Minecraft Clues (The Mojang ARG You've Never Heard Of)

[fallen shuttle]

the glass is kinda weird

[plush jolt]

what version did you take the former SS in?

[fallen shuttle]

1.9

[wicked cairn]

It's Magenta not purple

[plush jolt]

dude

im so bad at coding lol

[wicked cairn]

I already solved this one

It's just a red herring

[plush jolt]

sample of my code's output 🎉

[wintry plover]

what is it

[fallen shuttle]

ohh okay

[plush jolt]

heres one of the files

only pixels with Red: 99 are lit up

[fallen shuttle]

whats that

[wintry plover]

yeah, i guess it might not be useful

[plush jolt]

.

[wintry plover]

its so annoying

[fallen shuttle]

ohh

[wicked cairn]

#1296523073259831296 message

[quick yacht]

took u like an hour real

[plush jolt]

shhh

thats besides the point

[wicked cairn]

I don't think the pigpen is actually pigpen to be honest

[fallen shuttle]

it looks kinda odd

[wicked cairn]

Or if it is it may be another variant of pigpen

[worldly spindle]

its 7 chars and an imgur link needs 7 letters/numbers so could be good or a waste of time

[plush jolt]

heres is the 7z file with the full 1024 files

Blue 255 & Blue 93

[wicked cairn]

what are you looking for here?

i dont really see much

[plush jolt]

the QR code lol

[wicked cairn]

.

[plush jolt]

yea ik

[wicked cairn]

wait whats this

[plush jolt]

oh right

[balmy vigil]

what is this from?

[plush jolt]

lets see if we can get any help about that

[fallen shuttle]

internet

but it dosent look like these hidden

uh

i forgot the name

i dont think that this is pigpen

[wintry plover]

are we sure the QR codes dont include any invisible characters?

[plush jolt]

?

ah

make a full character analysis

[balmy vigil]

please, give us the exact source...

[plush jolt]

https://www.fontspace.com/unicode/analyzer#e=VGhpcyB3b3VsZCBiZSB0b28gZWFzeSwgdHJ5IGhhcmRlciE

doesnt seem to contain hidden characters

[wintry plover]

is there some tool to see all data stored in a qr code?

[wicked cairn]

what

[wintry plover]

like the mask used and everything

[wicked cairn]

qrazybox

[fallen shuttle]

https://www.curseforge.com/minecraft/mc-mods/pig-pen-cipher

[fallen shuttle]

search on github

[balmy vigil]

ok so totally irrelevant.

Kupa, please, don't send us random things when we're trying to solve a mystery. This mod doesn't have anything to do with Searge. And also, don't just paste random images or chunk of texts like that, it's confusing. If you got anything, give us the source as well.

[fallen shuttle]

😦

okay i am sorry i will just leave

good lock with this mystery or sm

bye.

[wintry plover]

i think we need that deleted comment

[wicked cairn]

yeah problem with that though is that the pigpen cipher only works with capitals, no lowercase

for an imgur link or a tinyurl they typically have lowercase characters as well

[worldly spindle]

i have seen links with all capital(imgur)

[wicked cairn]

im sure theyre possible just unlikely for this

doesnt hurt to keep trying though i guess

[worldly spindle]

but the odds that Searge got a all capital image link is small to none

[worldly spindle]

can you help me decrypt at least 2 chars ?

the rest i can bruteforce

[wintry plover]

we probably can just try all combinations of possible letters and capitalization

[plush jolt]

no

dont.

i highly doubt the "solution" is trying to make out the characters from an extremely blurry pigpen cipher and brute-forcing to find the correct capitalization combination

[wintry plover]

yeah

[worldly spindle]

true but we got no leads

[wintry plover]

7 is also the number of rows of colored glass

[worldly spindle]

why did we assume that we need to find another qr code when actually we need a code that is either 5 or 7 letters mixed with numbers

but we should look into the entire docs file

[plush jolt]

do not let desparation lead you astray

[wintry plover]

i feel like lost_numbers.png has something

other images seem pointless to analyse tbh

[worldly spindle]

he said this("So, should we go the easier route with higher chance of dead ends or attempt something really challenging with guaranteed solution?") the same day as the colored glass(1h dif) post i think we should still look into pigpen but leave it as a side idea

[wicked cairn]

+23-15-5 = -24+12+15 ??

probably nothing

[worldly spindle]

can you give me the link to this please ?

[wicked cairn]

to the tweet?

[worldly spindle]

yep

[wicked cairn]

https://x.com/SeargeDP/status/588392443013369856

Searge (@SeargeDP) on X

I like things to be balanced. For example if something has multiple parts there need to be exactly as many places to put them. #s3cr3t

Twitter · Apr 15, 2015, 5:24 PM

[sturdy saffron]

https://cdn.discordapp.com/attachments/866696266876321812/1089786217593315409/attachment.gif

[topaz edge]

well it is a structure block

[harsh fjord]

Based on tweets it really does seem like he was just trying to tease structure blocks

[worldly spindle]

@topaz edge did you see this ?

[wicked cairn]

its very possible (& likely) that the unsolved hints lead nowhere

but it would still be cool to solve it

which ones are we still trying to solve?

[topaz edge]

yoo

[worldly spindle]

pigpen and i am looking into tweets from the dates shown on images

[harsh fjord]

Did you read the second reply?

[topaz edge]

I responded to him

I didn't remove any of his comments

[balmy vigil]

Maybe it got filtered? Doesn't YouTube has a feature like that?

[harsh fjord]

Yeah it sucks

[wicked cairn]

it couldve been a link

which youtube autofilters

[balmy vigil]

whoops, forgot to remove the mention when replying, mb

[worldly spindle]

wait if its a link is probably from his website

[wintry plover]

i really want to know what he said in the comment

[wicked cairn]

his website is dead, i doubt anyone would have archived it either

[topaz edge]

I looked through and I couldn't find any comments held for review

[magic pumice]

Hello there

I see a lot of newbies here

That's cool

[balmy vigil]

Okay, well, maybe he was talking about another video then??

[harsh fjord]

what

[topaz edge]

I checked across the channel and couldn't find anything

not quite sure what he means, since I would be able to see comments that were caught by the filter

[balmy vigil]

This is weird.

[harsh fjord]

What's Searge's youtube account even?

At least then we'd be able to pinpoint the comments he left

[wicked cairn]

https://www.youtube.com/@seargedp

probably this

[balmy vigil]

Indeed, I felt like I could give a hand so I joined the server. The thing is : We really don't have a lot of informations, ocean-labs website is probably not working anymore

[balmy vigil]

Oh yeah, thanks

[magic pumice]

That's bad

[harsh fjord]

did anyone figure out this is an end city already?

[magic pumice]

Welcome to the server though

[wicked cairn]

oh yeah it probably is

with the command block and structure block too

[magic pumice]

Are you sure?

How are you sure?

[harsh fjord]

Cause he was testing structure blocks and I've seen images of those same early structure blocks being used to test end cities

[wicked cairn]

its probably just a part of the structure thats obscured so as not to leak the end update

[magic pumice]

Yeah, that's possible.

[balmy vigil]

Ah, thank you

[wicked cairn]

if you look closely too it does resemble endstone and purpur

[wintry plover]

yeah, thats a plausible explanation

[harsh fjord]

https://media.discordapp.net/attachments/1296523073259831296/1304601714636095498/Structure_Block_1.webp?ex=6730a547&is=672f53c7&hm=c2c81814d71c5e081df6be66fceb8df92d77b82ec689ba9e7cffd8a825c6bb44&=&format=webp&width=1572&height=874

See

[magic pumice]

oh wait

[wicked cairn]

yea i think ur right about this

[magic pumice]

Yes it does!

Nice find

[wicked cairn]

im guessing the other orb also has end city leaks too then

or maybe like a shulker bullet

[harsh fjord]

Oh I didn't find this, this was posted in the chat before, it's just that nobody seemed to make the connection

[wicked cairn]

ah i see, can you link the original?

[magic pumice]

Also, are the white boxes just hitboxes?

[harsh fjord]

it's from minecon

[wicked cairn]

yea for the structure blocks

[harsh fjord]

Yeah structure blocks

[magic pumice]

I meant the ones we saw in the video

[balmy vigil]

Wait, if the content from minecon is in the same world as the mystery, maybe we can find something by looking at the minecon shots? Idk, I'm kind of running out of ideas

[magic pumice]

Guys! What's that behind this shot though

[harsh fjord]

It's just development structures

Probably still for the end city

[magic pumice]

is that the same village?

[harsh fjord]

I'm trying to locate the clip

[magic pumice]

Try searching for Minecon - London 2015

July 4-5

ah villager news

[harsh fjord]

Yeah that's just all of minecon lmao

They have twitch vods but sorting through them is just

[magic pumice]

@harsh fjord

These are structure blocks!

[harsh fjord]

Yeah I know

Reverse image searching isn't gonna do anything

Cause it's part of one of the streams

[magic pumice]

I felt something like that was going to happen

[magic pumice]

did you find it?

[balmy vigil]

yeah, we already knew

[magic pumice]

i suggest you go through this

it might lead you to the stream though

https://youtube.com/playlist?list=PLZHdY_46KnYsAagKop8iqXZKYHMRzldz6&

[harsh fjord]

No it won't because the person who uploaded them put no further information

[magic pumice]

This maybe

[harsh fjord]

Yeah and sorting through all of that is difficult

[wicked cairn]

are you guys getting sidetracked

[harsh fjord]

Doesn't help that the full stream just straight up isn't available

[wicked cairn]

the answer is not in the stream, how would he expect people to solve the puzzle using a stream that occurs several months in the future

[magic pumice]

@harsh fjord https://youtu.be/ZtOLw1LAarE? i've found your video

[rocky lynx]

who this guy

I didn’t see anyone use this yet?

What did he post these for agin

again

[rocky lynx]

Hey have we solved this yet?

[meager gale]

I also found this in his profile, not sure it is for the ARG

[rocky lynx]

Yeah I found that to

[wintry plover]

thats interesting

but idk

seems like a separate thing

[rocky lynx]

I mean not really look at the one with a ? In the middle

That’s the symbol

[wintry plover]

2020 doesnt really make a lot of sense

[topaz edge]

this is from his second ARG, the one I didn't cover yet

[rocky lynx]

Ohh

So it has no correlation to anything in the current one?

[topaz edge]

To the best of my knowledge, yes

but I haven't finished going through the second one

[rocky lynx]

oh so I have been figuring out for the last 20 minutes what these symbols mean for no reason lol

I can’t find anything about those symbols tho

[wicked quarry]

https://discord.com/channels/773771861812183080/1304875305466335274
Reposting this cause this is the correct place to post it

Is this information new or already found? It's been like a day and so much has been found

[quick yacht]

so like any updates since 5 pm

what i mean is

anything new

[wintry plover]

yeah, it has been found

without any new information i dont think we can solve this 😦

[quick yacht]

tbh i don't thing sarg even posted everything about it cause the code got found without doing everything

u were supposed to

[wicked cairn]

I have a feeling the "pigpen" isn't another red herring as it is pretty short

[wintry plover]

but it doesnt make any sense

and the way it was composed into the image is weird

[wicked cairn]

It's probably not pigpen is the thing

The shapes of the characters have irregularities like especially in the bottom left and top right

And with it being pigpen it doesn't narrow much down given an all capital string of characters isn't that helpful

[wintry plover]

It's small enough to be pianted pixel by pixel into the image

But that's clearly not what happened

[halcyon mirage]

okay what did we discover

anything big?

[wicked cairn]

nope not really

still looking for leads i think

[wintry plover]

Btw why are the screenshots 800 x 450

[wicked cairn]

dunno

[halcyon mirage]

did y’all look in the image’s property settings yet

because i sure as hell didnt

[wicked cairn]

the images are scaled down for some reason but the original window resolution is around 1067x600

[wintry plover]

It would be great to have a tool that automatically does all the obvious stuff and displays it for all images

[wicked cairn]

plus or minus 1 to 2

[wicked cairn]

imgur wipes metadata doesnt it?

[wintry plover]

Most certainly yes

[halcyon mirage]

werent the images posted on twitter?

[wicked cairn]

some of them

i think twitter also strips tho

not sure

[wintry plover]

It's a standard to strip metadata

I feel like the glass pattern could mean something

[wicked cairn]

which?

[wintry plover]

From lost_numbers.png

[wicked cairn]

oh yeah

the stained glass patterns?

its entirely possible

[wintry plover]

Here is the text version

Easier to analyse with code

Two blocks could encode one English letter

So maybe that

And then it's a substitution cipher essentially

[wicked cairn]

each pair could have 49 different combinations

[wintry plover]

36 i think?

[wicked cairn]

theres 7 different colors, 2 blocks would be 49 combinations (7^2)

[wintry plover]

Aren't there only 6 colors?

There are also 3 unknowns

[wicked cairn]

oh sorry

[wintry plover]

Or 4 if the glass under obsidian isn't pink

[wicked cairn]

i accidentally read the unknown as a color

it would be 6^2 so 36

youre right

[wintry plover]

5 colors wouldn't be enough

Maybe it is intentional or maybe it's a coincidence

[halcyon mirage]

saerge ohw to leak his DNA sequence through minecraft glass
/j

[wintry plover]

Dna is what i thought it could be

But dna has 4 letters

And there are 63 blocks of glass

So pairs seem weird

But maybe we should subtract those 3 unknowns

Or the obsidian in the middle

Lots of possibilities

And writing code to accommodate all of them seems complicated

[halcyon mirage]

why are we going this deep into stained glass

[wintry plover]

Well idk

There are also those numbers in the hotbar

I also discovered that the alpha channel has a few distinct values

But it's probably just a mistake

[halcyon mirage]

i was about to say something very brain rotted

luckily i managed to keep in

[wintry plover]

Oh, i guess we discovered that those dots were likely covering end cities

[halcyon mirage]

oh ok

[wintry plover]

But that's kinda disappointing lol

And maybe not true

[wicked cairn]

when will someone who is really smart come in and make a grand discovery

[wintry plover]

Who knows

[wintry plover]

I hope by the time i wake up the next day there is gonna be something

[wicked cairn]

the small ones are almost certainly end cities, the larger one we have no way of really knowing

[wicked cairn]

thanks

[harsh fjord]

Is there a thread for that?

[topaz edge]

Not yet. I could make one but my research is still a work in progress

[foggy flame]

is it possible the colour floor is hexahue cipher

[topaz edge]

after today I'll update the slideshow with what people have found

[quick yacht]

what if the inventory numbers actually are the pigm cypher letter numbers

also theres diffrent varients of the pigmen thing https://planetcalc.com/7842/

[topaz edge]

Minecraft Clues (The Mojang ARG You've Never Heard Of)

[wicked cairn]

clickbaiting a discord thread is crazy

[rocky lynx]

U might be on to something

[pine prawn]

Umm, I got PUNJAR

[rocky lynx]

Wdym?

[pine prawn]

I tried scanning it by using ai

And said he got PUNJAR

He said it's related to PUNJAR

[wicked quarry]

ikr LOL

[pine prawn]

I used python tho to make it bright

That obsidian broke it

[wicked cairn]

we already found both the qr codes!!

[pine prawn]

They are the same what both?

[wicked cairn]

theres 2 qr codes hidden in the image

one in the alpha layer, and one that is just darkened in the image

you found the first one which was shown in the video

theyre both found and they both are likely red herrings

[topaz edge]

it's making it so people know that it's connected to the video

[pine prawn]

I designed the qr code

[topaz edge]

everything below the horizon is the Alpha Channel code

^ this is apparently the real second code

[pine prawn]

That doesn't even look like mine

Oh nvm I am stupid

[pine prawn]

How you got the one with obsidian?

[topaz edge]

https://twitter.com/SeargeDP/status/1855395512372908083

Searge (@SeargeDP) on X

@RetroGamingNow I tried, but for some reason Youtube immediately removes the comment again. They probably have some "smart AI" watching the comments and classifying it as spam.

Twitter · Nov 9, 2024, 11:42 PM

[wicked cairn]

probably something like this

oops

[wicked cairn]

http://itzlipofutzli.com

huh

interesting nobody's tried this

[pine prawn]

You sure he is real?

[topaz edge]

this might be a part of the second ARG

[pine prawn]

Nvm

[pine prawn]

Go to network

[wicked cairn]

just the document and the favicon

[pine prawn]

Try to go to html file

Dang

[wicked cairn]

i mean its kinda cheating tho

i take it back i dont think thats allowed

[fallen shuttle]

@wicked cairn

are you still there?

[wicked cairn]

yea

[fallen shuttle]

soo um

yk that website that you can paste the link and see what was on it?

[wicked cairn]

i wouldnt do that thats in a legal gray area

you need consent by the site owner to do that

[fallen shuttle]

noo noo

i mean

like in 2018

[wicked cairn]

wym

[wicked cairn]

oh archive

[fallen shuttle]

see a website from 2018 2022

and etc.

[pine prawn]

Woah

[fallen shuttle]

now it says go away

in 2018 access denied

[wicked cairn]

yeahh interesting

can you check the source?

[fallen shuttle]

ye wait a minute

nothing much

[wicked cairn]

okay

[pine prawn]

Open script

[wicked cairn]

one of my extensions is lowkey injecting into the website so i got confused why there was a random .js

[wicked cairn]

the script is outside of the website iframe so its probably just from archive.org

[fallen shuttle]

nothing

[fallen shuttle]

lol

[topaz edge]

yeah I've made that mistake before

[fallen shuttle]

http://web.archive.org/web/20191001000000*/http://itzlipofutzli.com/

[wicked cairn]

should we look into this website further or is it too irrelevant atm

[fallen shuttle]

idk

i will look into it

maybe it has something

[wicked cairn]

i think this comment here is important but idk how we'd enter phase 5

[pine prawn]

http://itzlipofutzli.com/robots.txt

[fallen shuttle]

go away or enther phase 5.

[wicked cairn]

what

what is this

[pine prawn]

Idk found on archive

[fallen shuttle]

wait i will look into it

maybe its expired link or sm

wait

it is

wth..

[topaz edge]

https://web.archive.org/web/*/http://itzlipofutzli.com/*

[pine prawn]

Here is another one http://itzlipofutzli.com/favicon.ico

[wicked cairn]

mk

[pine prawn]

They expired on 2022

They were working on 2018 my website is buggy

[wicked cairn]

i wont lie robots.txt seems utterly useless, its just printing access denied

[topaz edge]

I definitely haven't seen this website yet

but there's just not much there to work with for some reason

it is the clue he was going to give on my video though

[fallen shuttle]

so its a new website with a hidden message inside it but not else?

[topaz edge]

maybe I should make a pinned comment so people can see it

[fallen shuttle]

yess

[pine prawn]

I think when he saw your video he started the server

[wicked cairn]

what is enther

[fallen shuttle]

maybe enter but mispeled?

[wicked cairn]

i mean yea , maybe im stretching but it could mean something

idrk at this point we dont hjave much to work off of

[fallen shuttle]

yea we have to find something that we can work from

[topaz edge]

just did it

[fallen shuttle]

nice

[topaz edge]

wouldn't it be fun if he ends up making a new puzzle

I don't think this site is associated with either the puzzle I covered or the one from 2016 I haven't covered yet

I can't find any references to it. Seems to be new

[wicked cairn]

it has archive links from 2018 tho

[topaz edge]

although it must have existed previously because of the archive

[topaz edge]

yeah this

so I might just not know what referenced it back then

[pine prawn]

Wait didn't you mention 26 May 2024 on your video?

About the hot bar items

[topaz edge]

Not quite. I suggested that the 23 5 15 numbers were May 23, 2015

[wicked cairn]

didnt searge say that the date theory is wrong

[topaz edge]

I'm not sure

I must have missed that

[wicked cairn]

ah so he didnt directly say it

but its kinda implied

[pine prawn]

Yeah I saw it he update it that day

[fallen shuttle]

yea but it hasnt have anything so the date isnt important i think

[wicked cairn]

has anyone found this http://itzlipofutzli.com/phase5/ ?

[pine prawn]

Huh

[fallen shuttle]

YO i found this in html editor but i was thinking it was just some code

[wicked cairn]

found what

[fallen shuttle]

this link

oh

nvm its stiil a code

just looking similar

mb sorry

[wicked cairn]

oh i just pasted phase5 from the inspector into the link

[wicked cairn]

yeah idk what that means

[fallen shuttle]

maybe the mystery?

its still on, but most gave up on it

[wicked cairn]

save and quit binding in vim

maybe searge is a big vimmer

[pine prawn]

Probably press on a key on keyboard? To open it

[wicked cairn]

im guessing this is a part of the next arg but we dont really have enough information to do much

[fallen shuttle]

cant find anything else on it

[pine prawn]

Has this qr code solved yet?

[fallen shuttle]

kinda?

[wicked cairn]

yes

[pine prawn]

What you got?

[wicked cairn]

is pinned

[pine prawn]

I scanned it not working

[wicked cairn]

scans for me

[pine prawn]

Scan this one on the one you scanned it

[wicked cairn]

this one isnt a valid qr code

this is a weird mash of the first and second one

[pine prawn]

What format info patern you used ?

I used L3

[wicked cairn]

what

i dont know what that means

[pine prawn]

💀

You drawed it on photo shop?

[wicked cairn]

drawed what

[fallen shuttle]

qr code

[wicked cairn]

yeah

[fallen shuttle]

i see

[wicked cairn]

ignore that tihs part is wrong on the red outline

[fallen shuttle]

i didnt even see it lol

[pine prawn]

And you got it right

https://merri.cx/qrazybox/

I used this

[wicked cairn]

okay well i did use qrazybox to clean it up into a proper qr code

as well as to find error spots

[pine prawn]

Oh ok

[wicked cairn]

but yeah the problem with this one is that you didnt remove the slight transparency beforehand, resulting in whatever filter you used to find it giving you a wonky mix

[pine prawn]

Python code

To make it that bright

[wicked cairn]

no filter alone will let you find the qr code, what i had to do is recreate the scene in minecraft 1.8.3 then use a difference layer

then added a blue overlay for visibility

[pine prawn]

Okay

So when you scanned it what did you get

[wicked cairn]

This would be too easy, try harder!

[fallen shuttle]

YOO

i found something more

[wicked cairn]

showww

🥺🙏

[fallen shuttle]

not useful

[wicked cairn]

url?

[pine prawn]

2020?

[fallen shuttle]

so this link http://itzlipofutzli.com/phase5/

i just put 4 and not 5

and this showed up

idk if its useful or sm

[wicked cairn]

neat

[fallen shuttle]

neat

[pine prawn]

http://itzlipofutzli.com/neat

Jk

[wicked cairn]

what the rizz

sorry

[fallen shuttle]

https://tenor.com/view/baldi-baldis-basics-mogged-mog-rizz-gif-11774215665411580343

i hate this but i want the answer

[pine prawn]

I think he is watching us

[wicked cairn]

what have we devolved to

[fallen shuttle]

sigma baldi

[pine prawn]

Try adding the 5 letters

That was used for the card indie or it was

[fallen shuttle]

huh

[pine prawn]

What's that

:wq

[fallen shuttle]

its the part of code i think

[pine prawn]

Huh

Nah it's not

You checked this http://itzlipofutzli.com/robots.txt

?

[fallen shuttle]

ye

[pine prawn]

Every date?

[fallen shuttle]

i try again

[fallen shuttle]

ye

[pine prawn]

Alr

[fallen shuttle]

lol

i found one single red pixel

[pine prawn]

?

Where

[wicked cairn]

thats archive.org

thats not relevant

[fallen shuttle]

mb

[pine prawn]

What about http://itzlipofutzli.com/favicon.ico

[wicked cairn]

deleted

[pine prawn]

Huh it's still on

No use it on archive

https://web.archive.org/web/20220123161858/http://www.itzlipofutzli.com/favicon.ico

[wicked cairn]

access denied

[pine prawn]

Yeah chech html

Console

For hidden messages

[wicked cairn]

i did

access denied

thats all

im pretty sure all the access denied ones are actually accessed denied, it would be clever to hide something there but i doubt it

[pine prawn]

That one :wq is sus

[wicked cairn]

it wont let me save it

[fallen shuttle]

i swear it was working

[wicked cairn]

idk if its been found before or not

[fallen shuttle]

what?

[wicked cairn]

the /phase5/

[fallen shuttle]

ohh

you found it

and it was not found until now

so maybe something in phase5

[pine prawn]

I know it he was watching us so he removed it

Am go to sleep

[fallen shuttle]

okay goodnight

https://tenor.com/view/muratkoyimdaturat31-good-night-kiss-untitled-boxing-game-world-champion-skibidi-toilet-gif-8203026251715972233

so http://itzlipofutzli.com/phase5/ was made on 9 nov (yesterday)

Sat, 09 Nov 2024 10:54:52 GMT

nah i am doing it tomorrow

bye

[wintry plover]

Anything new? I can't sleep lol

Also how the hell can i see pinned comments in a thread on mobile

Ok so i guess we did get the comment

That's great

But no one found anything on the actual website?

[worldly spindle]

should i run ffuf on the website or that would be considered illegal ?

maybe i can ask him if its ok

[bleak briar]

the server appears to be running ssh, is tehre anything so far that looks like a login/password?

[worldly spindle]

dude dont make a mistake

if you made an nmap scan stop

[bleak briar]

nah, no nmap, I'm not stupid

[worldly spindle]

Searge is pointing to the website, we should not go out there and try to connect to somethings that are not for us

[wicked cairn]

you definitely need consent for that kinda thing

its kinda cheesing it

[worldly spindle]

exactly but i think he wants us to go to phase5

and somehow not give up on the phase5

[wicked cairn]

http://itzlipofutzli.com/phase5/

idk what it really means tho

not much helpful

[worldly spindle]

yea i think he needs a bit more time to make the next step

do you know his schedule ?

i mean a timezone

[wicked cairn]

i think this puzzle is 6 years old

[worldly spindle]

i dont think so

he is back

[worldly spindle]

i think he is right

[wintry plover]

I'd say hacking into the ssh is fair game

But it's probably not possible anyways

nmap is definitely fine

[wintry plover]

:wq saves and exits vim btw

thats the only connection i see

[wicked cairn]

yup

[wintry plover]

it's still on, but most gave up on it :wq

what does that mean

i feel like this new website also doesnt help

[worldly spindle]

i think he didnt have time to put the next step. he posted couple of hours ago that he found his notes and from the websites location i think he is from Sweden(Or i am really far and he is from NA) so we should be getting new clues through twitter or the website soon

[wintry plover]

i guess sweden

the websites ip would suggest that

actually the ip points to finland

[worldly spindle]

yes but he posted at 3 AM GMT on twitter so he could be in the US and the website in finland(that is why i am saying an nmap scan and ssh bruteforce might not be the best idea because he is not hosting the server himself)

[agile silo]

it’s werid how there’s just lines on one side of the images

[quick yacht]

thats just structure blocks

[agile silo]

I meant that left side

3 lines

[quick yacht]

i can't see shi

it's a flashbang

[agile silo]

dude 3 am?

[quick yacht]

nah i just woke up

but still

wa too bright

[agile silo]

There’s 2 qr codes but those might have been found alr

[worldly spindle]

there is nothing else with those qr code i have tried 120 combinations on imgur

[agile silo]

oh

ok

just fiddling with the sliders

tryna find smth

[worldly spindle]

we have to wait for Searge to make a new post or change the website

aside from that we only have the pigpen that might have been put by mistake there

[agile silo]

oh the top image also has a qr code

lol

[worldly spindle]

all of them have one

[agile silo]

ohh

[worldly spindle]

its was a side quest for a steam game

also the door image might have something why would he make 2 ss only to get the timestamp on the chat

[agile silo]

What if I recreate every image in mc

lemme try that

would 11.5451 mean smth?

Wait windows 10 edition of minecraft was released in 2015

[worldly spindle]

wait in the second image(?) there are 2 new blocks in the hotbar

[meager gale]

so i have done a Nmap scan of itzlipofutzli.com and found this root directory, it needs a password and a username wich i don't know, here is it: http://itzlipofutzli.com/protected/

[wintry plover]

its just the date at which a screenshot was taken so idk

most likely its just random

[worldly spindle]

as my old profesor used to say when you get an information you get it for a reason so i think ATHUR might be the username or the password

also the website uses bas64 as encryption for username and password

[wintry plover]

What?

Wdym it uses base64

[worldly spindle]

so passwords are not send plain text they are encrypted and than sent to the server(in general) in this case they are encrypted with base64 so we might get a clue or a photo with some base64

[wintry plover]

but how can you know that

and btw i also found http://itzlipofutzli.com/lotd

[worldly spindle]

i saw in the requests tab of dev tools

[wintry plover]

idk where base64 is mentioned at all

and i dont think it matters because base64 isnt encryption

just an encoding

[worldly spindle]

can you do a -sV also a -A please

[meager gale]

ok

[worldly spindle]

also use the script vuln

[wintry plover]

nothing interesting

[meager gale]

here is it

[wintry plover]

why do you run nmap with sudo?

[worldly spindle]

omg please use a proxy @meager gale

[meager gale]

is it bad i i didnt use it?

[worldly spindle]

dude he works for mojang if he gets mad by this you might get in trouble

[meager gale]

i just got into nmap and i mostly use chatgpt to expane to me these things, sorry if i am bad at this

[wintry plover]

its just nmap lol

[worldly spindle]

still illegal but ok ig

[wintry plover]

no?

why would it be illegal

[worldly spindle]

i think this image has the username and password

on that sign

https://twitter.com/SeargeDP/status/588382691726229504

Searge (@SeargeDP) on X

OMG!

Twitter · Apr 15, 2015, 4:45 PM

[quick yacht]

what if i just try bruteforcing the pass

?

[worldly spindle]

Searge is smart even if you use rockyou it wouldnt work

[quick yacht]

i have my own tools

[worldly spindle]

do your thing

if you want i can try to run it too

but put it on threads so it runs faster

[quick yacht]

this is new

[worldly spindle]

ok so he has noticed we were doing something wrong

should we run ffuf with custom wordlist ?

[quick yacht]

i was about to

reinstall fluf

ffuf"

[worldly spindle]

wait but protected starts with a p

so its ok

[quick yacht]

i even tried

sending a 200 request

to the protected thing

[worldly spindle]

hold on

enter is spelled wrong

"enther"

[quick yacht]

arthur enther

[wintry plover]

I used ffuf with some wordlist lol

[quick yacht]

i wonder if his using a host

or his own server

[wintry plover]

Well, i hope we don't accidentally do Denial Of Wallet attack

[worldly spindle]

exactly why i use tor as a proxy

[quick yacht]

the sign is impossible to make out

[west onyx]

Save yourself some time and don't brute force it, it's not just against the spirit of following the trail, it would also take you a few centuries due to the brute force protection in place.
I won't give more hints, but I'll reveal some information about the protected folder:

• I forgot that I had all my old notes on the server, they are in the protected folder but I now removed the file that contains all solutions in case you solve the password puzzle
• The only port of the server you should interact with is 80, too much traffic on other ports may trigger protections that shut down the network services for hours
• This is not a new hunt, it's been dormant for years because people stopped solving the puzzles and following the trail
• The main hunt was and is divided in phases, according to my notes

[wintry plover]

Wow

[worldly spindle]

only one question is "enther" spelled wrong by accident ? @west onyx

[worldly spindle]

:)

[wintry plover]

yeah, we arent supposed to ask questions

[quick yacht]

a

what protected folder does he mean tho

the website /protected

or what

[worldly spindle]

yes

probably a file hub

[halcyon mirage]

any new discoveries?

[west onyx]

tbh, when it was actively investigated last time, years ago, I spent too much time providing hints that were ignored or not figured out so I figured there is enough information out there to solve it and I'll stop adding on to it

[worldly spindle]

yes actually

[halcyon mirage]

well i already see one thing

searge is here

[quick yacht]

you should tottaly keep adding on it

!!!

[worldly spindle]

summary of what is new
/phase5
/protected
"enther"

[halcyon mirage]

well, time to go to every post searge has ever made on the internet

[west onyx]

ok, here is the deal. if you find my notes I'll answer 1 question about them, find a way to figure out what you want to ask when that time comes 🙂

[wintry plover]

notes? so like from the/protected/ folder

[quick yacht]

http://itzlipofutzli.com/protected/notes

!!!

[worldly spindle]

he wont answear and if he would it will take away the fun

[quick yacht]

prob not

[worldly spindle]

i dont think that is it

[quick yacht]

yea i know

[worldly spindle]

in english nouns are written with capital case ?

why is "Puzzles" written with one ?

[plush jolt]

rgn mfs be like: maybe the solution is breaking into searge's house and yelling at him "THE FOG IS COMING, HIDE BEFORE ALL HOPE IS LOST"

[quick yacht]

nah just pull up with a glock

[wintry plover]

new game rule added by i.p.: only folders starting with P are part of the Puzzles
what's i.p.?

[worldly spindle]

internet provider/protection ? idk

ok so there is "enther" and "dince" that are obviously spelled wrong

[wintry plover]

i think its time to create a document with everything found so far

i guess there is the slideshow

[worldly spindle]

we dont have access to edit it

[wintry plover]

i am generally not a fan of slideshows

a zip file would be better imo

with instant access to images

[worldly spindle]

i think a docs is better because it can be shared and edited

[wintry plover]

docs are annoying

[rocky lynx]

what even is this for

what happens when we figure it out

[wintry plover]

nothing

🙂

[harsh fjord]

Dude it's an arg

What do you expect it to be

[rocky lynx]

Args have endings, stories this is just one big puzzle

[harsh fjord]

I think he just continued it for fun

But it was probably just something to tease the structure block initially

And the end cities I guess

[worldly spindle]

i think there is a reward tho he seems pissed off because we played arround with his server

[harsh fjord]

what happened

[worldly spindle]

he joined the server to tell us to stop the brute force and updated the source code with a hint

[wintry plover]

it doesnt mean he is pissed, just doesnt want us to bombard the server with useless requests

[worldly spindle]

also "dince" is in the source code of phase 4
and "enther" is in phase5

[wintry plover]

where?

oh

my brain automagically corrects this lol

[harsh fjord]

What server?

I was asleep so I missed a lot

[wintry plover]

http://itzlipofutzli.com/

[worldly spindle]

like 20 mins ago he joined the discord server

[harsh fjord]

HUH?

[worldly spindle]

look to the right

on the member list

[rocky lynx]

look @west onyx

[fallen shuttle]

nice

what did i miss?

Never mind, I read the chat

[worldly spindle]

Maybe the dear Esther hunt was not a side hunt

[quick yacht]

esther ether idk

maybe

[sturdy saffron]

i love how i gave a major idea of it being a structure block and it actually worked

[wintry plover]

Yeah

But does it mean anything more

I feel like most of the things are unrelated to eachother

[pine prawn]

I am alive

[magic pumice]

Thank god

[pine prawn]

There is something on this site http://itzlipofutzli.com/robots.txt

[magic pumice]

eh

[worldly spindle]

we were instructed to only look at sites that start with p

[magic pumice]

not found

[pine prawn]

Use archive yesterday was working and got notes

[magic pumice]

yeah i was trying that

right now

[pine prawn]

Can the link be a minecraft server?

[quasi kraken]

http://itzlipofutzli.com/

GO AWAY!

<!-- or enther phase5 -->

<!-- new game rule added by i.p.: only folders starting with P are part of the Puzzles -->

http://itzlipofutzli.com/phase4

ACCESS DENIED!
<!-- dormant dince 2020 -->

http://itzlipofutzli.com/phase5

!ACCESS DENIED!

<!-- it's still on, but most gave up on it :wq  -->

Things to note :

• A lot of links from previous phases are gone
• Phase 4 is still here, so did we even solve phase4 ?
• Misspell on enther and dormant, and also extra !
• From previous phase, the normal way to progress is to find new folder, so phase5/??? is the next step?
• This date back to 2020 but is this even related : https://x.com/SeargeDP/status/1246004317733228545 (I and noone can't get anything from that image)
• What other relevant image can we use?
• :wq refer to vim save and exit command

[pine prawn]

You got the codes that we used for imgur?

[magic pumice]

Access Denied

[pine prawn]

Check console and network

[magic pumice]

maybe later

i've got work to do

[pine prawn]

Ok

[magic pumice]

ttfn

[wintry plover]

Did phase1 phase2 and phase3 even exist?

[pine prawn]

Solved and some not

[harsh fjord]

Hey, Searge, this isn't really a question about a hint, but I gotta ask, why did you choose to hide the qr code in the noisiest possible part of the stained glass image and then when somehow decoded made it a useless hint

[wintry plover]

Tbh that's not a good question lol

[pine prawn]

http://itzlipofutzli.com/phase5/M2XKN
http://itzlipofutzli.com/phase5/GMY2K

[worldly spindle]

i dont think that is the problem, the problem is that aside from the pigpen theory that nobody could decode because it was too blurry we did nothing with that. i mean the hotbar translates to some letters but we just skipped to the next image

[wintry plover]

I think the biggest question right now is if we have done anything correctly

[quick yacht]

yall wanna just make an updated doc or sum

[worldly spindle]

yes

[quick yacht]

hop in vc

[worldly spindle]

we did but we missed something

[quick yacht]

https://discord.com/channels/773771861812183080/979436594576654406

[worldly spindle]

yo is dormant misspelled?

[quasi kraken]

you mean written dorment? I think the most common spelling is with an a but there is some trace of dorment in other languages / older texts

so I don't think it's a misspell

[worldly spindle]

so that brings us to "enther" "dormant" "dince"
enther could be esther from the hunt
dormant is dorment
dince is since

esther dorment since ....

[worldly spindle]

where did you find an extra "!" ?

[pine prawn]

Next Steps:

1. Explore Folder Names Starting with "P":

Investigate the URL structure further—check for other potential folder names that start with "P" (e.g., phase5/puzzle1, phase5/p, or others).

2. Look for Additional Images:

Try to analyze any hidden images or metadata that might be embedded in the page source, especially those related to the tweet. It's possible that the image from the tweet is linked to hidden content or offers clues when decoded or analyzed.

3. Command-Line Thinking:

The reference to :wq might suggest you should explore the website as if it were a file system or a terminal interface. This could involve testing different "commands" by manipulating URLs, interacting with hidden text, or looking for terminal-like interactions in the page’s source.

4. Explore the Date Reference:

The "dormant since 2020" note could be a reminder that the puzzle is old and maybe contains dated references, or it could indicate a specific event or time period when the puzzle was most active. Consider revisiting anything associated with that time to find links, changes, or clues tied to the past.

[quasi kraken]

I didn't "find it"
There it's just ACCESS DENIED! from phase4 and !ACCESS DENIED! from phase 5 (don't think that matter tho)

[worldly spindle]

hmmmm in programming an ! means that is false so that would translate to access is not denied

[balmy vigil]

you used chatgpt for that, didn't you?

[pine prawn]

Pff, no?

[quasi kraken]

after phase5/??? we are in subfolder, so I think words that don't start with P would be allowed

[pine prawn]

Might be random numbers

[balmy vigil]

it looks like you generated this message using AI, though

[worldly spindle]

we never used the hotbar numbers

[pine prawn]

I am bad at explaining

[pine prawn]

Oh yeah

That has to do something

[balmy vigil]

if anyone wanna vc btw

[quick yacht]

what if

all hotbar numbers

or some

like per each image

One of them is the pass

so like idk for example 1 2 3 4 but instead each hotbar number by order

from oldest to newest number

[pine prawn]

WAIT

[pine prawn]

Is it 3 characters only?

[quasi kraken]

no

[pine prawn]

That book

That we used it on base 64

[worldly spindle]

Kaiden please look at dms

[balmy vigil]

The ip adress of the website is 95.216.242.249 btw, it uses Hetzner Online hosting services

[pine prawn]

Ahh

[pine prawn]

Tbh you are right let's try find something with P

I will rewatch the video for the 16th time

[wintry plover]

We don't know if it's a subfolder of phase5 tho

[quasi kraken]

It's in a subfolder, I might not necessarily need to start with p, I think the rule is just to protect other root level content of the server

[worldly spindle]

yea i think he is right

[pine prawn]

Oh

That's a point

[pine prawn]

We just have to try

[wintry plover]

My interpretation was that there are more folders in the root that start with p

But maybe there are only phase + number folders

[pine prawn]

Spiderman, superhero

Btw did y'all check the spiderman image?

[quasi kraken]

^ yeah there could be more p folder on root, but for other phase we have some freedom.
Also note that we could also look for files so phase5/something.txt could work.

[wintry plover]

The historical context is that the end update is about to be announced btw

[pine prawn]

I found this one http://itzlipofutzli.com/robots.txt

[quasi kraken]

this is unlerated, it's a common config file for servers

(also you didn't find it)

[pine prawn]

http://itzlipofutzli.com/favicon.ico

This too

[worldly spindle]

that is just desperate for the answear

[wintry plover]

Those links don't even work lol

It's just 404

[pine prawn]

Archive works

[worldly spindle]

did we ever use the hotbar numbers ? might be 23515.txt or something

[pine prawn]

Oh yeah hotbar

[wintry plover]

favicon.ico is just the icon of the website

[candid patio]

the hotbar numbers doesn't seem to be anything

[quasi kraken]

if the links are gone it's probably not related to hunt. Only sane platform is the website and Searge twitter posts from 2020
Looking an older doc, I find that all links from phase < 4 are gone, can we find other link that still work?

[candid patio]

23 5 15 24 12 15 are all below 26 so i thought it could be a1z26

doesn't lead anywhere tho

[worldly spindle]

i saw this once but i dont know how to decode it:https://x.com/SeargeDP/status/1246004317733228545

Searge (@SeargeDP) on X

Twitter · Apr 3, 2020, 9:19 AM

[quasi kraken]

I did try a lot of things, but I can't get anything from that image.

[wintry plover]

It's from a different arg

[pine prawn]

I can see like a bridge in middle

[worldly spindle]

its a qr code

[quasi kraken]

how come it's not related? It's from the same year and supposedly not a single step forward has been made from that one

[wintry plover]

It's from 2020

And the main hunt is from 2015

[clever torrent]

@quasi kraken hey nice to see you here lol

[quasi kraken]

"<!-- dormant dince 2020 -->"

[clever torrent]

time to revive the subreddit

[pine prawn]

<!-- dormant dince 2020 -->

[clever torrent]

<!-- it's still on, people just stopped looking -->
It never ended and this is what it evolved into.

[candid patio]

feels like oldroot all over again

[wintry plover]

RGN is researching that and he said it it's a separate thing

[clever torrent]

Searge started a new round of puzzles with the red post iirc (it stopped there as well iirc)

I talked to him back at gdc years ago about the original puzzles to try to learn anything but unfortunately people had lost interest and I couldn't get interest back

[wintry plover]

Maybe we'll get a video about that second arg too

[clever torrent]

oh hey searge is here?

[wintry plover]

He is actually

Maybe he is watching us

[clever torrent]

nice haha

[quasi kraken]

yep and he gave hint in exchange of cookies

[wintry plover]

He also said that he would answer one question if we get access to his notes

So that implies it's actually possible to get the notes?

[pine prawn]

Tried everything on that image nothing

[worldly spindle]

@quick yacht

i think you can help us

i remember you have some tools for this

[wintry plover]

I don't think there is anything visual to see here

We probably have to interpret the pixel values in some way

[worldly spindle]

yes

[quasi kraken]

I did try alpha channel and stuff, so it's not that obvious.
Weirdest thing is that blue channel = green channel, there is a weird repeating pattern and top, so people managed to remove it but that doesn't help in the end.

[worldly spindle]

Fame has tools for that

[worldly spindle]

maybe we need to combine the blue and green channel

[wintry plover]

I would try taking red channel values and just interpreting as bytes

Maybe there is some text there

[quick yacht]

i was away wsp

@worldly spindle

[worldly spindle]

we have an image and your tools might help us determine the answear

at the base its a qr code

https://x.com/SeargeDP/status/1246004317733228545

Searge (@SeargeDP) on X

Twitter · Apr 3, 2020, 9:19 AM

[quick yacht]

none of the bit plans have anything

only thing i could find was

[quasi kraken]

This is a modified version that do (r+g)%255 The result only consist of 4 different pixel color I used an other transformation before that

[wintry plover]

Wow

[quick yacht]

blue 6,7 ,green6,7 aint hace anything

if u check the alpha

channels

[quasi kraken]

that's what I said blue channel = green channel

no alpha channel too

[candid patio]

would the hotbar numbers be relevant there

[quick yacht]

there is a green channel but with everything u can't see it

it hides with the blue one

exact same pattern

they overlay eachother

[worldly spindle]

i think a specific value of blue or red has the qr yesterday you did separate the values of the alpha channel

[quick yacht]

i think

what if we

seperate them but not like that

move each by like

1cm

or like offset

theres like grid pattern

on it

can u see

[quasi kraken]

The 3 spikes on the red channel correspond to those colors put in blue, green and orange

[clever torrent]

I don't know if anyone ever shared it here but we had some docs we made documenting all our hunt progress
Current hunt with unsolved progress: (Use this document to keep track and update)
Please avoid modifying old pages, new hunt progress continues on 2024-Hunt For Notes
https://docs.google.com/spreadsheets/d/1DwMD9gntOfzGQOXUfnozr06ZHrsE2241eBrOTicREf0/edit?gid=854382651#gid=854382651

Original hunt document (read-only): https://docs.google.com/spreadsheets/d/1T26pBPHivoeF-je-EMWgVaTadTr-i7KSyyCjEsJp7Qc/edit?gid=1736158224#gid=1736158224

Original hunt document 2: https://docs.google.com/spreadsheets/d/1HahxLzjSv3zkxNfXQELXNBwVHKKDvcxqu4gudoo2yFI/edit?gid=1736158224#gid=1736158224

[pine prawn]

Wait that look like a text

[quasi kraken]

no?

[quick yacht]

WAIT

THAT LOOKS LIKE UH

WHATS THAT CYPHER CALLED

[pine prawn]

Cipher decoder?

[quick yacht]

EACH PIXEL IN A 2BY 6 IS LIKE A ALPHABET

nah

wait

il find it

https://www.dcode.fr/hexahue-cipher

[clever torrent]

Maybe could be pinned?

[quasi kraken]

There is no clear 2x6 pattern tho

[quick yacht]

what did u do to achive the img

[quasi kraken]

I took the image and global colored on the 3 most dominants color

[quick yacht]

what photoshop app do u use

[candid patio]

Idt it's hexahue

there's no cyan

[quasi kraken]

paint.net

[quick yacht]

not have that

[quasi kraken]

I did put arbitrary colors, but it just show they don't combine to create any obvious pattern

[quick yacht]

join vc rq il screenshare

is it laggy

can u see

the pictures

[worldly spindle]

stop nmaping

[balmy vigil]

but it fnuuy

[worldly spindle]

he said to only use port 80

[quick yacht]

wait

[balmy vigil]

did he?

[worldly spindle]

yea and you can get in trouble

[balmy vigil]

frick

[worldly spindle]

yes he did we also tried to bruteforce our way in

[wicked cairn]

whatre you guys working on rn

[worldly spindle]

https://x.com/SeargeDP/status/1246004317733228545

Searge (@SeargeDP) on X

Twitter · Apr 3, 2020, 9:19 AM

[wicked cairn]

Neat

[mild saffron]

is all of this stuff from the second arg?

[quick yacht]

tell me if u can see the photo @quasi kraken

[wintry plover]

It's not illegal or even suspicious to use nmap lol

[wicked cairn]

Looks like digital noise

[quick yacht]

@balmy vigil can yall see thr picture

in my photoshop app

[wintry plover]

It just scans ports and checks what services are exposed

[mild saffron]

true, just don't do bad stuff with information you get

[clever torrent]

FYI there's info on unsolved stuff in the second doc

[quick yacht]

what did u do to achive the thing on urs @quasi kraken

[mild saffron]

or just don't get caught u know

[quick yacht]

aa

[mild saffron]

maybe a mod can pin it

[quick yacht]

look at this

[mild saffron]

@wicked quarry do you have perms to pin stuff? :3 #1296523073259831296 message

[quick yacht]

hm

[clever torrent]

Both docs technically have some unsolved stuff scattered around, my memory is kinda rough on what was going on between the docs now after all these years though

probably I summarized some of that in the unsolved mysteries post I had made