The Mole

The Mole
Active since 2018-07-??
[[// TODO|400px]]
The Mole is a riddle discovered on Reddit. A user named Nakano-Anapa posted a long binary post on his profile. There isn't much information about this riddle (or ARG) yet. The original post can be found here:https://www.reddit.com/user/Nakano-Anapa/comments/8wsfst/2036/
Type	Investigation
Creator	UNKNOWN(ZEOT)
Discovered	2018-07-??

Main Page > List of Investigations > The Mole

Introduction

This riddle has NO NAME! But people tend to call it MOLE or THE MOLE because of many mole pictures and(or) clues referring to moles. It first appeared on 4Chan where a post led to the Reddit post of Nakano-Anapa, just as linked in the description. It's a highly cryptic riddle so sometimes it involves code breaking, information research and stenography. The intention of the creator or the meaning/use of this riddle are unknown yet.

The Beginning

On July 7th a Reddit post appeared by the user Nakano-Anapa: https://www.reddit.com/user/Nakano-Anapa/comments/8wsfst/2036/

It contained following message:

 
Greetings, mole!


00001010 01010100 01101000 01101001 01110011 00100000 01110111 01101001 01101100 01101100 00100000 01110011 01100101 01110000 01100101 01110010 01100001 01110100 01100101 00100000 01110100 01101000 01100101 00100000 01100011 01100001 01110000 01100001 01100010 01101100 01100101 00100000 01110101 01110011 01100101 01110010 01110011 00100000 01100110 01110010 01101111 01101101 00100000 01110100 01101000 01100101 00100000 01110101 01101110 01101110 01100101 01100011 01100101 01110011 01110011 01100001 01110010 01111001 00100000 01101111 01101110 01100101 01110011 00101110 00001010 01000101 01110110 01100101 01110010 01111001 01110100 01101000 01101001 01101110 01100111 00100000 01111001 01101111 01110101 00100000 01110111 01101001 01101100 01101100 00100000 01101110 01100101 01100101 01100100 00100000 01101001 01110011 00100000 01110111 01110010 01101001 01110100 01110100 01100101 01101110 00100000 01100010 01100101 01101100 01101111 01110111 00111010

01110001 01010001 01111010 01110011 01100110 01101111 01101000 01100010 01101001 01110010 01101110 01110101 00110101 01010110 01000111 01010101 01000111 00111000 01100111 01001110 00111001 00110010 01101001 01010111 01011001 01010010 01111010 01001001 01000001 01001001 01100111 01010101 01100011 01011010 01100110 01000111 01001000 01111001 01110001 01000100 01110001 01111001 00110001 01001000 01010001 01001011 01000111 01101111 01100011 00110001 01101001 00110000 01000011 01110011 01001100 01101011 01010010 01100011 01101001 00110111 00110001 01100001 01110111 01100101 01110000 01101101 01011010 01001100 01010100 01100010 01101011 01000010 01000110 01101111 00110011 00110000 01101000 01110010 01001101 01100101 01000001 01010111 01101010 01010111 01010101 01100101 01110010 00110111 01101100 01011010 00110011 01011001 01110110 00111000 01001100 00110110 01110110 01110011 01110101 01001000 00101111 01110011 01001100 01110100 01100001 01001110 00110110 00111000 01111010 01010000 01010111 01001001 01101100 00101111 00110111 01101001 00110110 01111001 00110010 00111000 01001101 00101011 01110101 01001001 01101000 01101111 01010110 01001111 01001100 01010100 01110001 01010100 01101001 00110011 00101111 01101100 01100100 01010000 00110001 01011010 00110010 01000001 01001010 00110111 01010110 01101100 01001010 01110101 01010110 00110010 00110010 01001110 01101111 01010010 00110011 01001101 01001001 01010000 01000101 01100001 01001001 01110001 01100001 01010111 01100100 01110110 01101011 01101101 01101011 00110110 01100001 01001111 01000001 01101001 01110110 01100010 01101001 01010011 00110100 01000100 01010010 01001000 00101111 01111010 00111000 01101000 01111000 00110111 01110000 01001000 01110011 00110110 01100100 00110101 01110110 01110100 01010010 01001011 01010111 01100101 01101000 01001110 01100100 01101110 00111001 01100001 01000111 01010100 01110100 01001000 00110110 01010010 00101011 01110000 01110101 00111001 01110110 00110000 01010111 00101111 01000010 01110000 00110000 01001010 01110101 01000001 00101011 01010110 01001001 01010010 01010011 01001001 01111010 01010101 01101000 01101100 01010101 01000001 01110101 01000011 01100010 01001011 01101010 01110111 01010101 01111000 01000101 01001101 01111010 01000001 01110001 01010011 01011000 01111010 00110000 01010011 01001011 01010100 01001110 01101011 01000101 01100111 01111010 00110100 01001001 01010111 01011000 01110010 01110000 01100001 01010110 01110111 01101001 01101100 01101001 01111000 01101111 01010111 01101110 00110110 01010110 01101011 00110101 00111000 01100001 01010100 00111000 01101011 01010100 01000001 01010001 01001110 01000001 01011000 01011010 00110011 01000100 01110110 00110010 01110100 01010011 01010001 00101111 01110110 01000001 01010011 01100111 01010001 01110110 00101011 00111001 01101001 01110001 01000011 01001110 01110000 00101011 01001000 01110000 01110100 01000101 01111001 00110000 01000110 01001100 01010011 01010110 01010010 01010010 01100011 01010000 01110010 01010011 01100100 01110110 01000001 01101000 01010110 00101011 01010111 01001011 01011001 01110011 01110001 01011000 01010011 01011001 01100110 01100101 01100111 01101000 00110100 01010011 01101001 01110101 01101001 01001010 01100111 01110011 01101100 00110110 01111010 01010100 01010110 00110101 01010100 01001110 01011001 01001111 01010101 01000110 01011001 01110011 01101111 01010101 01010011 01000001 01100100 01001011 01011010 01111010 01110001 01110101 01001101 01100011 00110011 00110110 01110111 01000111 01011000 00110111 01001100 00110100 01100011 01100110 01011001 00110001 00110100 01011000 01000001 01110011 01110000 01100110 01111001 01101111 01100111 00111101 00111101

good luck...

By simply translating the binary code with a binary to text translator, following message appeared:

This will seperate the capable users from the unnecessary ones.
Everything you will need is written below:
qQzsfohbirnu5VGUG8gN92iWYRzIAIgUcZfGHyqDqy1HQKGoc1i0CsLkRci71awepmZLTbkBFo30hrMeAWjWUer7lZ3Yv8L6vsuH/sLtaN68zPWIl/7i6y28M+uIhoVOLTqTi3/ldP1Z2AJ7VlJuV22NoR3MIPEaIqaWdvkmk6aOAivbiS4DRH/z8hx7pHs6d5vtRKWehNdn9aGTtH6R+pu9v0W/Bp0JuA+VIRSIzUhlUAuCbKjwUxEMzAqSXz0SKTNkEgz4IWXrpaVwilixoWn6Vk58aT8kTAQNAXZ3Dv2tSQ/vASgQv+9iqCNp+HptEy0FLSVRRcPrSdvAhV+WKYsqXSYfegh4SiuiJgsl6zTV5TNYOUFYsoUSAdKZzquMc36wGX7L4cfY14XAspfyog==

("separate" was written wrong as "seperate" but this seems to not have any influence on this clue)

This message was encrypted with GOST. By encrypting the hash above in CBC mode(cipher block chaining) the follow message was received:

The first riddle you have to solve will introduce you to Jhon Titor.
Find out what he did and where he appeared.

Pay attention to Mel Reckling's first reply, check the letters. Maybe you will find the way.
let me give you a hint:  ______________.jimdofree.com

DO NOT FORGET ABOUT THE FUTURE.

John Titor

John Titor was the nickname of a person who claimed to be a time traveller from 2032 who appeared on the Artbell forums back in 2001.

This clue was all about research. The next clue was in Mel Reckling's reply on John Titor's post at the end of page 2. Nakano-Anapa's message of the previous clue was the key for solving the puzzle.

check the letters

By taking all the capital letters together and adding a ".jimdofree.com" a website was found.

On this web page there was a picture of John Titor's time travel division insignia and a text:

what was he searching for?

Further inspecting the site, a hidden url was found: https://thinfi.com/3svh

The website was password protected. The password clue is the "what was he searching for?" text from the previous website. The answer was IBM5100 as John Titor was searching for this computer.

Logging in to the site resulted in a redirect to this link: http://3htz4556hfz.boards.net/

The Forum

The site was a forum, where supposedly the PM posted several clues. The first post was: http://3htz4556hfz.boards.net/thread/3/comment. Nothing important was found there.

The next post showed a picture of a mole and three words:

DIG DIG DIG

The "DIG DIG DIG" was a clue to check the image found in that post. The "HEX-CODE" of the picture resulted in a download link and a message. The link was pointed towards a download site, with a txt available for download. The message:

remember fzzerfzquwnn1834662j

DIGDIGMOLE.txt

The txt contained an Enigma encoded text.

 
EHFJCNWGFUEZZRNFPWQHGGFTENQFHFEQODHHFZUWUFNCII
JAHHIWICIICMWUFZWZCNCZWMDNNFGWZFKRCSQFFWFGGWFQ
LLAHCYXMWTEZXXWHDXXXXWUDFHQHHD.PPGHWEZTFGEEGWS
JEHFWWLPFHQTAFDMMCGHSNBXYQWZEDGETWBDWCQGGXXYAH
GDMMFGQPEHGJJJETSHHFGWOFGWFIEXPPFHSGGDTWZFBWNJ
HSFZZWPPFHQJMSXXAHDKAMFEHWEJNWCEFIQMYUMRPPFHJW
UNZWEFACXIHTZHAWQEJNGNKUCIFPEWUGZBDZUIZUWVUTZC
NWIEZQXFNUERZKAGCMIXFEWAHUUAXEWFZNBKGWDDD-FRHR
MWEIFUZABVUIWENAHLYMZFUBDWFZURGBWETZTUZTUWETZE
QMWHKYUJVBJKWEZAKQUYZFGVBWNEULIXUBRNQAVIBEXRZE
NXUZARJGEKQVKUIZYMZTGIRGUZSBNEJCWZGTJVFWJGTZUC
QMUIGFVWUBAIELFYNEIUQWWVAEBILKUYOÖQIÖQLOWVBEEA
YNFJEKQWWEVKBAUIXEE.ZWIZGUBWZUGBZUWZIUUIGWDWDW
XNKSREGZAWBVJUZRBXKUZNWEUWQVAWEBGCWHTRHWWBHTWE
SKEGCRNKRSWFEQUURTUZUVEERTFZQDJJIFJEGHJSKHFHJK
NQREGUIXZUABZCFWRWBKEGXZAWVQWUNYXZFTQFUZVUNGZF
XMGWETRKWBUIRHGUUENCTTWHFHKENIUWZKUWIDBIHFKUEH
QMILREGWVRQIUEWHGMRXIQKIUEWBVNEWGUWQEKFJWNEAFF
RFWZNEUORUINCTNAKANOWZZWZUFGGZSDZAUZQTFTUWTTFW
INSTINCTWFEFNWAKIJZIKNFXNEIWUGQXGKRELJVCGRGVQB
UNWGZDERXZRTANAPAHWAVKZUFDHWUUIHSUIFUIHGSIAOZF
QINUYZWEFXAGQVKIBURZETHQNLIUKEFQVBIUZTRQXTINLK
QXBTIUZWEIFINDZWUQIGFIEGFUZDTZGCWQRTZTSZUZZZUZ
WQIKBXGRZQIKVURTZTYNKIQUQIUVEATBNCUZJQTQBZCUJE
SRWCTRTGHMISLEADINGFZUIIZBWVTTZDZUFVUZZWDFEWFF
XQGNRUZIEEAIVBRUZGHNCKQGQFXURHEQVKUIBCQNKGIUEQ
QWRQWTJHEWKJUFGVTZTDTZTZTZUTQSPQPXXEWQHZKUUIOF
GXNUZKQXGWCBURTGZSZBGTUHQNUIXTZQRUEIGWTZEDFGTK
GREFRFZUEWBJRTGGZUBJWEZGUJWHBRFVZGUJWHRWGZUHJR
ELUIZMHVKNUISZTHVWTIRUMNHCVKVWMCUIHTRIQUCBEVWF
HPTZGURWBIZGUWBRJWZGUBVRHGZUBWHGZVUBGWCUZBFREG
WIQEXZRUNKGHUWIZERGNIQZRERTEQYBEUTNIUNZTRPRTEW
FHEZFMDFQORPTHFMGZAFWTEMDNGPTMAFSSGEMQLTTLGEQP
SUICIDEGXRZUHQVZBURGFQXRUZQZUBQCZUIQRDIGUEPIOW  
JUZBXGRTEWQRKUHINRQVBUTZMOLEZBUQTCQBZUICFQZBUQ
QUEWZUGRBGZRUBWJHDEZGUJWBTRUZJGWEDGZUREWUZGEEG
WZGCUKRBEHAUZNBKRVTGEANXUKIGRHENARHEUBIRUIGERH
GETUVDRGXQTZHGCERDTGHZCERDXHUNVFTCHKZJKUIRDTZH
PLROBJZKEPOIKNUTJWNVHRTUIOBTFQXZNIGUNERGWZWWFB
PZZETENTZTBZTFERCSGTHZZBTHGRDTVECDRZHTZFRDRFTZ
FUHEFGWZUJKABBFHWTJFHGHWWIOGJEHEUZIJNJHSUSGFZW
GEGDWGWOOGJHNBTFZTRBTZFHZTHFREXVZZHTFVGRDTRHTT
RHFGKEWFUZEWGBKFKZFQWFXQTWUFQWTFQWGEZFWEFWZFWZ
FHHWGTGFNUZHGBZNUJVFCDWXRESZGBUBBZGTJZBGJUZNZF
DHHFWTZFWHHHSFQWFQOIJFGHCFTKJHJNHFTHKSGJGHSJKA
DHHWTFUWUFWNUIKZBBZVRDFYSFFTFTZTZZFFVRRFRRTFTT
FKKLQLFPOWHJGJHKDZTGQZUGDHHQTFGAEWHFJELFUVGFIU
FHHUWUZFJIHDTZUJBTZBFVFTZHBCRDXXYWYEFTZRTVVRVV
DPPFIJIFZUZUHHJFZQUZTUZGUZGDZHUIWJJFUQZUFHHJFU
FHHWZFJQWPPFJQAFTGVFTGESFTGFDTRRFZRFZVTDERTHTZ
FPPWEJIGHWUIWIUIUUIFWZFFARDJIQJJRZHWJDJJWZFIPK
FDPPGZWUJFHUIWUIDUJGHNZBTZGVRTZWRATHZUZBUZUUZD
DZZHFWHZIUHIUZFHJGWFZRTFHKJHBSGZZTUWUIHZUGFZTW
UHUZHWUZGUZGIFWZUFCZTHBRTRDHRVTHFDTZDQHUUZHQZW
FPPPGEHUGEUIHIOUZTRTZFQUIHOJUOIFZIJUIHGUZIUZWF
UHHBQFZTZUTQUTZZUHWWJNUIKHEWFUKZBNFXNIZUHNIIUE
IUZHHZUFIUZUZWQZUUZGIFUZGUZGQWZUFIUFTZFZAINJEO
WJHFALSEIUHJWUIHFHUZHUMWETZUZNNZTTVZZJTNVNTUZT
UHUZHQWZZUDNOZZQFZQZZZHDZZUUZDZZQTZFTSRZAIAREE
HZHWUIIUHQTZFDHFMMCBBSVHVOZUTBTNTZNTZEZWEZFTGZ
IJMHVTRUIGZGVGAVGHDZUTGZUCBBWQHUFQIFGOIEGGTJGG
WZZUQWZZIUZZBZUQMIFOWUGBUGCRKWZGUTCNHWZUKRZRGR
EPPGIJEIGMGUEHFGETDUFGJIWIOJIIHUQZFGTSUREGGGRH
QHNIFEQUKQBTZFTRDCTAPFKWUHBFKEJBGHTRDCRTQWGDWF
ERFPOWUCZBGHSZFBCGUREBNUHTIGRCZWBGRUEMMFGWTZFD
FWHZBUWZGZGVSZGUZTZUGUZGFZUWUZFCGSHJDSGWUGZBZZ
ZUIWZUZGTGAHBHNIUFHUHUBWUIUFUIIOIO/QWZBZZUSGZU
FPPGBHUVUUGWTZGTUQUBHFGZUUZQZUZUFMPPFHHXXZUIXX

The pattern started from the middle of the text and started as: "1(letter) down, 2up, 3down, 4up, 5down, 6up...and so on but it's important to know that when the pattern reached the top it still counted up, just by ending at the top and counting the rest of number from the bottom up.

The deciphered text resulted in a slighty different version of the previous link: https://futurejohniwtttaudtc.jimdofree.com/secure-area

The site had a similar puzzle to the previous one. Using the "remeber fzzerfzquwnn1834662j" clue, the secure-area was unlocked.

The Secure Area

After entering the new site, a new message was found:

 
TIME, TIME ALWAYS SHOWS US THE TRUTH.

We finished our primary test. Now the hunt continues in the real world.

Seek for the moles. Soon they will appear on the surface.

As a little present I will tell you my name.

Call me ZEOT. We will meet again...

After a while, a new post appeared:

Title: The first mole arrived
Text: somewhere on the planet.

As there was no information, the creator posted another post. This one had several coordinates:

 22.2855200, 114.1576900 (HONG KONG)
37° 33' 59.526" N 126° 58' 40.689" E (SEOUL)
47° 36′ N , 122° 20′ W (SEATTLE)

The solvers assumed that there might be something in the real world that they had to find. A common theory was "QR CODES".

After several weeks nothing was found and the solvers tried if someone posted something on social media. 
A solver found a chinese twitter account who posted a strange looking "QR CODE".
This tweet can be found [https://twitter.com/1R77vN3yF2Qj3Sz/status/1024159737406009344 here].
<pre> The tweet contained following text: 

我发现这附近了 ''Whampoa station''. 
那是什么？

That means as much as: I found this nearby ''Whampoa station''.
what is that?

The whampoa station is a subway station in Hongkong. Information can be retrieved here

The Qr-Code

The Qr-Code led to this website

On this website there was a picture of cicada3001 with following words:

CICADA IS DEAD
CICADA HAS FALLEN
THE MOLES ARE RISING

As well if selecting the screen with your cursor a message and a link reveals in black letters hidden inside the black background of the picture.

The message:

 The devil will show you the way as well as this link: https://filehost.net/file_password.html?file=6fadfd5cf1740233. 

The password for the filehoster was unknown yet.

This time the riddle got really hard. To find the answer the solvers had to check the picture itself.

By raising the brightness and the contrast several hidden messages inside the picture got revealed on the black background.

such as:

 The moles are hiding in the darkness, wrong way?, blue=2996, black= 666, white= 28856, green= 25538, green&black= 7743, brown= H366HT335

But the solution was deeper, to get the solution the solvers had to inspect the "red letters" of the picture. "CICADA IS DEAD". In the red letters there were roamn numbers hidden, but the only necessary ones were hidden in the "second A" of the word "cicada".

There was the roman number

 VI VI VI which means as much as 666 what indicates the devil, just as the message on the website "the devil will show you the way".
By "taking the colorcodes" of every single pixel of the VI VI VI in the right order, this colorcode appeared: 
ba1414 b91313 bd1313 be1414 ba1414 ba1414 ba1414 ba1414 bd1313 ba1414 bb1515 ba1414 ba1414 ba1414 ba1414 ba1414 c01313 bb0f0f be0d0d bd1515 b91515 ba1414
writing this colorcode together without spaces proved as the correct password for the filehoster.
ba1414b91313bd1313be1414ba1414ba1414ba1414ba1414bd1313ba1414bb1515ba1414ba1414ba1414ba1414ba1414c01313bb0f0fbe0d0dbd1515b91515ba1414

Nakano-Anapa's video

Inserting the passwort into the filehost unlocks an mp4 video file. It shows a person, wearing a beige jacket, a pair of black gloves and a T-shirt that the person swappes frequently to other T-shirts with other "colors". In the video this person is unfolding several pieces of paper with different numbers:

 the order of the numbers is: 4 8 15 16 23 42. These are the numbers from the [ https://en.wikipedia.org/wiki/Lost_(TV_series) LOST] series.

First the solvers thought that the numbers might be somehow a clue but there was nothing found.

But by watching the video closely the it was possible to see the person doing strange handsigns with his right hand. A flat hand and a fist.

The solution to this clue was "EXTREMELY" hard to find. Every detail of the video was necessary for this clue. Something that was very easy to oversee was the amount of folds each time he unfolded the paper.

 The solution was achieved by multiplying(fist)and dividing(flat hand) the codes of the T-shirt colors with the amounts of folds.
To understand that the solver has to look at the previous "cicada" clue.
Just as said, there were hidden messages like: 
blue=2996, black= 666, white= 28856, green= 25538, green&black= 7743, brown= H366HT335
Every T-shirt of the person was colored in these colors.
The color order of the T-shirts was: green&black= 7743    blue=2996   black= 666  brown= H366HT335  white= 28856  green= 25538.

So by looking at all these aspects the solvers had to do this calculation:
 green&black 7743x4=30972
                    blue 2996/2 = 1498
                    black 666x1 = 666
                    brown = H366HT335( this one couldn't be multiplied/divided because of the letters)
                    white 28856/5 = 5771,2
                    green 25538x2 = 51076
Which results in this code: 
309721498666H366HT3355771,251076

Searching this code on google showed a youtube video with the same title.

Nakano-Anapa's Mole

This youtube video contains a robotic voice, the insignia picture of the mole and some strange noises.

The voice says: "Hello, my moles. I am Nakano Anapa. You have made it quite far but the end is even more far away. There is a message hidden in here. Find it, use it with the code and it will show you the way. Demons are rising but the moles are rising even higher. Good luck." [screeching sounds appears]

Checking the video description reveals this code:

 krTKttHmn6HCogTQsBI8nNGXW7lvWqiI7vsl1XpgxLX6kbmq+hhGGvqmvpoT3zTOSSWkKZQDurtbxRk16zEkAFaya2JiWzvjiCWnT0wDDciK28mUqQU+7cYHlmkDbmQf 

By checking the video with a spectogram some hidden symbolds and a link were revealed.

 https://filehost.net/66f964de88d94def 

This filehoster contains an ascii picture of the mole.

"UNFORTUNATELY THIS IS AN UNSOLVED PUZZLE".

Nakano's last post

After some time Nakano-Anapa made his second and last(so he claims) post.

 
Hello, my moles. I am Nakano-Anapa. I haven't enough time left to explain it to you. I will need to go underground. This may be the last time you'll see a message of me. Remember ROBERT PARKER!

Then accidentaly a solver stumbled upon a reddit post by a user named "Robert-Parker".

The post features a list of words:

 It continues.

Hello, I am Robert-Parker.

Do not worry, Nakano-Anapa is just on a little "vacation".

Many People think, that this is just a game. But I will ensure you...

It is NOT!

Find the solution and add a .000webhostapp.com behind it.



46.02344932

-122.59347959

1971


MONEY FOUND

FOLLOWERS

ATTITUDE

LOOT

FLIGHT NUMBER

CREW

2000

2010

2008

2010

NOT OPEN

RED AMOUNT

RED LENGHT

FLAPS

LANDING GEAR

MASS

SPREAD INTO

DOLLAR BILL

JUMP


good luck...




















































































square

These coordinates belong to a forest in the state of Washington.

46.02344932

-122.59347959

Together with the date 1971, the coordinates location,and the keywords in the post, after some research the solvers found out that this is related to D.B.COOPER. D.B.Cooper was a man who hijacked and jumped out of a Boeing 727-100 at night in 1971 with 200.000 Dollars of ransom money after threatenign the plane with a bomb in his case.