#on:carrd

[if-the-crown-fits-translate-it]

The Search for Dewey’s Admin Login Credentials

After subjecting the audio recording that was obtained from the first Ghostbin (password: 03111996) from Dewey’s error logs to steganographic decryption, a link to a second Ghostbin was obtained. At this point of time, the password was unknown.

Following the Discord conversation with Baroness regarding Dewey on May 7th, 2021, a link named “Admin Login” appeared at the bottom of the Lockbox page:

The link led to the following login page. The Username and Password were unknown at this point of time.

On May 10th, 2021, at 4:37 AM GMT, Dewey appeared online to the Server, and provided access to Debug Mode, which contained the following options to select from:

1. OPEN ADMIN PANEL. 

2. REVIEW SYSTEM ERRORS. 

3. REVIEW CURRENT STATUS. 

4. QUIT.

Option 2 led to the following new error log:

ARCHSYS V.1.1.0 INTERNAL ERROR LOGGING 

DATE: 2021-05-04 22:14:23 

- SEVERITY: CRITICAL 

MESSAGE: 

* UNABLE TO CONNECT TO PRIMARY ARCHSYS SYSTEM. 

* MAINTENENCE MODE ENABLED 

- ADMINISTRATIVE OVERRIDE REQUIRED 

EXCEPTION DETAILS: 

+ <Event xmlns="https://ghostbin.co/paste/9by6hsdh"> 

<System> 

<EventID Qualifiers="0">05242000</EventID>  

<Version>0</Version>  

<Level>3</Level>  

<Task>0</Task>  

<Opcode>0</Opcode>  

<Keywords>01110010 01100110 01110101 01100111</Keywords>  <TimeCreated SystemTime="" />  

<EventRecordID>41260</EventRecordID>  

<Correlation ActivityID="{3c3ac4103cc4ddda6dd60853f735ea4d}" />

<Execution ProcessID="04" ThreadID="0416" />  

<Channel>System</Channel>  

<Computer>DESKTOP-⏚⏃⍀⍜⋏⟒⌇⌇</Computer>  

<Security UserID="0c5e09b1cc7fda88ad5b6fd65a5b26b3" />  

</System> 

<EventData>  

<Data Name="param1">01110011 01110101 01100010 01110100 01100101</Data>  

<Data Name="param2">01100101</Data>  

<Data Name="param3">Activation</Data> 

<Data Name="param6">DESKTOP-⏚⏃⍀⍜⋏⟒⌇⌇</Data>  

<Data Name="param7">⏚⏃⍀⍜⋏⟒⌇⌇</Data>  

<Data Name="param9">PAXHost (Using LRPC)</Data>  

<Data Name="param10">Unavailable</Data>  

<Data Name="param11">Unavailable</Data>  

</EventData>  

</Event>

The decoded binary: “rfug” (from <Keywords>), “subte” (from <Data Name="param1">), when rearranged, formed the word “subterfuge”. This was the password to the ghostbin link found within the same error log.

The solved ghostbin led to an audio file, titled “05242000_pax_08.wav” [[CW: Static/white noise, glitched audio]]. When this file was subjected to steganographic decryption, the word “blanketf0rt” was obtained. 

Option 3 led to the following status update:

Dewey: “OPTION 3: SELECTED

PRIMARY SYSTEM OFFLINE. SERVER DOWNTIME: 4 days 23 hours 48 min 03 sec”

A discussion with Dewey was taking place concurrently while solving this puzzle. Upon returning to Option 1 with the newly obtained information, and asking for a hint to the password (PASSWORD HINT: "My comfort place."), and admin username (THE ADMIN USERNAME IS SET TO DEFAULT.), the login information was successfully identified as:

Username: guest

Password: blanketf0rt

The accessed Admin system led to the following pages:

Home page:

Admin page:

Status page:

and the Lockbox page

Following this reveal, the Server sent an ask to Baroness to inform her that Dewey’s Admin Panel could be accessed. After this, Baroness proceeded to arrive to the server and had a conversation about how they were able to access Dewey, as well as discuss the contents of the audio file and their implications.

This concludes the end of the search for Dewey’s Admin Login Credentials!

[if-the-crown-fits-translate-it]

The Disappearance of PAX’s Ghostbin

On May 10th 2021, the day after the ARCHSYS Admin Panel was unlocked, a barely noticeable symbol composed of 4 circles (the very same one that initially led to Dewey shutting down) appeared towards to the middle-right of the Admin Panel Home page. 

When enlarged, the symbol looked like this:

This hidden symbol turned out to be hyperlink, with the URL: https://archsys-admin.carrd.co/#pax. The page only contained the code: 

“m9f3″

When this code was added to the end of a blank Ghostbin URL, to form the link https://ghostbin.co/paste/m9f3 on May 12th, 2021, the following message was revealed:

“I am warning you.

This is the only warning you'll get.

Stop while you're ahead.

Do you think you have a fucking choice?

Do you think you fucking matter to them?

Do you think that they want you to be happy?

Do you think they want you to be free?

Think again.”

On May 13th, 2021, upon re-visiting this Ghostbin, the above message was completely erased and replaced with the following:

“[DATA REDACTED]”

This is the first known instance of data from a Ghostbin or Pastebin being altered in such a manner.

[if-the-crown-fits-translate-it]

The 3rd Crowniversary Puzzle Guide

On May 15th, 2021, at 5:20 AM GMT, the If-the-crown-fits blog header image was updated to this image:

When brightened, a Pastebin link was obtained:

The bolded letters of this ask spelled “family”, which was the password to this Pastebin. When unlocked, the following message was found:

”:)”

“xlnv-kozb z xziiw tznv drgs nv, kviszkh? :)”

When decrypted using an Atbash Cipher, the decoded message was:

“come-play a carrd game with me, perhaps? :)”

This clue led to the following site: https://come-play.carrd.co/, a “Choose-Your-Own-Adventure” (CYOA) game.

A guide to the choices leading to the various endings of this game can be found here.

Detailed images of the various endings can be found under the cut:

https://come-play.carrd.co/

https://come-play.carrd.co/#thegamebegins

Under the “Begin” and “Quit” Options is a barely noticeable symbol of four interlocking circles (as seen in previous posts):

Leading to this site:

https://come-play.carrd.co/#pax

Binary: “You shouldn't be here, little one...”

-> Quit

https://come-play.carrd.co/#quitter

-> Begin

https://come-play.carrd.co/#start

-> Begin -> Yell for help

https://come-play.carrd.co/#yellforhelp

-> Begin -> Look around -> Go to the door

https://come-play.carrd.co/#gotodoor1

-> Begin -> Look around -> Open the nightstand -> Take key -> Go to the door -> Go to the other door -> Look through the photos

https://come-play-too.carrd.co/#photos

-> Begin -> Look around -> Open the nightstand -> Take key -> Go to the door -> Go to the other door -> Open the window

https://come-play-too.carrd.co/#window

-> Begin -> Look around -> Open the nightstand -> Take key -> Go to the door -> Go to the staircase -> Hide in a wardrobe

https://come-play-too.carrd.co/#hide

-> Begin -> Look around -> Open the nightstand -> Take key -> Go to the door -> Go to the staircase -> Book it to the cellar door -> Use [Nightstand Skeleton Key]

https://come-play-3.carrd.co/#skeletonkey

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the left path -> Open the door -> Eat the food

https://come-play-too.carrd.co/#eat

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the left path -> Open the door -> Try to leave

https://come-play-too.carrd.co/#leave

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the left path -> Turn around and leave

https://come-play-too.carrd.co/#turnaround1

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the center path -> Approach the cabin

https://come-play-too.carrd.co/#thecabin

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the center path -> Turn around and leave

https://come-play-too.carrd.co/#turnaround2

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the right path -> Sleep

https://come-play-too.carrd.co/#sleep

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the right path -> Don’t sleep -> Drink

https://come-play-too.carrd.co/#drink

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the right path -> Don’t sleep -> Don’t drink -> Eat

https://come-play-3.carrd.co/#eat

-> Begin -> Look around (-> Open the nightstand -> Take key ->) -> Approach the wardrobe -> Move the wardrobe -> Take the right path -> Don’t sleep -> Don’t drink -> Don’t eat

https://come-play-3.carrd.co/#donteat

[if-the-crown-fits-translate-it]

Baroness' Lock Box Overview

Link: The Lock box

Username: guest

Password: sunflowers

Locked transcripts:

-

Unlocked Transcripts:

King is preparing a meal in the kitchen (?). Locked behind Pastebin. Password: cuttingfruit [x]

Viscount and Marcus have a private conversation with Crown. (April 5th, 2021). Locked behind Pastebin. Password: forgiveness [x]

Baron comes to Knight’s Aid (April 16th, 2021) - Unlocked

Jack and Dave arrive at the mansion (April 17th, 2021) - Unlocked

Discussion regarding King's efforts to awaken Mona (April 17th, 2021) - Locked behind Pastebin. Password: grouptherapy [x]

Baroness and Jay discusses their "secret" in the kitchen, and King brings gifts for the family (April 17th, 2021) - Unlocked

Baroness meets with Jack in the kitchen (April 19, 2021) - Unlocked

Baroness meets with King to apologize (April 19th, 2021) - Locked behind Pastebin. Password: nightmare [x]

Jester and Jay discuss a problem hounding the family (April 19th, 2021) - Locked behind Pastebin. Password: youlied [x]

Crown meets with Jack in the living room (April 20, 2021) - Locked behind Pastebin. Password: observer [x]

Jay’s Coronation (April 20th, 2021) - Unlocked

Baroness meets Chorus in the library (April 21, 2021) - Unlocked

Baroness sneaks away to meet with Stal about King and Jay. (April 21, 2021) - Unlocked

Chorus introduces themself to Kate. (April 21, 2021) - Locked behind Pastebin. Password: stars [x]

[2021-04-22 | SYSTEM RECOVERY UPLOAD | FOURTH] (April 22, 2021) - Locked behind Pastebin. Password: baroness [x]

Viscount confronts Baroness in the garden (April 22, 2021) - Locked behind Pastebin. Password: honeybee [x]

[AUTO-UPLOAD] Duchess returns to her room after an investigation... (April 23rd, 2021) - Unlocked

Baroness confronts King. (April 24th, 2021) - Unlocked

Chorus visits Jester to learn Dreamon separation. (April 24th-25th, 2021) - Unlocked

Jack and Dave plot a "kidnapping." (April 25th, 2021) - Unlocked

Baroness asks Jack about her coronation. (April 25th, 2021) - Unlocked

Jay and Baroness play with Pants (the cat) (April 25th, 2021) - Unlocked

Part 1: Jay takes Baroness to talk to King. (April 25th, 2021) - Unlocked

Part 2: Baroness apologizes to King. (April 25th, 2021) - Unlocked

Part 3: Recollection and Awakening. (April 26th, 2021) - Unlocked

King comforts Crown after Max, Prince, and Jay go missing. (April 26th, 2021) - Unlocked

King looks at her hummingbird shifting progress. (April 27, 2021) - Locked behind Ghostbin. Password: beautiful [x]

Part 1: The Plan to Bring Back Mona (May 2, 2021) - Unlocked

Part 2: The Plan to Bring Back Mona (May 3, 2021) - Locked behind Ghostbin. Password: welcomeback [x]

Jay and Chorus speak to K1ng (May 8, 2021) - Locked behind Pastebin. Password: tryagain [x]

Jester and Viscount share a vision. (June 23rd, 2021). Locked behind Pastebin. Password: koko mathers [x]