The Mole

From Game Detectives Wiki
Revision as of 12:27, 1 October 2018 by S47 (talk | contribs)
Jump to: navigation, search


The Mole
Active since 2018-07-??
[[// TODO|400px]]
The Mole is a riddle discovered on reddit. A user named Nakano-Anapa posted a long binary post on his profile. There isn't much information about this riddle (or ARG) yet. The original post can be found here:https://www.reddit.com/user/Nakano-Anapa/comments/8wsfst/2036/
Type Investigation
Creator UNKNOWN(ZEOT)
Discovered 2018-07-??

Main Page > List of Investigations > The Mole

Introduction

This riddle has NO NAME! But people tend to call it MOLE or THE MOLE because of many mole pictures and(or) clues referring to moles. It first appeared on 4chan where a post led to the reddit post of Nakano-Anapa, just as linked in the description. It's a highly cryptic riddle so sometimes it involves codebreaking, information research and steganography. The intention of the creator or the meaning/use of this riddle are unknown yet.

CLUES

Clue one, THE BEGINNING

On july 7th a reddit post appeared by the user Nakano-Anapa: https://www.reddit.com/user/Nakano-Anapa/comments/8wsfst/2036/

It contained following message:
 Greetings, mole!


00001010 01010100 01101000 01101001 01110011 00100000 01110111 01101001 01101100 01101100 00100000 01110011 01100101 01110000 01100101 01110010 01100001 01110100 01100101 00100000 01110100 01101000 01100101 00100000 01100011 01100001 01110000 01100001 01100010 01101100 01100101 00100000 01110101 01110011 01100101 01110010 01110011 00100000 01100110 01110010 01101111 01101101 00100000 01110100 01101000 01100101 00100000 01110101 01101110 01101110 01100101 01100011 01100101 01110011 01110011 01100001 01110010 01111001 00100000 01101111 01101110 01100101 01110011 00101110 00001010 01000101 01110110 01100101 01110010 01111001 01110100 01101000 01101001 01101110 01100111 00100000 01111001 01101111 01110101 00100000 01110111 01101001 01101100 01101100 00100000 01101110 01100101 01100101 01100100 00100000 01101001 01110011 00100000 01110111 01110010 01101001 01110100 01110100 01100101 01101110 00100000 01100010 01100101 01101100 01101111 01110111 00111010

01110001 01010001 01111010 01110011 01100110 01101111 01101000 01100010 01101001 01110010 01101110 01110101 00110101 01010110 01000111 01010101 01000111 00111000 01100111 01001110 00111001 00110010 01101001 01010111 01011001 01010010 01111010 01001001 01000001 01001001 01100111 01010101 01100011 01011010 01100110 01000111 01001000 01111001 01110001 01000100 01110001 01111001 00110001 01001000 01010001 01001011 01000111 01101111 01100011 00110001 01101001 00110000 01000011 01110011 01001100 01101011 01010010 01100011 01101001 00110111 00110001 01100001 01110111 01100101 01110000 01101101 01011010 01001100 01010100 01100010 01101011 01000010 01000110 01101111 00110011 00110000 01101000 01110010 01001101 01100101 01000001 01010111 01101010 01010111 01010101 01100101 01110010 00110111 01101100 01011010 00110011 01011001 01110110 00111000 01001100 00110110 01110110 01110011 01110101 01001000 00101111 01110011 01001100 01110100 01100001 01001110 00110110 00111000 01111010 01010000 01010111 01001001 01101100 00101111 00110111 01101001 00110110 01111001 00110010 00111000 01001101 00101011 01110101 01001001 01101000 01101111 01010110 01001111 01001100 01010100 01110001 01010100 01101001 00110011 00101111 01101100 01100100 01010000 00110001 01011010 00110010 01000001 01001010 00110111 01010110 01101100 01001010 01110101 01010110 00110010 00110010 01001110 01101111 01010010 00110011 01001101 01001001 01010000 01000101 01100001 01001001 01110001 01100001 01010111 01100100 01110110 01101011 01101101 01101011 00110110 01100001 01001111 01000001 01101001 01110110 01100010 01101001 01010011 00110100 01000100 01010010 01001000 00101111 01111010 00111000 01101000 01111000 00110111 01110000 01001000 01110011 00110110 01100100 00110101 01110110 01110100 01010010 01001011 01010111 01100101 01101000 01001110 01100100 01101110 00111001 01100001 01000111 01010100 01110100 01001000 00110110 01010010 00101011 01110000 01110101 00111001 01110110 00110000 01010111 00101111 01000010 01110000 00110000 01001010 01110101 01000001 00101011 01010110 01001001 01010010 01010011 01001001 01111010 01010101 01101000 01101100 01010101 01000001 01110101 01000011 01100010 01001011 01101010 01110111 01010101 01111000 01000101 01001101 01111010 01000001 01110001 01010011 01011000 01111010 00110000 01010011 01001011 01010100 01001110 01101011 01000101 01100111 01111010 00110100 01001001 01010111 01011000 01110010 01110000 01100001 01010110 01110111 01101001 01101100 01101001 01111000 01101111 01010111 01101110 00110110 01010110 01101011 00110101 00111000 01100001 01010100 00111000 01101011 01010100 01000001 01010001 01001110 01000001 01011000 01011010 00110011 01000100 01110110 00110010 01110100 01010011 01010001 00101111 01110110 01000001 01010011 01100111 01010001 01110110 00101011 00111001 01101001 01110001 01000011 01001110 01110000 00101011 01001000 01110000 01110100 01000101 01111001 00110000 01000110 01001100 01010011 01010110 01010010 01010010 01100011 01010000 01110010 01010011 01100100 01110110 01000001 01101000 01010110 00101011 01010111 01001011 01011001 01110011 01110001 01011000 01010011 01011001 01100110 01100101 01100111 01101000 00110100 01010011 01101001 01110101 01101001 01001010 01100111 01110011 01101100 00110110 01111010 01010100 01010110 00110101 01010100 01001110 01011001 01001111 01010101 01000110 01011001 01110011 01101111 01010101 01010011 01000001 01100100 01001011 01011010 01111010 01110001 01110101 01001101 01100011 00110011 00110110 01110111 01000111 01011000 00110111 01001100 00110100 01100011 01100110 01011001 00110001 00110100 01011000 01000001 01110011 01110000 01100110 01111001 01101111 01100111 00111101 00111101

good luck...

explanation

By simply translating the binary code with a binary to text translator, following message appeared: This will seperate the capable users from the unnecessary ones. Everything you will need is written below: qQzsfohbirnu5VGUG8gN92iWYRzIAIgUcZfGHyqDqy1HQKGoc1i0CsLkRci71awepmZLTbkBFo30hrMeAWjWUer7lZ3Yv8L6vsuH/sLtaN68zPWIl/7i6y28M+uIhoVOLTqTi3/ldP1Z2AJ7VlJuV22NoR3MIPEaIqaWdvkmk6aOAivbiS4DRH/z8hx7pHs6d5vtRKWehNdn9aGTtH6R+pu9v0W/Bp0JuA+VIRSIzUhlUAuCbKjwUxEMzAqSXz0SKTNkEgz4IWXrpaVwilixoWn6Vk58aT8kTAQNAXZ3Dv2tSQ/vASgQv+9iqCNp+HptEy0FLSVRRcPrSdvAhV+WKYsqXSYfegh4SiuiJgsl6zTV5TNYOUFYsoUSAdKZzquMc36wGX7L4cfY14XAspfyog==

("separate" was written wrong as "seperate" but this seems to not have any influence on this clue)

By trying out many encryption methods we finally found the right one: GOST.

By decrypting the hash above with the GOST algorhytm in the CBC mode(cipher blockchaining) we got following message:

The first riddle you have to solve will introduce you to Jhon Titor. Find out what he did and where he appeared.

Pay attention to Mel Reckling's first reply, check the letters. Maybe you will find the way. let me give you a hint: ______________.jimdofree.com

DO NOT FORGET ABOUT THE FUTURE.

Clue 2, JOHN TITOR

John Titor was the nickname of a person who claimed to be a time traveller from 2032 who appeared on the artbell forums back in 2001.(bbs.artbell.com)[server is down so use the wayback machine][1]

This clue was all about research. To find the answer you had to find Mel Reckling's reply on John Titor's post at the end of page 2. As the text itself gave no useful information you had to check Nakano-Anapa's message of the previous clue. [check the letters] By taking all the capital letters together and adding a ".jimdofree.com" behind it you found a working link to a website.

https://futurejohniwtttaudtc.jimdofree.com/ On this webpage you can see a picture of John Titor's time travell divison insignia. As well there is a text written which says: what was he searching for?

Inspecting this webpage you can find a link.

https://thinfi.com/3svh

This link is password protected. The password clue is the "what was he searching for?" text from the previous website. The answer is IBM5100 as John Titor was searching for this computer.

This link leads you to this forum: http://3htz4556hfz.boards.net/

Clue 3/THE FORUM

Now we arrived at the forum where ZEOT(likely the creator) posted several clues. The first post was: http://3htz4556hfz.boards.net/thread/3/comment. Nothing important was found there.

dig dig dig

The next post which actually introduced us to the new puzzle was: http://3htz4556hfz.boards.net/thread/6/spread-out-moles. The post shows us a picture of a mole and three words. "DIG DIG DIG" The "DIG DIG DIG" was a clue to tell us that we have to dig(get inside, research) the picture, so we decided check the "HEX-CODE" of the picture. We indeed found something.

 A link and a message: We DO NOT recommend to download from this site as this site got taken over by malware lately! https://www.file-upload.net/en/download-13222606/DIGDIGMOLE.txt.html and this message: remember fzzerfzquwnn1834662j 

Clue 4/DIGDIGMOLE.txt

By opening this txt document we've found this text:
 



EHFJCNWGFUEZZRNFPWQHGGFTENQFHFEQODHHFZUWUFNCII
JAHHIWICIICMWUFZWZCNCZWMDNNFGWZFKRCSQFFWFGGWFQ
LLAHCYXMWTEZXXWHDXXXXWUDFHQHHD.PPGHWEZTFGEEGWS
JEHFWWLPFHQTAFDMMCGHSNBXYQWZEDGETWBDWCQGGXXYAH
GDMMFGQPEHGJJJETSHHFGWOFGWFIEXPPFHSGGDTWZFBWNJ
HSFZZWPPFHQJMSXXAHDKAMFEHWEJNWCEFIQMYUMRPPFHJW
UNZWEFACXIHTZHAWQEJNGNKUCIFPEWUGZBDZUIZUWVUTZC
NWIEZQXFNUERZKAGCMIXFEWAHUUAXEWFZNBKGWDDD-FRHR
MWEIFUZABVUIWENAHLYMZFUBDWFZURGBWETZTUZTUWETZE
QMWHKYUJVBJKWEZAKQUYZFGVBWNEULIXUBRNQAVIBEXRZE
NXUZARJGEKQVKUIZYMZTGIRGUZSBNEJCWZGTJVFWJGTZUC
QMUIGFVWUBAIELFYNEIUQWWVAEBILKUYOÖQIÖQLOWVBEEA
YNFJEKQWWEVKBAUIXEE.ZWIZGUBWZUGBZUWZIUUIGWDWDW
XNKSREGZAWBVJUZRBXKUZNWEUWQVAWEBGCWHTRHWWBHTWE
SKEGCRNKRSWFEQUURTUZUVEERTFZQDJJIFJEGHJSKHFHJK
NQREGUIXZUABZCFWRWBKEGXZAWVQWUNYXZFTQFUZVUNGZF
XMGWETRKWBUIRHGUUENCTTWHFHKENIUWZKUWIDBIHFKUEH
QMILREGWVRQIUEWHGMRXIQKIUEWBVNEWGUWQEKFJWNEAFF
RFWZNEUORUINCTNAKANOWZZWZUFGGZSDZAUZQTFTUWTTFW
INSTINCTWFEFNWAKIJZIKNFXNEIWUGQXGKRELJVCGRGVQB
UNWGZDERXZRTANAPAHWAVKZUFDHWUUIHSUIFUIHGSIAOZF
QINUYZWEFXAGQVKIBURZETHQNLIUKEFQVBIUZTRQXTINLK
QXBTIUZWEIFINDZWUQIGFIEGFUZDTZGCWQRTZTSZUZZZUZ
WQIKBXGRZQIKVURTZTYNKIQUQIUVEATBNCUZJQTQBZCUJE
SRWCTRTGHMISLEADINGFZUIIZBWVTTZDZUFVUZZWDFEWFF
XQGNRUZIEEAIVBRUZGHNCKQGQFXURHEQVKUIBCQNKGIUEQ
QWRQWTJHEWKJUFGVTZTDTZTZTZUTQSPQPXXEWQHZKUUIOF
GXNUZKQXGWCBURTGZSZBGTUHQNUIXTZQRUEIGWTZEDFGTK
GREFRFZUEWBJRTGGZUBJWEZGUJWHBRFVZGUJWHRWGZUHJR
ELUIZMHVKNUISZTHVWTIRUMNHCVKVWMCUIHTRIQUCBEVWF
HPTZGURWBIZGUWBRJWZGUBVRHGZUBWHGZVUBGWCUZBFREG
WIQEXZRUNKGHUWIZERGNIQZRERTEQYBEUTNIUNZTRPRTEW
FHEZFMDFQORPTHFMGZAFWTEMDNGPTMAFSSGEMQLTTLGEQP
SUICIDEGXRZUHQVZBURGFQXRUZQZUBQCZUIQRDIGUEPIOW  
JUZBXGRTEWQRKUHINRQVBUTZMOLEZBUQTCQBZUICFQZBUQ
QUEWZUGRBGZRUBWJHDEZGUJWBTRUZJGWEDGZUREWUZGEEG
WZGCUKRBEHAUZNBKRVTGEANXUKIGRHENARHEUBIRUIGERH
GETUVDRGXQTZHGCERDTGHZCERDXHUNVFTCHKZJKUIRDTZH
PLROBJZKEPOIKNUTJWNVHRTUIOBTFQXZNIGUNERGWZWWFB
PZZETENTZTBZTFERCSGTHZZBTHGRDTVECDRZHTZFRDRFTZ
FUHEFGWZUJKABBFHWTJFHGHWWIOGJEHEUZIJNJHSUSGFZW
GEGDWGWOOGJHNBTFZTRBTZFHZTHFREXVZZHTFVGRDTRHTT
RHFGKEWFUZEWGBKFKZFQWFXQTWUFQWTFQWGEZFWEFWZFWZ
FHHWGTGFNUZHGBZNUJVFCDWXRESZGBUBBZGTJZBGJUZNZF
DHHFWTZFWHHHSFQWFQOIJFGHCFTKJHJNHFTHKSGJGHSJKA
DHHWTFUWUFWNUIKZBBZVRDFYSFFTFTZTZZFFVRRFRRTFTT
FKKLQLFPOWHJGJHKDZTGQZUGDHHQTFGAEWHFJELFUVGFIU
FHHUWUZFJIHDTZUJBTZBFVFTZHBCRDXXYWYEFTZRTVVRVV
DPPFIJIFZUZUHHJFZQUZTUZGUZGDZHUIWJJFUQZUFHHJFU
FHHWZFJQWPPFJQAFTGVFTGESFTGFDTRRFZRFZVTDERTHTZ
FPPWEJIGHWUIWIUIUUIFWZFFARDJIQJJRZHWJDJJWZFIPK
FDPPGZWUJFHUIWUIDUJGHNZBTZGVRTZWRATHZUZBUZUUZD
DZZHFWHZIUHIUZFHJGWFZRTFHKJHBSGZZTUWUIHZUGFZTW
UHUZHWUZGUZGIFWZUFCZTHBRTRDHRVTHFDTZDQHUUZHQZW
FPPPGEHUGEUIHIOUZTRTZFQUIHOJUOIFZIJUIHGUZIUZWF
UHHBQFZTZUTQUTZZUHWWJNUIKHEWFUKZBNFXNIZUHNIIUE
IUZHHZUFIUZUZWQZUUZGIFUZGUZGQWZUFIUFTZFZAINJEO
WJHFALSEIUHJWUIHFHUZHUMWETZUZNNZTTVZZJTNVNTUZT
UHUZHQWZZUDNOZZQFZQZZZHDZZUUZDZZQTZFTSRZAIAREE
HZHWUIIUHQTZFDHFMMCBBSVHVOZUTBTNTZNTZEZWEZFTGZ
IJMHVTRUIGZGVGAVGHDZUTGZUCBBWQHUFQIFGOIEGGTJGG
WZZUQWZZIUZZBZUQMIFOWUGBUGCRKWZGUTCNHWZUKRZRGR
EPPGIJEIGMGUEHFGETDUFGJIWIOJIIHUQZFGTSUREGGGRH
QHNIFEQUKQBTZFTRDCTAPFKWUHBFKEJBGHTRDCRTQWGDWF
ERFPOWUCZBGHSZFBCGUREBNUHTIGRCZWBGRUEMMFGWTZFD
FWHZBUWZGZGVSZGUZTZUGUZGFZUWUZFCGSHJDSGWUGZBZZ
ZUIWZUZGTGAHBHNIUFHUHUBWUIUFUIIOIO/QWZBZZUSGZU
FPPGBHUVUUGWTZGTUQUBHFGZUUZQZUZUFMPPFHHXXZUIXX

This puzzle seems like gibberish on the first view with random words such as: "suicide" "instinct" etc. But as we looked closely we saw "two dots", "one dash" and "one slash".

After thinking a while you found a similarity with the https://futurejohniwtttaudtc.jimdofree.com/ link from the previous clue. So after analyzing the text carefully we found out that there was a pattern, the ENIGMA pattern.

The ENIGMA was a german encryption machine out of WW II. By shifting letters up and down or rotating their position they could encrypt this message. The patter started from the middle of the text and started as: "1(letter) down, 2up, 3down, 4up, 5down, 6up...and so on but it's important to know that when the pattern reached the top it still counted up, just by ending at the top and counting the rest of number from the bottom up.

So now we found this link, a slighty different version of the previous one: https://futurejohniwtttaudtc.jimdofree.com/secure-area

Of course as expected this link is tricky again. A password is required, but as we noted all the previous clues and messages we tried our "remeber fzzerfzquwnn1834662j" code and we inserted it there. Pretty easy so now a text popped up.

Clue5/THE SECURE AREA)

After inserting the codes the secure area opened and we found following message:

 

TIME, TIME ALWAYS SHOWS US THE TRUTH.

We finished our primary test. Now the hunt continues in the real world.

Seek for the moles. Soon they will appear on the surface.

As a little present I will tell you my name.

Call me ZEOT. We will meet again...

We haven't found any clue or hidden message in this so we assumed that we will find something in the real world, because the text told us that the hunt continues in the real world.

AFter waiting a long time amd checking the forum frequently for new information we finally got an update. This post was created: http://3htz4556hfz.boards.net/thread/8/first-mole-arrived. This confirmed our theory that something was happening out there. But still this got us not much information until the admin posted several coordinates.