Author
Message
Caprice
Boot
Joined: 16 Jan 2016 Posts: 11
[Possible Trailhead] Solace-corp A week and a half ago, I got this email:
http://image.prntscr.com/image/fb98c260a19f4fa69a842d9fbfa01758.png
I disregarded it for a while. Then I wondered "what's the site?" A few security-minded friends and I gathered together, opened up the site...and it was just a messageboard. Quite underwhelming.
http://solace-corp.com/index.php
I posted it on the ARG subreddit, and u/ehTrotceriD registered an account. (I think it's "The Director.")
The next day IIRC, I got this:
http://image.prntscr.com/image/caa10a61bed542a1ba99a095ee1a1e7a.png
Posted: Sun Feb 05, 2017 10:39 pm
Last edited by Caprice on Tue Feb 07, 2017 8:08 am; edited 1 time in total
catherwood
I Have 100 Cats and Smell of Wee
Joined: 25 Sep 2002 Posts: 4109 Location: Silicon Valley, CA
please edit your extremely wide images, or upload them as attachments (or just give the link without embedding) -- they stretch the forum window too wide.
As for the website, i'm not sure how to engage. Do i treat the early posts as character interaction?
Posted: Mon Feb 06, 2017 5:13 pm
Caprice
Boot
Joined: 16 Jan 2016 Posts: 11
catherwood wrote:
please edit your extremely wide images, or upload them as attachments (or just give the link without embedding) -- they stretch the forum window too wide.
As for the website, i'm not sure how to engage. Do i treat the early posts as character interaction?
Done! I think you're right about early posts.
Posted: Tue Feb 07, 2017 8:20 am
BIXX
Greenhorn
Joined: 07 Nov 2016 Posts: 8
What We Know So Far In the intro section of the forum, we see the following code posted in this thread.
Spoiler (Rollover to View):
48 48 50 53 32 48 48 52 51 32 48 48 52 50 32 48 48 50 53 32 48 48 51 56 32 48 48 51 56 32 48 48 54 50 32 48 48 50 53 32 48 48 52 51 32 48 48 52 49 32 48 48 50 53 32 48 48 51 56 32 48 48 52 51 32 48 48 54 55 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 57 32 48 48 55 50 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 50 32 48 48 54 54 32 48 48 50 53 32 48 48 51 50 32 48 48 52 51 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 55 51 32 48 48 55 48 32 48 48 50 53 32 48 48 52 51 32 48 48 51 51 32 48 48 50 53 32 48 48 52 49 32 48 48 51 54 32 48 48 54 68 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 54 50 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 50 32 48 48 55 52 32 48 48 50 69 32 48 48 50 53 32 48 48 51 48 32 48 48 52 49 32 48 48 54 56 32 48 48 55 52 32 48 48 55 52 32 48 48 55 48 32 48 48 55 51 32 48 48 50 53 32 48 48 51 51 32 48 48 52 49 32 48 48 50 53 32 48 48 51 50 32 48 48 52 54 32 48 48 50 53 32 48 48 51 50 32 48 48 52 54 32 48 48 55 55 32 48 48 55 55 32 48 48 55 55 32 48 48 50 69 32 48 48 55 57 32 48 48 54 70 32 48 48 55 53 32 48 48 55 52 32 48 48 55 53 32 48 48 54 50 32 48 48 54 53 32 48 48 50 69 32 48 48 54 51 32 48 48 54 70 32 48 48 54 68 32 48 48 50 53 32 48 48 51 50 32 48 48 52 54 32 48 48 55 55 32 48 48 54 49 32 48 48 55 52 32 48 48 54 51 32 48 48 54 56 32 48 48 50 53 32 48 48 51 51 32 48 48 52 54 32 48 48 55 54 32 48 48 50 53 32 48 48 51 51 32 48 48 52 52 32 48 48 54 52 32 48 48 53 49 32 48 48 55 55 32 48 48 51 52 32 48 48 55 55 32 48 48 51 57 32 48 48 53 55 32 48 48 54 55 32 48 48 53 56 32 48 48 54 51 32 48 48 53 49
We googled the name of the poster, Tango Dzij, and found a youtube channel , which now has two videos (as of about an hour ago the second was uploaded). One of the videos had the following number set in the description.
Spoiler (Rollover to View):
48 48 54 66 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 57 32 48 48 54 69 32 48 48 50 53 32 48 48 52 51 32 48 48 52 50 32 48 48 50 53 32 48 48 51 56 32 48 48 52 51 32 48 48 54 55 32 48 48 55 50 32 48 48 50 53 32 48 48 52 51 32 48 48 51 51 32 48 48 50 53 32 48 48 52 49 32 48 48 51 54 32 48 48 55 52 32 48 48 54 65 32 48 48 50 53 32 48 48 52 51 32 48 48 52 49 32 48 48 50 53 32 48 48 51 56 32 48 48 52 49 32 48 48 50 53 32 48 48 52 51 32 48 48 52 50 32 48 48 50 53 32 48 48 51 56 32 48 48 51 56 32 48 48 54 67 32 48 48 54 53 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 52 49 32 48 48 52 49 32 48 48 50 53 32 48 48 52 51 32 48 48 52 49 32 48 48 50 53 32 48 48 51 56 32 48 48 51 51 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 57 32 48 48 54 69 32 48 48 55 65 32 48 48 50 69 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 50 53 32 48 48 52 51 32 48 48 52 50 32 48 48 50 53 32 48 48 51 56 32 48 48 51 56 32 48 48 55 55 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 52 50 32 48 48 54 67 32 48 48 54 66 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 57 32 48 48 54 68 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 55 52 32 48 48 55 53 32 48 48 50 53 32 48 48 52 51 32 48 48 52 50 32 48 48 50 53 32 48 48 51 57 32 48 48 51 48 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 50 53 32 48 48 52 51 32 48 48 52 50 32 48 48 50 53 32 48 48 51 56 32 48 48 51 56 32 48 48 55 52 32 48 48 54 49 32 48 48 50 53 32 48 48 52 51 32 48 48 51 53 32 48 48 50 53 32 48 48 51 56 32 48 48 52 50 32 48 48 54 55 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 52 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 54 52 32 48 48 50 53 32 48 48 52 51 32 48 48 52 49 32 48 48 50 53 32 48 48 51 57 32 48 48 51 49 32 48 48 54 57 32 48 48 54 65 32 48 48 50 69
This number set was the title to that video.
Spoiler (Rollover to View):
111 102 32 116 104 101 32 99 111 109 109 101 110 99 101 109 101 110 116
We suspect the larger number sets are polybius ciphers, possibly the "nihilist" variant. We noticed "32 48 48" repeat several times in both number sets. The audio from the two videos needs to be analyzed. We have downloaded them both in case either are removed.
The second video has a curious phrase, "i am the thirteenth role", as the description.
So far this is all we've discovered.
Posted: Mon Mar 13, 2017 10:15 pm
BIXX
Greenhorn
Joined: 07 Nov 2016 Posts: 8
Wait, cancel all we've said above. It's a rick roll.
Posted: Tue Mar 14, 2017 12:07 am
Last edited by BIXX on Fri Mar 17, 2017 3:25 am; edited 1 time in total
SaintRiggorMortison
Greenhorn
Joined: 15 Mar 2017 Posts: 4
BIXX wrote:
Wait, cancel all I've said above. It's a rick roll.
I believe you that there is a Rick Roll in there; however, I think that there is more to this. How did you discern the Rick Roll?
I noticed that the other video on the channel is called "old salmon 031317". The forum that this code comes from has a welcome thread and Old Salmon is mentioned: http://solace-corp.com/viewtopic.php?f=2&t=2 .
The founder of solace-corp is either playing along within the thread that the code was posted or does not know how to interpret the code posted by -- possibly by -- "Old Salmon": http://solace-corp.com/viewtopic.php?f=2&t=7 .
Also, the whole "old salmon 031317" description is:
i am the thirteenth role
the only record of our excursion
the second month of our worries
Posted: Wed Mar 15, 2017 1:47 pm
BIXX
Greenhorn
Joined: 07 Nov 2016 Posts: 8
SaintRiggorMortison wrote:
BIXX wrote:
Wait, cancel all we've said above. It's a rick roll.
I believe you that there is a Rick Roll in there; however, I think that there is more to this. How did you discern the Rick Roll?
Run this
Spoiler (Rollover to View):
48 48 50 53 32 48 48 52 51 32 48 48 52 50 32 48 48 50 53 32 48 48 51 56 32 48 48 51 56 32 48 48 54 50 32 48 48 50 53 32 48 48 52 51 32 48 48 52 49 32 48 48 50 53 32 48 48 51 56 32 48 48 52 51 32 48 48 54 55 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 57 32 48 48 55 50 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 50 32 48 48 54 54 32 48 48 50 53 32 48 48 51 50 32 48 48 52 51 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 55 51 32 48 48 55 48 32 48 48 50 53 32 48 48 52 51 32 48 48 51 51 32 48 48 50 53 32 48 48 52 49 32 48 48 51 54 32 48 48 54 68 32 48 48 50 53 32 48 48 51 50 32 48 48 51 48 32 48 48 54 50 32 48 48 50 53 32 48 48 52 51 32 48 48 51 57 32 48 48 50 53 32 48 48 51 57 32 48 48 51 50 32 48 48 55 52 32 48 48 50 69 32 48 48 50 53 32 48 48 51 48 32 48 48 52 49 32 48 48 54 56 32 48 48 55 52 32 48 48 55 52 32 48 48 55 48 32 48 48 55 51 32 48 48 50 53 32 48 48 51 51 32 48 48 52 49 32 48 48 50 53 32 48 48 51 50 32 48 48 52 54 32 48 48 50 53 32 48 48 51 50 32 48 48 52 54 32 48 48 55 55 32 48 48 55 55 32 48 48 55 55 32 48 48 50 69 32 48 48 55 57 32 48 48 54 70 32 48 48 55 53 32 48 48 55 52 32 48 48 55 53 32 48 48 54 50 32 48 48 54 53 32 48 48 50 69 32 48 48 54 51 32 48 48 54 70 32 48 48 54 68 32 48 48 50 53 32 48 48 51 50 32 48 48 52 54 32 48 48 55 55 32 48 48 54 49 32 48 48 55 52 32 48 48 54 51 32 48 48 54 56 32 48 48 50 53 32 48 48 51 51 32 48 48 52 54 32 48 48 55 54 32 48 48 50 53 32 48 48 51 51 32 48 48 52 52 32 48 48 54 52 32 48 48 53 49 32 48 48 55 55 32 48 48 51 52 32 48 48 55 55 32 48 48 51 57 32 48 48 53 55 32 48 48 54 55 32 48 48 53 56 32 48 48 54 51 32 48 48 53 49
through here: http://www.dcode.fr/ascii-code
Take the DEC (N) result, which is this:
Spoiler (Rollover to View):
0025 0043 0042 0025 0038 0038 0062 0025 0043 0041 0025 0038 0043 0067 0025 0043 0039 0025 0039 0039 0072 0025 0032 0030 0025 0043 0039 0025 0039 0032 0066 0025 0032 0043 0025 0032 0030 0073 0070 0025 0043 0033 0025 0041 0036 006D 0025 0032 0030 0062 0025 0043 0039 0025 0039 0032 0074 002E 0025 0030 0041 0068 0074 0074 0070 0073 0025 0033 0041 0025 0032 0046 0025 0032 0046 0077 0077 0077 002E 0079 006F 0075 0074 0075 0062 0065 002E 0063 006F 006D 0025 0032 0046 0077 0061 0074 0063 0068 0025 0033 0046 0076 0025 0033 0044 0064 0051 0077 0034 0077 0039 0057 0067 0058 0063 0051
Which you then run through a hex decoder, we used this one: http://www.convertstring.com/EncodeDecode/HexDecode
Which results in this:
Spoiler (Rollover to View):
%CB%88b%CA%8Cg%C9%99r%20%C9%92f%2C%20sp%C3%A6m%20b%C9%92t.%0Ahttps%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DdQw4w9WgXcQ
Then, use a URL decoder (http://meyerweb.com/eric/tools/dencoder/)
to get this:
Posted: Wed Mar 15, 2017 6:28 pm
Last edited by BIXX on Fri Mar 17, 2017 3:25 am; edited 1 time in total
SaintRiggorMortison
Greenhorn
Joined: 15 Mar 2017 Posts: 4
[quote="BIXX"]
SaintRiggorMortison wrote:
BIXX wrote:
Wait, cancel all I've said above. It's a rick roll.
...
That's phonetic for "beware of spam bot"[/spoiler]
Very interesting! Also, you're getting a different result than from https://www.reddit.com/r/ARG/comments/5y4y3r/111_102_32_116_104_101_32_99_111_109_109_101_110/ .
Also, the thread that the code originally cropped up in was within a spam bot thread for "Tim McGraw Tour Dates 2017" lawl. http://solace-corp.com/viewtopic.php?f=2&t=7
Posted: Wed Mar 15, 2017 7:10 pm
BIXX
Greenhorn
Joined: 07 Nov 2016 Posts: 8
[quote="SaintRiggorMortison"]
That's very strange. Are you positive they're both the same code (we don't have time to verify right now).
EDIT: Just checked, there are now two codes in that thread. We ran the second one through the process and got the same result as that in the reddit thread.
We are aware of that. However, if you look closer, we think you'll realize that thread is part of the ARG. We just have a sneaking suspicion.
EDIT2: this is Tim McGraw's website: http://www.timmcgraw.com/
This, is the site posted on the forum: http://timmcgrawtourtickets.com/
We don't believe they are actually connected but they may be. The reason we don't think they're connected is because you can buy tickets directly from the normal Tim McGraw website- why would he have two sites like this, especially one of them that's a second rate website that only serves a function that his original website already fulfills? Also we inspected the elements of the ticket links and they all lead to different sites, which may be standard for spambot bullshit but something about it makes us feel like there's more to it.
Posted: Fri Mar 17, 2017 3:08 am
NateDogg1232
Kilroy
Joined: 08 Jul 2016 Posts: 2
Spoiler (Rollover to View):
It's bugger off, spam bot.
Posted: Fri Mar 17, 2017 10:59 am
SaintRiggorMortison
Greenhorn
Joined: 15 Mar 2017 Posts: 4
[quote="BIXX"][quote="SaintRiggorMortison"]
BIXX wrote:
We don't believe they are actually connected but they may be. The reason we don't think they're connected is because you can buy tickets directly from the normal Tim McGraw website- why would he have two sites like this, especially one of them that's a second rate website that only serves a function that his original website already fulfills? Also we inspected the elements of the ticket links and they all lead to different sites, which may be standard for spambot bullshit but something about it makes us feel like there's more to it.
Also of note, the "Tim McGraw Tour Dates 2017" thread was posted exactly seven months before the Tim McGraw Wichita show is to take place.
Posted: Sun Mar 19, 2017 4:31 am
SaintRiggorMortison
Greenhorn
Joined: 15 Mar 2017 Posts: 4
The old salmon video has changed: https://www.youtube.com/watch?v=kwckqbd6WgY
And BIXX, your name is in the description.
Posted: Fri Mar 24, 2017 4:50 pm
BIXX
Greenhorn
Joined: 07 Nov 2016 Posts: 8
Thankfully, we have downloaded a copy of the original video. We have some other videos to decode as well.
EDIT: We do find it somewhat intriguing that the game seems to have decided to interact with us, so we are going to interact with it on the terms we think it is setting up.
Posted: Sun Mar 26, 2017 2:24 am
Haluwasa2000
Kilroy
Joined: 31 Mar 2017 Posts: 1
I'm a bit new to this. My classmates and I began to participate in the ARG and we have been trying to find clues recently.
Notably, I took the following video and brightened a screen cap of it in photoshop, noticing a wave of some kind. Upon a close watch, the scene seems to be a beach with waves. It looks to me like animation and my teacher was thinking that the waves might be soundwaves if they could somehow be translated from the video format. (Notably this post on solace-corp does have a weird conversation about the beach )
This is also the latest forum post featuring an image from TheDirector. I tried changing the levels in photoshop, but couldn't find any hidden text. The image seems to be of Yggdrasil which TheDirector also bring up here .
Not entirely sure if this stuff could mean anything, but I think it's worth looking at
Posted: Fri Mar 31, 2017 11:28 am
SelkieMaiden
Boot
Joined: 31 Mar 2017 Posts: 13
I don't know if thats of any use but:
In the very first video on the tango dzij channel, the breathing sounds a lot like a voice synthesizer (I can't remember which one), judging by the desert in the background, the Old Salmon video might be connected to it.
In the "old salmon 031317" video, the background in the video is of Cleopatra, as shown here . I don't know if the song could also be a clue because using Shazam on it to find it turns up with nothing.
"A † ⁸ ⁵ † ⁰ ⁴ † ‶" might be shot in a train, a bus or something else. I have a hard time seeing anything in the video but it must've been taken vertical. There is a comment under the video stating:
Spoiler (Rollover to View):
That overpass is bloody nostalgic. Seriously.
"thursday" sounds like it's slowed down singing, since you clearly hear someone saying words. I used Audacity but couldn't make something out, it sounds too much like the audio was taken from a concert or I don't have the knowledge what to do with it.
Very interesting ARG, I can't wait what happens next!
Posted: Sat Apr 01, 2017 8:16 am
Display posts from previous: All Posts 1 Day 1 Week 2 Weeks 1 Month 3 Months 6 Months 1 Year Sort by: Post Time Post Subject Author Ascending Descending