fool me
Read the OP.
next to the little o is actually a text field where you can type stuff in
Lol, read the other posts
are you following me :p
Posted: Sat Oct 03, 2009 11:56 am
jaeger138
Unfettered
Joined: 20 Aug 2009 Posts: 372
Lol, no but we apparantly have the same taste in intrigue. BTW, do we know the time zone the clues will be released in?
Posted: Sat Oct 03, 2009 11:58 am
Display posts from previous: All Posts 1 Day 1 Week 2 Weeks 1 Month 3 Months 6 Months 1 Year Sort by: Post Time Post Subject Author Ascending Descending