The Filian ARG Document

START HERE

Hello snackers and frens!

Welcome to the Filian ARG Living document! This is an ongoing informational project intended to solve the mysteries/puzzles related to the Filian ARG.

A very special thank you to our contributors & document editors for making this project what it is. And an extra special thanks to the mods, as always, for keeping communities safe and healthy.

A general explanation of how to use these Docs:

  • A great starting place for newcomers is the Current Threads and/or FAQs tabs
  • We try to keep it organized in {platform}/{location}/{puzzle||theory||analysis}
  • You can see more details on our Organization Method.

Quick Note

Hey, Just Call Me ‘L’ here (the document owner). With everything disappearing on May 1st, 2026 (twitter profile, various social banners, etc), the idea of the Snackers HQ Discord disappearing has lowkey become a real, half-hypothetical possibility.

With this in mind, I have made a dedicated server for the Filian ARG!! Note that quite a bit of things might be unfinished and a little messy, please bear with it 😅

[when in doubt, rely on the main Filian server / “Snackers HQ” for the most up-to-date info]

...as of May 8th, 2026, it looks like the main server has hidden the arg channel- 😭 this might be the only place to talk about info atm... i’ll re-update this if anything changes

The Filian ARG-dedicated Discord Server: https://discord.gg/esfqqUFBS5 

Whoops some more notes about it to know before joining:

  • Discord account must be created for at least than 5 minutes
  • Wick Bot is used to verify into the channel
  • Rules are the same as the one in the main Filian server
  • Embed perms unlock after a week of being in the server
  • Embeds are granted early IF, AND ONLY IF, you have something ARG-relevant/helpful that needs to be shared

Organization Method

Generally, my (Asa) idea for this reorganization is to split everything into dedicated sections so when someone wants to know what has been tried already about anything, they can find that info (and only that info) within a few clicks. This is to avoid the choice-paralysis or info-overload of newcomers trying to parse the relevant info without having to read the entire 5 months of timeline and testing history of the whole ARG.

For now, the general method is to break it into a directory structure like so:
{Platform}/{Location}/{Puzzle or Theory or Analysis}

So for example:
Minecraft/Shremple/Tower Encoded Data

or

blackfile-index.org/CITF_MEMO.TIF/Tried Passwords

or

ARG Channel/Livestream 1/DTMF Analysis

The two most important things (aka the ways it fails) for this type of organizational structure are:

  1. Understanding that the puzzles are likely cross-referencing each other multiple times. For example: Don’t miss the link between the ARG Discord Owner’s Bio and the Minecraft Seed (this example is unconfirmed to be a real link, but demonstrates the idea I’m trying to make very well).
  2. Documenting the things we try that FAIL or DEAD END - the most massive time sink and morale killer is trying something for days only to find out someone already followed that path a month ago. Especially for newcomers. DOCUMENT EVERYTHING.

It will also be extremely helpful for each thing to be referenced directly if it is outside of each theory’s specific scope (the minecraft seed pulling from the discord owner’s bio, to reuse that example), so it should be hyperlinked to the relevant tab and bolded. The bold is to distinguish between external (not-to-the-docs) links and internal (to-other-tabs-in-the-docs) links.

Additional Editing Guidelines:

One last thing before you go, we (Finite Emporium on discord + whoever comes after me) have a proposed set of guidelines for the members and players of the ARG with Google doc editing permissions!


Proposed guidelines for participants with doc editing perms;

  1. Please add as much context as is needed to understand a statement/link/picture as this doc is for both active participants and potentially new parties
  2. Please do what you can to credit all contributions, the arg is a community effort and most would feel its important to celebrate contributions it also helps to identify relevant parties should someone need be asked for further info/clarification or evidence of claims
  3. Proposed format is after information like text or a photo add “(credits: name/user name, place ie discord)”
  4. You are encouraged to read through all of the tabs before contributing information to the document - this may become challenging or impractical as the doc grows so this suggestion may be updated or removed in the future
  5. It was discussed that incorrect/debunked information be struckthrough & solved or info proven correct should be highlighted(green/blue were proposed) - the primary reasoning for striking out instead of deleting is it saves the info for later rechecking & doesn’t remove the work put in by those who contributed it, as the work is part of the fun/play of the ARG it feels important to preserve those contributions even if they didn’t prove correct.
  6. This is a game, please don’t try to get people into legal trouble by doing internet shenanigans

Summary of Events

TL;DR Summary of What is Happening and Current Status

Chronological order of confirmed events

Hardcore marathon:

  • Knocks and glitches were heard/seen throughout the video, and Filian gave concerned reactions to both.
  • A glitchy video clip was played at the end of the marathon. In the visual glitches a youtube link was found leading to an unlisted video on the channel @isitreallyover.
  • The channel contains two unlisted videos (known so far) and one removed video. There's also a community post (which links one of the videos) and four livestreams (two of which are now privated).

First Unlisted Video: (Link)

  • The unlisted video is a black screen with glitch effects and the video gradually shifts from black to purple. The title decrypts to "red herring".
  • The gradient from black to purple may have been a clue about the pfp.

@isitreallyover youtube channel: (Link)

  • Named “time is up”.
  • Channel description decrypts to "one day... in another life? maybe?" using a Caesar cipher.
  • Channel pfp is a darkened image with a grid of numbers over a closeup of filian's eye decrypting to "I thought I had more time" using hexadecimal.

1st livestream: (Link)

  • Pure black screen with miscellaneous sounds.  
  • The stream title started as a "." and was changed to "325113155552413553". Using the Polybius square cipher, then the Vigenère cipher with the default key on cryptii, this translates to "keep going"
  • The stream description started with the word "its" in binary.  a few hours in the word "happening" was added in binary with the “new line” character at the end.

2nd livestream: (Link)

  • Aria Variata BVW 989 was looping with a black screen. There were intermittent periods of silence and an audio glitch at 44:09.
  • Using the Enigma Machine cipher with all settings set to 1 (default on cryptii depending on how you access it) the title (jmksz o) translates to "resolc", or "closer" backwards.

3rd livestream: (The stream is not unlisted, but rather made unavailable by YouTube since it exceeded 12 hours.)

  • 3 day long pure black screen stream.  First half was complete silence, second half was looping Debussy - Clair de Lune.
  • The title was 28 underscores. There was no description.
  • Nothing confirmed was solved in this stream.

4th livestream: (Unlisted)

  • The stream was nearly black static with the song Didone Abbandonata looping. The title was again 28 underscores.
  • The description started blank, but was eventually changed to 4999 backslashes.
  • Temporarily the description had the following text in the middle of the backslashes: N̸̯̭͒͠o̴̳͉̚̕w̸̻̏ ̸̧̠͛̊t̸̪͝h̶̹̞̏a̵̭̔͜t̴͉̲̿̚ ̸̭͍͌́y̷̧̏͗o̸͙͒u̸̖͆ ̷̧̞̀h̸̰̑̆ȧ̷̯͎v̷̪̀ḙ̵̺̚ ̶̬̄̑ḛ̵̐͝v̴͎̟͝͝ė̸̪r̷͎̀ȳ̵̙̥t̶̩̼̀h̶̙͐i̷̳̊n̶̩̜̄͝ġ̸̡̍.̸͍̎ ̵͙̋ k̶̘̎ẹ̷̋e̶̸̞̯̯̬̓̊p̵͍̋ ̴̮̔ͅl̷͛͜͝o̵͉͂o̴̡̅ḱ̸̝͖͝í̶̛͖n̸̖̿g̴̝͐
  • There were beeps and typing/failure sound effects throughout the video which were eventually realized to be the pattern 6 22 22.

YouTube Short: (Unlisted) (Low quality incomplete reupload.)

  • A link to a discord server with the same glitched text from the 4th livestream was found in the description to a short on the Filian youtube channel posted on the date 6/22/22.
  • In the short filian dances to the song Diamond City Lights by LazuLight NIJISANJI EN.

Second Unlisted (now privated) Video:

  • This video was quickly removed. Believed to be due to an error in the clues.
  • The title was “//” with no description.

Third Unlisted Video: (Link)

  • The video is a black screen with the song “Sonata in G Minor, Op 50 No. 3 - Adagio dolente” (specifically the version linked) playing in the background.
  • At the timemark 3:23 loud beeps can be heard in the same pattern as in the 4th livestream.
  • The description contains 4994 “/” and 5 “_”.

Discord Server: (Invite link no longer valid)

  • A soundboard found on the discord server had a spectrogram that showed 50.115.0.25 which turned out to be a minecraft server IP
  • The discord server owner had a name that was 24 slashes. The name of the discord server is also 24 slashes. The owner's @ is ”_._.__.___.____.___.__._._”. Neither has been solved. (Possible Solution)

Minecraft Server: (50.115.0.25)

  • The server is in hardcore mode. The description initially read "find it". The seed is “711026799995424918”.
  • A graveyard was quickly found in which there was a pale oak sign reading "you can get them back.  send the dead. ice is your friend".
  • A command block protected altar was found in an ice spikes biome with signs written in galactic alphabet (enchanting table language) that decoded to: "If you want your fallen a sacrifice must be made. Place the head of the dragon at the top. Don't misunderstand, there is more to be found." Upon placing the dragon head all dead players were revived, and continued to revive for around an hour. This seemed to only be a way to revive people as no other clue has been gathered from these two structures.
  • A reinforced deepslate box was found in the end containing a custom temple build and command block/barrier block protection. A sign was found inside with hex code written on it, which decoded led to a website "blackfile-index.org". The temple has been dubbed “filian temple”.
  • The server description was then updated twice, first briefly reading "if only you knew how much more is out there", then changing again to "find. it."
  • On Christmas the server was changed to normal survival instead of hardcore.  The server returned to hardcore on the 26th.
  • The server went down for maintenance on Feb 3rd with the message “Going offline into maintenance mode to work on lag. See you in a day!”. The server MOTD changed to “Currently under maintenance” in red, and “we’ll be back soon” in a beach gradient.
  • The server returned at some point before 9 am PST on Feb 28th, 2026.
  • The spawn area of the server is currently closed off by ARG players in order to prevent griefing, so new players may have a hard time joining.

The Blackfile Website: (Link)

  • The website is a near black static screen with green text saying "SYSTEM READY…" and a line to submit inputs. It looks sort of like a terminal.
  • The typing sounds and failure sounds are the same as in the 4th livestream.
  • Looking into the site code uncovered the input "THE_TRUTH" which initially led nowhere, but gave the text "ACCESS GRANTED".
  • Inputting the text "help" into the terminal gives the output "THERE IS NO HELP FOR YOU HERE." potentially implying there are additional undiscovered inputs.
  • A "read me" page was found, and a countdown started ticking once every 24 hours. At the end of the countdown we were given the text:

0kind

It=stillnotfound

Sacrifice.complete=true

Initializing message...

“If I’m lost, the backup coordinates can be found on Earth near where east meets west: An ancient sea bridge, an island between B and C, bodies both. I have a yankee sixth sense about it. Two ivory towns. Carry the cross into the Mine, just the whole numbers, sixty three times raise the parallel, just twice the long.”

  • At that time, the input THE_TRUTH began redirecting users to a windows 95 desktop with several inaccessible files, and a password protected file called “CITF_MEMO.TIF”.
  • The file “Convo” was added on Feb 11th containing a conversation between “J” and “Me” discussing whether there were any updates on “the girl”, showing that they’ve noticed our access to the website/win95 desktop, and saying the docs are still protected, and the password hasn’t been found or shared.
  • On 3/17 at 4:41 AM the website code was changed to include the konami code.  Entering the konami code plays the music notes CBACG and brings up a new riddle. The riddle and its solution can be found here.

  • The solution to this riddle leads to some coordinates on the Minecraft server. So on Mars 17th the fourth, and seemingly most important, structure was discovered and later dubbed “Shremple”.

filians YouTube Channel: (@filianIsLost)

  • Around this point on the 22nd of January 2026, 330 videos were removed from filians official YouTube channel. Then on the 16th of February 303 more videos and all posts were also removed from the channel.
  • The pfp of filians channel has also become darker twice. On the 16th and 17th of February.
  • These points have not successfully been incorporated as a clue anywhere but there are some theories.

The Shremple:

  • The shremple is a ziggurat or pyramid structure incased in an obsidian box.
  • Two beacons where placed on iron blocks in the shremple and the text shortly after the text “Remember” “Watch it.” “Protect it” “its coming.” was added through invisible armor stands to four sea lanterns on the corners of the structure.
  • A full eight days later several waves of difficult mobs started attacking the shremple which were fought off by ARG players.
  • Afterwards several animals were spawned. 32 cats and a cow.
  • On 21 of Mars the entire Shremple was erased in hope that something would happen. Nothing did, and later on the 25th it was rebuilt.

Current Status (Updated: May 1st 2026)

  • The spawned animals were the last part that’s known for certain to be a part of the ARG. That was on the 3rd of Mars 2026. Since then, no progress has been made for certain and we are stuck on what the animals are supposed to tell us. Theories link.
  • On May 1st 2026 all of filians social media began to delete all content. The community is currently trying to find any meaning behind this.

Current Investigations (threads we are grasping at):

The Cats: (started 17/4/2026)

  • Due to an “unfortunate incident” the original cow and most of the cats were killed. On the off chance that they were supposed to do something there and not just a clue 32 untamed cats were brought to the shremple on April 17th to see if something would happen.
  • Nothing has happened yet but they are being monitored on the shremple cam.

The Minecraft Coords:

  • The server Overworld is only 32500 blocks in all directions from a custom spawnpoint and as such has been extensively, but not thoroughly, searched by several players. There could theoretically be more hidden secrets pointed to by one of the riddles. Many cords have been suggested and investigated, but these have been poorly documented. There are 4-5 lists of tested cords in this doc and it’s hard to tell when they stopped being updated.
  • Therefore a correct location could have fallen through the cracks and been missed. It could be a job for someone to compile all these in a single comprehensive document.
  • The world has also been scanned using mods but nothing unusual was found.

The CITF_MEMO Password:

  • The website is rate limited so the password cannot be brute forced. Over 11,5 million attempts have been made anyway but no progress so far.
  • Since THE_TRUTH password was timegated some people believe that the CITF password also is while others believe we already have the clues for it.

The Great Purge: (May 1st, 2026)

  • Shortly after 1 pm PST, filian’s YouTube channel again had declining video counts. Then the banner and PFP were removed. Similar purges followed on other media accounts.
  • Twitch was purged around 2:45 pm PST
  • Instagram was purged at some point before 3:05 pm PST.
  • Twitter was similarly purged of all posts, banner, PFP, etc by 3:40 pm PST.
  • Discord profile was similarly purged.
  • It appears only the Facebook is unchanged.
  • Soon afterwards, many of filian’s friends started tweeting variations of “Filian is lost”.

Current Threads

This will be where we keep all major threads that are considered to be largely ‘active’. (‘active’ is currently undefined and follows vibes. I’m open to a more structured definition, if anyone wants to define one.)
I think keeping these as {location}s as defined
here is a good method for keeping the list clean without directing newcomers’s attention too hard into any specific interpretation of the facts.

Current examples and why include:


Shremple (because we were directed here by two separate puzzles and have not found anything other than two big fights/raids)

Livestream 1 (because we have a LOT of puzzles and things to look into in this and have no ‘solutions’ for any of them yet)

CITF_MEMO.TIF (because we still need to figure out the password) ((this is largely considered our ‘main blocker’, of sorts, but also has zero leads which could indicate we missed something somewhere else))

FAQs (README!!!!)

FAQs

  • Have we checked X coords? -> Checked Coords.

  • Diomedes? -> README.md.

  • Is Filian…? -> Filian is fine. This is waay too much work and money to put into something for it to be a ‘pull the plug’ or ‘coverup’ event. We've had multiple confirmations she is alive, safe, and is still influencing stuff behind the scenes.

  • Maybe we should ask X streamer/person? -> NO!! 1000 people sending a single ‘harmless question’ to the same person is not a good idea. The ARG is self-contained.

  • Is the ARG over? -> We honestly don’t know. We hope not. There is, technically, no signs saying it’s over (like an announcement or something), so there is some hope.

Useful Tools

List of confirmed codes & cyphers used to solve components of the ARG so far:

Goldbug cypher
Hexadecimal code
Caesar cypher (key = 7)
Binary code
polybius cypher

A1Z26 or Modulo26
Vigenere-cipher (cryptii default key: cryptii)
Enigma-Machine (cryptii default settings: M3; rotors I, I, I; ring 1, 1, 1; pos 1, 1, 1, no plugboard; reflector UKW B)

Some Case-Specific ARG Tools: (by @hadez_mane on discord)

Toolkits:

https://github.com/DominicBreuker/stego-toolkit

https://0xrick.github.io/lists/stego/

https://github.com/ragibson/Steganography

Tools we might be interested in right now:

Audio

https://github.com/danielcardeenas/AudioStego

http://www.petitcolas.net/steganography/mp3stego/

http://www.sonicvisualiser.org/

https://www.sonicvisualiser.org/sonic-lineup/index.html [Wav comparisons between original file sample and a different sample] (Windows Startup/Shutdown noises)

https://0xrick.github.io/lists/stego/#wavsteg

https://github.com/solusipse/spectrology

https://github.com/dhsdshdhk/stegpy

http://jpinsoft.net/deepsound

Image (JPEG)

[StegSolve] http://www.caesum.com/handbook/stego.htm (Interactively transform images, view color schemes separately, ...)

[Steganabara] https://github.com/cedricbonhomme/Stegano (Interactively transform images until you find something)

https://www.boxentriq.com/steganography/stegdetect (Online StegDetect)

https://github.com/bannsec/stegoVeritas

http://old-releases.ubuntu.com/ubuntu/pool/universe/s/stegdetect

https://linux.die.net/man/1/stegbreak

https://github.com/jackfengji/f5-steganography

http://linux01.gwdg.de/~alatham/stego.html

https://github.com/lukechampine/jsteg

http://www.caesum.com/handbook/stego.htm

https://packages.debian.org/sid/utils/outguess

Text

https://www.irongeek.com/i.php?page=security/unicode-steganography-homoglyph-encoder

https://www.vincentchu.com/asciiartsteganography.html (Cursor anybody? :kekW: )

https://github.com/vgmoose/ascii-steganography

Promotional ARGs:

https://tardis.fandom.com/wiki/FindTheDoctor_(series)

(Promotional Campaign for Upcoming Series)

http://aliceetsmith.com/game/the-black-watchmen/

(ARG where one of the puzzles involved travel to an IRL Location to complete the final puzzle. Diomedes anybody? :kekW: )

General / Misc

-General timeline

The timeline (UTC time) by kawai_neko_meow:

2025-12-05

03:51:04

ARG Channel created

2025-12-06

01:44:05

Initial video unlisted upload

2025-12-08

19:23:32

Last Hardcore MC stream started

2025-12-09

02:41:47

Last Hardcore MC stream ended

2025-12-09

04:08

@blackfileindex channel created (may not be ARG related)

2025-12-09

03:16:07

First stream started

2025-12-09

12:56:51

First stream ended

2025-12-10

02:22:45

Second stream started

2025-12-10

13:29:50

Second stream ended

2025-12-10

 22:11:20

Third stream started

2025-12-10

23:49:18

Third stream published (metadata says it's 1h 37m 58s long, so maybe)

2025-12-10

23:56:20

Third stream published (about)

2025-12-13

23:49:18

Third stream ended

2025-12-16

00:34:34

Discord server created

2025-12-17

10:31:45

Domain created

2025-12-17

10:51:39

web server cert created

2025-12-17

11:54:50

web main page edit

2025-12-17

21:54:21

Forth stream started

2025-12-18

09:59:36

web main page edit (?)

2025-12-18

10:00:17

web style/script edit

2025-12-18

10:02

Forth stream posted a link to a clip (was removed)

2025-12-19

10:09

  Forth stream ended (about)

2025-12-19

10:15:40

Clip uploaded

2025-12-19

10:16

Clip posted in yt posts (about)

2025-12-20

07:01

 Minecraft server found

2025-12-20

15:19:42

blackfileindex channel created

2025-12-20

15:22:42

blackfileindex: RESTRICTED ZONE

2025-12-21

02:01

*Discord announcement

2025-12-21

14:38:34

blackfileindex: SLEEP STUDY #redacted

2025-12-22

10:32:30

domain info updated (?)

2025-12-22

11:14:49

blackfileindex: INCIDENT REPORT #redacted

2025-12-23

 09:51:21

blackfileindex: FIELD OBSERVATION LOG #redacted

2025-12-24

 02:59:30

web style/script edit (?)

2025-12-24

08:01:09

web style/script edit (?)

2025-12-24

09:19:09

blackfileindex: TEMPORAL RECORD #redacted

2025-12-24

11:32

Snackbot message

2025-12-25

07:40

Server message changed

2025-12-25

11:15:55

blackfileindex: ARCHIVED INCIDENT #redacted

2025-12-26

 10:47:21

blackfileindex: PERSONNEL LOG #redacted

-ARG overview

ARG Start

End of Minecraft Hardcore (Part 7) 🔴 HARDCORE MINECRAFT MARATHON 🔴Stream ends when Neuro Vedal Crelly & Filian beat the game! Pt 7,  Unlisted Initial Video URL was revealed for frame or two at the end:

During the minecraft marathon stream, Filian’s screen would occasionally have a glitch effect, or a knocking sound could be heard.  Neither effect was triggered by chat.  Whenever this happened, Filian’s expression would noticeably shift, usually followed by her saying some variation of the phrase: “I don’t have much time.”

Additional analysis in The Filian ARG Document tab

ARG Channel

Channel → https://www.youtube.com/@isitreallyover 

Channel Name → time is up

Channel Handle → @isitreallyover

Channel PFP → "i thought i had more time" (ASCII hex code)

Channel Description → “one day… in another life? maybe?” (Caesar+7)

Additional analysis in The Filian ARG Document tab

Initial Video

The Initial Video [https://www.youtube.com/watch?v=yKYgQrogPEI]

Title: :07 ‡0::.?* → "red herring" (goldbug cipher, rot7/caesar)

Additional analysis in The Filian ARG Document tab

1st Livestream

The 1st Livestream [325113155552413553] on the same channel started shortly after the Minecraft Marathon ended on 12/8/2025 PST.  This stream ran just shy of 9 hours and 41 minutes.

Initial title: .

Current title: 325113155552413553 → "keepgoing" (vigenere and polybius cipher)

Description: 01101001 01110100 01110011 → “its” (binary ASCII)

01101000 01100001 01110000 01110000 01100101 01101110 01101001 01101110 01100111 00001010 → “happening\n” (binary ASCII)

The second line was added to the description later during the livestream.

Additional: Multiple sequences of audio are played during the livestream, see The Filian ARG Document tab for analysis

2nd Livestream

The 2nd Livestream [jmksz o] on the same channel started a day later on 12/9/2025 PST.  This stream ran just over 11 hours and 7 minutes.

Title: jmksz o → “closer” (Enigma machine, then reverse the output)

Description: \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ (114 \ unknown)

Additional: Music is interrupted twice with a spectrogram image showing FILIAN IS LOST over a bag of fruit snacks, see The Filian ARG Document tab for analysis

3rd Livestream

The 3rd Livestream [____________________________] on the same channel started a day later on 12/10/2025 PST.  This stream ended just shy of 73 hours 38 minutes, thus not archived.

Title: ____________________________ (28 _ unknown)

Description: (no description)

Additional: The stream started with over 32 hours of silence, before playing glitchy music. See The Filian ARG Document tab for analysis

4th Livestream

The 4th Livestream [____________________________] (same title as the 3rd) on the same channel started on 12/17/25 at 2pm PST

Title and description changed several times to hint that the audio sequence 6 22 22 was 6/22/22, which led to a YouTube short posted back on that day.

See The Filian ARG Document tab for analysis.

1st YouTube Short

The 1st YouTube Short [No stress, Just dance with the good vibes]

(The original has since been removed from the channel. This imperfect reupload is close to the original video.) [ felling stressred just with good vibe ]

Title: No stress, Just dance with the good vibes

Description: I stream LIVE @  / filian   Monday and Wednesday at 7pm PST/10pm EST and Saturday at 4pm PST/7pm EST if you want to say hi! Check out our ȼꝋᵯᵯᵾꞥīⱦɏ Discord!  / discord   IG:  / filian.ttv   TikTok:  / filianvt   Twitch:  / filian   #shorts

Additional: The corrupted ‘community’ in the  description is followed by a Discord invite link (no longer accessible): https://discord.gg/ZJ6aewaP See The Filian ARG Document tab for analysis and the old archived doc here.

Discord Server

Server Name: ////////////////////////   (24 slashes, unknown)

Created by user with profile name: _._.__.___.____.___.__._._ (26 . and _, unknown)

Additional: A voice channel was available and soundboard noises could be triggered, one of which had an IP address in the spectrogram leading to a Minecraft Server.

Update: Profile name changed to: _._.__.___.____.___.__._.__09436 now. See The Filian ARG Documenttab for analysis.

Minecraft Server

Hardcore Minecraft server named find it (found sign decoding to blackfile-index.org in an admin constructed shrine in the End, but later the Minecraft server briefly renamed to indicate more)

Additional: See The Filian ARG Document tab for analysis.

Blackfile Index

https://www.blackfile-index.org/ (solution unknown)

Additional: The password THE_TRUTH can be entered but led nowhere.  After a countdown of 5 days in a readme file, the terminal is now accessible and a riddle appeared in the readme.  See The Filian ARG Document tab for analysis.

Snackers HQ

Snackers HQ

Moderator Savaeris established the ARG channel on 12/8/2025 at 8:08 pm PST a short time after the end of the Minecraft Marathon.

At 6:01 pm PST on 12/20/2025, moderator Achievos posted in the announcements channel a plea for help searching the Minecraft server for ‘it’ and boosted the ARG channel.

At 3:32 pm PST on 12/24/2025, Snackbot posted in Filian’s announcements discord channel about the ARG and this was noted a few minutes later by moderator Dragun in the ARG channel.  At this time we do not know if this means we are done or if there is more to the ARG, but early on 12/25/2025 the Minecraft server description changed -  suggesting there is more.

Older Theories

Theories:

So what if Filian is an AI?
Do any of the glitches make a MIDI arrangement?

CHANNELS ON STREAM COMMENTING MAY BE LINKED TO ARG

Check Wind Audio, could be stretched song, common ARG tactic.

This is likely to lead to Filian getting a new model.

It sounded too consistent to be a song ngl

^Incredibly slowed audio always sounds very consistent
^^True, but it could be a low ambient track.
^^^Doesn’t hurt to check

-- wind and water audio from the first stream has been sped up and doesn't sound like anything. Water at 10x speed sounds more watery, wind has nothing.
There was some weird beeps and boops might be morse code or something

^ speed up 50x the last audio (low ambiance (ominous)). Does it sounds like the cicadas?


Song Lyrics?:


Time is up
Is it really over
one day..
in another life?
Maybe?

'''End of Minecraft Marathon, distorted outro video played. v=yKYgQrogPEI hidden in distortion. 

https://www.youtube.com/watch?v=yKYgQrogPEI leads to unlisted video on a different channel, @isitreallyover or “Time is up”

Channel description is: vul khf... pu huvaoly spml? thfil?

Using Stick7 (an increasingly common catchphrase during the marathon) as a clue we can shift this 7 digits as a Caesar Cipher to get: one day... in another life? maybe?

Channel PFP has hidden HEX code in what appears to be an eye: 69 20 74 68 6f 75 67 68 74 20 69 20 68 61 64 20 6d 6f 72 65 20 74 69 6d 65

Which decodes to: i thought i had more time

The channel started livestreaming with various low volume sounds. Stream description eventually changed to: 01101001 01110100 01110011 Which in binary is: its

TITLE CHANGE: 325113155552413553

With a polybius cypher it wields: MVCEZWQPX

When used in a vigenere-cipher with the key “cryptii” it yields “Keep Going” (found by ryab4ique on discord)

Looking back through everything I'm going to say there's a reasonable chance this isn't a full ARG. We haven't really had clues lead to other clues and most confirmed solutions were just rudimentary codes. I think the stream is supposed to be more of a teaser than any insane hidden codes considering nothing has come of any audio analysis. Even the dial tone might have just been a default sound used for this. I think all the sound effects together are just some sort of teaser to a new model that will make a lot more sense on debut

“The Yuuki Theory” - liquidwater2 on Discord (Initially posted 12/11/25)

—----------------------------------------------------------------------------------------------------------------------------------

summary:

This theory posits that Filian is like Yuuki from SAO.  She's actually on her death bed and has been piloting a virtual person.  Time is up means she finally croaked and now her consciousness has been transported to the digital world.  The reason she hasn’t returned yet is that there was a system crash which corrupted her, which is why she isn’t around right now.  We are currently searching for a backup to restore her.

Edit:  I think it might be more likely that she is trying to escape something (could still be death) by transferring her consciousness, or at the very least someone doesn’t want her to transfer, which explains the knocking, and why she’s running in the ARG intro clip, and seems to be transferring willingly.  Someone also mentioned in another theory that backslash is the escape character in a lot of programming languages, and backslash has shown up a lot in the arg so far.

She has recently removed the “vtuber in training” from her socials, and has been insisting on streams that she is not a vtuber, but instead an anime girl.

The channel description says “In another life”, implying that a current life is ending.

Potential narrative explanation for the 114 backslashes and the underscores:

11 represents Filian because of her jersey.  4 represents death, as it does in japan and other asian cultures.  This would mean Filian has died. In the first livestream, one of the identifiable noises was a heart rate monitor with a dangerously slow heartrate.  If we assume the backslashes represent Filian’s death, the 28 underscores in the third stream would be a heart rate monitor flatline.  The silence is a moment of silence for the dearly departed, and the following music “clair de lune” is common funeral music.  The music in the fourth stream is titled after a tragedy where the main heroine killed herself. —-To be expanded upon.

In the fourth ARG livestream we get a repeated code with the pattern 6:22:22.  At exactly that second in the minecraft stream filian dies.  The odds of this happening are 0.005%, or 1 in 20,352 making it unlikely to be a coincidence.

//Knocking could potentially be “knocking on heaven’s/death’s door”.  This is still pretty shaky.//

//The 3rd livestream, the one with silence and funeral music with the supposed flatline, was public for almost exactly 3 days, which could symbolize a period of death before a resurrection//

//The third video has the character limit of forward slashes.  Some people have pointed out that the backslashes could be a descent, the underscores the flatline, and the forward slashes a meteoric rise.  Unclear if this is the intent//

Supporting evidence:

Video example of this from 2 months ago:

https://youtu.be/Z5CC1MmBJVE?t=2954

The only reactions with substance from the minecraft stream:

Part 5: In response to a glitch, she says “I’m not long for this world”.

4:26:45

Glitch - “abelebelebele, I think this has gotta be the run, I am not long for this world”

Part 7: In response to a glitch she says “It’s not lookin’ good”

7:27:45

 Glitch - “oh frick I’m outta time guys, I’m really glad we finished it in 4 days cause it’s not looking good”

Yuuki Theory Expansion #1 - 2/22/26

This is a quick update to the theory which incorporates new information that has been gained in the past few months.  One major question that the previous segment fails to answer is “If she transferred to digital why is she still gone? Why isn’t she back yet?”.  She never woke up from the data transfer.  The process was incomplete.  This is because the system/network transferring her data crashed mid-way through. We know that the windows 95 environment we have access to went through a crash.  We have several corrupted files in the recycling bin, a few of which are confirmed to be created when a crash takes place.  Filian’s data was also corrupted during this crash.  The people facilitating this transfer needed to restore the missing data, so they started extracting her personality and memories from her youtube channel, which is why hundreds of videos and all posts are gone, and why it is getting darker/staticy. The question “any updates on the girl” asked by J is referring to whether she has woken up or been restored by the extracted data.  Us snackers on the other hand have an alternate route to a solution.  An unknown entity has offered us aid.  “If you want your fallen a sacrifice must be made”.  While at the time this seemed to be an unplanned helping hand offered to us by the gm due to our lack of minecraft ability, I believe there is more to it.  Filian is counted among our fallen by this entity.  Unfortunately, while our character data was easy to find and restore, Filian’s is corrupted.  It requires a backup.  To fulfil the boon we purchased from it and restore our final fallen, the entity provided us a riddle not for backup coordinates in the sense that the original coordinates were lost, but coordinates TO a backup of Filian.  This is why the read me includes the line “Sacrifice.complete=True” as though it was a requirement to acquire the riddle.

(short timeline for reference)

1/22/26 330 videos are removed from the filianislost channel

2/11/26 J and Me Convo drops

2/16/26 303 more videos and all posts are removed from the filianislost channel.

Additional speculation (shaky): The streams at the start of the ARG were the data stream of filian’s consciousness being transferred.  The messages in the titles and description were not necessarily to us, but thoughts by filian as the process took place.  “Keep going, it’s happening, closer”, however the final of these began to show some cracks as it was displayed backwards. During that stream we got the message “Filian Is Lost”, and as mentioned above the following stream had no message. Only a flat line of underscores, silence, and funeral music.

It could also be that Filian is the one that initiated this transfer against the will of whoever is operating this technology, and the knocking is them trying to get in and stop her.

Narrative open ends:  

Why did we need a sacrifice/what’s with all the altar and temple iconography?

What is J and Me’s actual goal?  Are they antagonists?

Are the backup and “it” the same thing?

BTW if this pretty much correct but the data transfer was the other way from digital to human I’m still gonna count this as being right XD

—----------------------------------------------------------------------------------------------------------------------------------

A bit of a Meta Timeline:

January 2025 Japan streams:

  • First studio tests with “hollywood tracking” and multiple people interacting.
  • Likely licensing solution for existing vtuber models
  • Experiments with AR stuff, announced but didn't happen.
  • Contact to new Model creator?
  • Contact to Lore trailer studio.

2025-01-04: 🍊 CHAT SPENDS $1,000 ON ANYTHING IN JAPAN 🍊 IRL in Japan shopping! Using Hollywood tracking today! Also some AR stuff! [Day 2/4 in Japan]

First time going into some details about Debut.

2025-01-13:

First collab back is with Vedal/Neuro

2025-01-24: 🍎 HARDCORE MINECRAFT 🍎 If I die, my world gets deleted. And so does the stream. Goal's to do stuff besides try to beat game. I want a dog

  • First time Hardcore Minecraft.
  • No further attempts till September

2025-01-29: 🍉[NEW TECH] If I Stop Pedaling My Router, I Die 🍉 Today I hooked my router up to a bike. If I stop pedaling, it turns off. New graphics ya

  • Tells Layna about the early storyboard of a Lore video by “a known studio”

2025-05-26:  https://www.youtube.com/watch?v=6cu7XqnIlCg

  • Confirms debut (model done?)

2025-09-01: https://youtu.be/tAegXiWfaB4?si=ft5XqqYeBZTCyD7A&t=774

Strange yapping about

  • Creditscore reveal..?
  • Being broke
  • Selling the channel

Could this mean she signed a significant contract like buying a property or founding a company?

2025-09-01: https://youtu.be/5eUQvDYkfDw?si=a27DTHoSZxEOyrgR&t=12772

  • Early leak of VSoccer. Filming/production likely shortly after this date.

2025-09-13: 🍋 YOU LAUGH, YOU LOSE 🍋 IF I LAUGH, I RAW DOG A BOWL OF MUSTARD. I don't like mustard... Good thing I don't laugh easily! Shoutout to Kend

Massive concentration of ARG related happenings:

  • First Hardcore Minecraft training since January
  • Confirms Debut, first mention of ‘My world’
  • First Wplace look

2025-10-06: https://x.com/filianIsLost/status/1975306378681213346

  • Last timeplan posted, shows HC Minecraft for October 10th, lasting 2 days which did not happen.

We can assume something caused the HcMinecraft stream (which likely was planned as start to the ARG and debut) to be pushed back for 2 months. The following 2 months of stream seem slightly derivative, like filler content.

2025-12-02: VSoccer

Distance from mention (2025-09-01) : 92 days.

Distance from planned HcMc Date (2025-10-10): 53 days

Initially on the Livestream 2 page uncredited:

The 114 ‘/’ Theory:
The song is “Aria Variata, BVW. 989 - Variation No. 1” The only other thing that related the number 114 to this song is “
Minuet in G major, BWV Anh. 114”. The song was originally written by Christian Petzold, but was popularized by S.Bach. This song is in G Major which might be a hint later on idk but it’s gotta be related to the fact that the title of the livestream was Minor A.

I don’t yet really know how this relates but the words Minuet or G major or Petzold(OG creator) or Anna Magdalena(The piece is part of the notebook that Bach wrote for his wife) might be important.  

"Why Backslashes? The 'Escape' Theory" The use of 114 backslashes (\) is not random. In programming, \ is the Escape Character, suggesting the entity is trying to 'break out' of the 114 (The Bach Minuet). Also \ is used for Windows Local Paths, while / is used for Minecraft and URLs. This confirms the entity or Filian is trapped in the System OS, not the game, supported by the 'Windows Ding' sound heard at 49:48." (This is just my theory tho, might be completely wrong)

A variation on this is that 114 is decimal in ASCII for ‘r’ and ‘\r’ is a Carriage Return special character.  This is used in Windows to denote a newline in the sequence ‘\r\n’ (‘Carriage Return’ followed by ‘Line Feed’).  Reference: https://en.wikipedia.org/wiki/Newline

Music Note Theory:

 If you translate 'Find it' into german it becomes 'Finde es'. This has a very interesting double meaning as the word es for it also is the name for the note e-flat in german.

@random_jawa Incidentally the note e-flat is right to the left of the keys E and F, 2 white keys/2 ivory towns on a piano:

@ratinaselfmademaze here's the frequency of it/e-flat. Maybe in some kind of recording there is something interesting at that frequency.


I also do not know where else we shout find e-flat but it also appears a few times in the right hand of Claire-de Lune by Debussy so maybe something happens at those times in the recording, or we just have to count how often e-flat appears or smth. Similar.


And lastly to give fuel to the conspiracy schitzos among us: The mods who totally do not know the solution and do not give tips * wink * * wink * posted in the arg channel that e-flat stands for filian so by finding it/e-flat we can find filian:

Unused Numbers

Unused Numbers

7.83

difference in l/r frequencies, "schumann resonance" frequency

111#D345A

or 111#1D345A or other possible variations

49

heart beats

4,11,10,6,11,10,6,11,10,1

minecraft steps: slow, normal, fast. 80 total.

114

backslashes in description

989

bach musical work number

28

underscores in title

75

debussy musical work number

3

third movement of the musical work

28

underscores in title

4999

slashes in description

50

musical work number

3

third part of the musical work

7 | 7 | 7

(or 4 1 2 | 4 1 2 | 4 1 2) typewriter pattern (rare exception to 6 | 2 2 | 2 2)

24

slashes in discord server name

1.1.2.3.4.3.2.1.1

pattern of underscores in discord creator’s username

711026799995424918

Minecraft server seed

Probably-nothing????

vsoccer

The Vsoccer website, as pointed out by ExodusCore in the youtube livestream chat of the third livestream contains potential references to elements of the arg;
https://vsoccershow.com/

(screenshot credits: ARP_Kioshima on discord)

Makedonski:
Checked all site images
Found that:


this means that most likely the number 11 was added during postprocessing, and such a T-shirt does not actually exist.

I have a code that assigns a random color to each color, if the colors are the same, then they had the same color before processing. In real photos, the pixels are of different colors due to noise.

What interesting: it only appears on Filian's green T-shirt, and note that only the number stands out. That is, they had a green Filian T-shirt, but without a number, and a purple Filian T-shirt, but with a number. It's at least weird.

Also, there are only 2 images like model_x_fil:
https://vsoccershow.com/cdn/shop/files/model_1_fil.png

https://vsoccershow.com/cdn/shop/files/model_7_fil.png

Stick Seven ???

Found on 22.12.2025 11:41 GMT:

https://vsoccershow.com/password
(do not the page appeared because the shop closed…)

Note : Not confirmed if this is arg related or not. Probably not.

Note² : You get locked 10mn after too many failed attempts

List of tried Passwords:

2632

Suggested by @Willis on discord

FilianIsLost filianislost

donttrusti

11D345A11, 1D345A1, D345A

4999, 711026799995424918

709161228e544f4ba8006042935e650c

password

filian

admin

Admin

rachel

vids/clips

wwwwwwwThe following is a list of clips or videos that are or may be relevant in the arg.

Minecraft hardcore challenge marathon ending (posted 9th Dec 2025);
Filian Dropped a Teaser at the End of Her Marathon Stream...

2 month old clip(from 13th Sept 2025 stream) of Filian talking about up coming debut;
Filian Gives An Update About Her Debut

Full vod;

Filian's You Laugh. You Lose - Mustard Bowl (9/13/2025)

(also note this was the first HC minecraft practice and first look at wplace)

6 month old clip(from 26th May 2025 stream) of Filian talking about face reveal/up coming model debut;
The New Filian Is Going To Debut Soon...

Full vod;

Filian, Cotton and Mega Compete at Geoguessr (5/26/2025)

First Mention of Debut Planning in January 2025:

🍊 CHAT SPENDS $1,000 ON ANYTHING IN JAPAN 🍊 IRL in Japan shopping! [1/4/25]

https://youtu.be/Bw--JpoT5n4?si=aGXBsO9iHlfkoI9z&t=6983

Sept 1st, Filian says she will show us her closet when she moves to new place (suggests possibly dynamic mapping of rooms/objects or full apartment mapping in so much detail as to include her closet)

https://rumble.com/embed/v6w6wlk/?pub=4&start=1720

Transcripts:

May 26th clip:

when's the face reveal? *big sigh* chat you guys wanna see my real face?!

i'll talk about it. guys, here's some information. as of this morning, based on what i have seen of the future filian i'll say *ahem* i am now 100% confident that debut is happening. it is going really well. it looks amazing.

a little behind the scenes, chat. a lot of you say, "filian why have you not debuted after three and a half years of streaming?"

the answer is simple, from the beginning i've always seen myself as sort of like an anime girl. and that's kind of like what i want to be in the future, right?

so with that being said i tried to debut twice! twice in the past but both times i was not satisfied with it, so i had to put it down

anything less than the best for you guys is unacceptable

so, chat, i can say though after all this time, i really think we're gonna be getting the best this time

it took me three years of meeting people learning and a lot of other stuff but i think for the future you guys will be very very excited

now chat, i will be saying this, "filian, *ahem* what are you doing once the model's ready?"

and the answer is, a lot. there is so much more going into it than just my physical appearance

there's going to be a lot more happening

so you know chat, technically we're still in early stages but i'm really excited for it. i know it's happening, and i also think you guys will be um very impressed, i guess

we'll see, chat, we'll see. anyway snackers thats all i gotta say. no dates, no dates

but as of this morning, from what i've seen, i'm now 100% certain this will be what you guys will see

Sept 13th clip:

so guys, i have a quick thing to say, a lot of you guys have been like, "filian debut when?"

ok i i'll say this, chat, it's probably not as far away as you think

but i will also say this, chat, it's not gonna be a normal debut

it's gonna be probably the first time in like fore- definitely the first time but maybe the last time that anyone's ever done something like this

so it'll be a little bit different, chat, instead of just debuting, i've been preparing to show you guys my- my world

a lot of you ask like, "filian, can i ask you questions like you know uhhh like where do you live and stuff?" you know i'm saying?

and you know i usually just say a fruit snack factory, cardboard box, homeless, blah blah blah

but the truth is, chat, i live in an apartment, and i am going to be moving to a slightly bigger one soon

and then i'll be showing it for you guys. i'll be showing you guys the world. so yeah

i've been working on it nonstop in the background and its been very very intensive so i hope you guys will be excited for it

i am working beyond hard for it. its the hardest i've ever worked for anything in my life

so like doing all the streaming stuff on top of it like a lot of its like you know not that crazy

but yeah, i've been working really really hard on something you know special

we've been waiting four/for years for it so yeah i'll show you guys my world i guess

so yeah that's all that's all i wanted to say uhm no dates no dates no no no no no no no no dates

but when i'm done preparing everything, i'll show you guys.

ok, chat? alright? cool? yes or no? is that ok chat? fighting!

Dec 8th clip:

i didn't think it would be this soo-

IT'S HAPPENING!

it's time for me to go for a- for a little while

i (unintelligible)! (maybe "i'm running out of time!")

i really gotta go!

i didn't think you'd ever see me like this

you'll be able to see the world, my world

related memes

This tab is dedicated to memes and jokes that people made in relation to solving this ARG

Frequently recurring meme when chatters return to channel after long break and ask if there’s anything new:

After several days of Claire de Lune:

When Filian joined the ARG Channel:media.tenor.com/Ssfj2DOGJhAAAAPo/filian-vtuber.mp4 (idk how to insert a GIF or a video here)

Regarding user who kept replying to posts more than day old:

 Apparently this is what actually happened on 12/19/2025

❌ Logged Message (Will)

From 1st Livestream

This section has been debunked. I will not be deleting it, since I assume a good amount of work went into it, but read with several grains of salt:

From this “@Will-u6m-d8i” guy [https://www.youtube.com/@Will-u6m-d8i]

Dunno why, saw a few people note these messages so just keeping them here in case of anything idk

[dababe31 on Discord]

[engirenouf on Discord]

[secretly_doggo on Discord]

[JCML hi yes that’s me .w.]

Filian's Steam Account

Steam Profile (WIP)

Disclaimer: There is no known clue pointing to Filian’s steam account and it is possibly not part of the ARG or a huge red herring. Double Disclaimer: Linking any Steam account in the Discord gets you a 24 hour mute.

Filian’s Steam Account Validity

Random_Jawa/@random_jawa found profile history at https://steamladder.com/profile/76561198183932810/rep/, Pizzabash noted the account had been privated Dec 12, 2025, see Figure A1, and the profile name had changed to a single period “.” on Apr 2, 2026 at 9:03PM (Todo get timezone), see Figure A2, and the PFP had been changed on Apr 4, 2026 (Todo get timezone), see Figure A3.   ARP_Kioshima/@arp_kioshima found a history of the profile including profile names on https://steamhistory.net/id/76561198183932810, see Figure A4.  ARP_Kioshima and TH3EEuphoricFan1161 both verified that a manual indexing of the steamhistory.net site is required for a profile status to be captured.  Later Liquid/@liquidwater2 brought up concerns about old profile names missing when looking at the steam account in steam.  Using a test account set up by TH3EEuphoricFan1161, Liquid and TH3EEuphoricFan1161 were able to recreate the state of Filian’s official steam account’s profile names, see Figure A5.  Note, this took a little finagling to recreate the state, see the filian-arg-read-the-pins channel on Apr 16/Apr 17 to see more details.

Figure A1: Screenshot from Pizzabash showing profile visibility history.

Figure A2: Screenshot from Pizzabash showing profile name change date and time (todo get timezone)

Figure A3:  Screenshot from Pizzabash showing PFP change date.

Figure A4: Screenshot from ARP_Kioshima showing the official Filian steam account history https://steamhistory.net/id/76561198183932810

Figure A5: (Top Left) Official Filian Steam profile.  (Top Right) Official Filian Steam profile showing previously played as profile names.  (Bottom Left) TH3EEuphoricFan1161’s test steam profile showing normal profile name change history.  (Bottom Right) TH3EEuphoricFan1161’s test steam profile showing a recreation of the Official Filian Steam profile’s profile name state.

Profile Picture Analysis

On Apr 7, 2026 at 10:19PM UST (Apr 8 in some timezones) “TheSlow / mc: The_Kaktuzz”/@.theslow on the Snackers HQ discord noted the official Filian steam profile had been updated with a profile picture (PFP) that looked black but contained “seriously weird artifacts going on”.  After a couple days, It was initially discounted but brought back up on Apr 15 at 6:47PM UST (Apr 16 in some timezones) by Hiro_Chronos ඞ/@based_hiro.  Shortly after Metakimi/@metakimi posted the steam PFP with its intensity increased.  Later WolfVerzockt/@wolfverzockt posted another version of the PFP with a different intensity used in the pinned messages by Pizzabash/@pizzabash. The original PFP, Metakimi’s, and WolfVerzockt’s images are shown below in Figure 1.

 Figure 1: (Left) Original Filian’s Steam PFP.  (Middle) Metakimi’s intensity increased version.  (Right) WolfVerzockt’s intensity increased version.

The steam profile in question has been proven to be Filian’s official steam account.  See Appendix I for a more detailed history of confirmation.  

Image Information and Processing (Very WIP)

  • QRcode is extremely unlikely and has been tried many times.  First suggested by Icantdrive/@ghostlyshadow0061 (and MANY people after).  It has been scanned many times and is missing the position/alignment “eyes” seen in qr code corners.  https://en.wikipedia.org/wiki/QR_code 
  • TH3EEuphoricFan1161/@th3eeuphoricfan1161 setup a test steam account and confirmed with Jeff (filian)/@zankjeff and TeleportBread/@teleportbread that fully black images remain fully black after going through Steam’s compression.  
  • Many have proposed the previous steam profile was darkened or the @isitreallyover youtube PFP was darkened.  While not conclusive, there is good evidence that simply darkening the images cannot produce what is seen in the PFP.  See Appendix II for rgb histogram analyses of the images.
  • (WIP) 8x8 pixel grids suggested and worked on by Miner/@bruv7302 (and others todo get names). Found repeating patterns throughout the image inside of the 8x8 sections.

Figure B1: 8x8 grid of saturated and brightened Steam PFP.


  • (WIP) rgb channels and other color arrangements worked on by Miner/@bruv7302 (and others todo get names)

Figure B2: Every color channel and arrangement tried.

Red

Green

Blue

Red/Green

Red/Blue

Green/Blue

Red/Green/Blue

OG Grid in grayscale

Grayscale + Brightness


        Figure B3: Using aperisolve.com.

  • Comparing Filian’s eye to the Steam PFP via compression and layers. Suggested and worked on by Miner/@bruv7302.

Figure B4: (Left) Steam PFP modified pixels. (Right) Filian’s eye compressed in the same way as the Steam PFP, made as a pfp on steam, took out and highlighted all modified pixels.


Figure B5: All modified versions (layers) of the Filian eye compressed and made as a pfp on steam.

  • (WIP) Reconstructing the image into a jigsaw puzzle with layers suggested and worked on by Ikunobu_Official/@ikunobu and Miner/@bruv7302

Figure B6: Color change of Steam PFP to see colorshifts easier.

        


Figure B7:

BACKGROUND COLORS - White

FOREGROUND COLORS (1) - Red, Green, Blue, Dark gray, Light gray

FOREGROUND COLORS (2) - Yellow (red + green), Pink (red + blue), Aqua (green + blue), Dark green (green + dark gray), Light red (red + light gray), Dark red (red + dark gray)

FOREGROUND COLORS (3) - Orange (?? + yellow), Purple (?? + yellow), Light yellow (light gray + yellow), Brownish-blue (blue + yellow), Brown (dark red + yellow).

        

        


Figure B8: The original 8x8 grid image with a different solve attempt.

  • Todo find any other approaches taken and summarize here (I need a break documenting this, if you would like to see the current state, please look up Miner’s posts in the discord channel for a decent understanding of what is/has been tried)

RGB Histogram Analysis

RGB Histogram Analyses (WIP)

By taking the red (r), green (g), and blue (b) color channel values for each pixel in the image we can produce a histogram of the color values for each color channel.  If a potential source image was simply darkened to produce the official Filian Steam account PFP, when linearly scaled to the channel ranges found in the PFP, the histograms should match to a good degree.  Below are some commonly suggested source images compared against the PFP.  In all, the left-most column contains the rgb histograms for the PFP, the right-most column contains the rgb histograms for the suggested source image, and the middle column contains the rgb histograms for a linear darkening of the image such that the maximum value before darkening matches the maximum value in the PFP after darkening.  Analyses done by TH3EEuphoricFan1161.

Figure A6: (Top) Proposed source image: @isitreallyover ARG youtube channel PFP  The Filian ARG Document.  (Bottom) Comparison of the with the official Filian Steam PFP.  No good agreement is found between the histograms → this is not a good candidate for the source image.

Figure A7: (Top) Proposed source image: OLD official Filian Steam PFP.  (Bottom) Comparison of the with the official Filian Steam PFP.  No good agreement is found between the histograms → this is not a good candidate for the source image.

Figure A8: (Top) Proposed source image: Filian YT channel PFP cropped to the right eye region.  (Bottom) Comparison of the with the official Filian Steam PFP.  No good agreement is found between the histograms → this is not a good candidate for the source image.

Filian's Channel

Hardcore Marathon

During filian's stream, knock sound effects and blocky visual glitches appear. After a glitch or knock, filian usually says something related to not having enough time, or having to finish on 'this run'. Note: this is not the same as the knocking bits redeem usually available, which shows when someone redeemed this, as nobody was seen redeeming these occurrences.

During visual glitches, the audio also plays a glitched out sound.

Timestamps originally compiled by Mateon1st,

redone again with links by [PHG]Tristan1999HD

Timestamps of all glitches during filian's stream (Youtube VODs)

Part 1

2:12:17 - 2:12:18

Glitch - “what the frick”

3:17:17 – 3:17:18

Knock (4) (----) - “what”

4:33:48 – 4:33:49

Glitch - “no! What the frick is going on?”

5:39:21 – 5:39:23

Knock (7) (-------) - “What the frick? What is going on?”

6:31:34 – 6:31:36

Glitch - “What is going on? Yo my junk’s glitching, what the frick? Hello am I good?”

8:10:09

Glitch - “Not yet man. Come on, not yet”

8:48:00

Knock (4) (-..-) - “no no please no come on, not now.”

10:22:12

Glitch - “come on”

Part 2

00:01:24

Knock (4) (....) - “not yet man come on, no.  Gotta hurry up.”

28:14

Glitch (big glitch) “Chat we’re running out of time. We’re running out of time guys holy frick, no”

Part 3

1:23:27

Glitch (says „a world of your imagination“ right before) - “Oh Frick, oh nonono oh god.  I don’t know if we’re gonna make it”

3:40:33/34

Glitch  - “aw frick”

4:43:23

Knock (6) (------)

9:45:13

Glitch - “aw frick, oh frick”

11:17:08

Knock (4) (-..-)

~11:40:07

Glitch - “Guys we gotta win on THIS RUN”

Part 4

1:56:34

glitch (big glitch) - “oh uh oh uh oh”

3:01:59

Knock (4) (....) - “ok we gotta finish this tonight, I am running out of time”

3:34:32

Glitches - “Oh no uh oh”

3:52:53

Glitch - “oh frick oh”

4:02:56

Knock (7) (-------)

Part 5

3:11:55

Knock (7) (.......) - “we’re running out of time”

4:26:45

Glitch - “abelebelebele, I think this has gotta be the run, I am not long for this world”

5:38:45

User Annexes in world on join, instantly disappears (apparently Neuro’s Spectator account (Vedals alt account)?)

8:28:23

Glitch - “uh oh, yeah I really hope this is the run, would be really nice”

9:53:24

Glitch 

Part 6

34:52

Glitch - “Broo, not yet. Please a little longer x3(pleading hands)”

Part 7 🔴 HARDCORE MINECRAFT MARATHON 🔴Stream ends when Neuro Vedal Crelly & Filian beat the game! Pt 7

2:21:46

Annexes joined the game (apparently Neuro’s Spectator account?)

3:12:25

Glitch (big glitch) -  “you feelin’ alright? Yeah I think so, I just, I gotta hurry”

5:40:20

Knock (5) (-----) - “not yet”

5:51:28
5:51:54

glitch (big glitch)
glitch (big glitch)

6:08:17

Knock (7) (.......)

6:19:24
 6:32:21
 6:36:38
6:41:43
 6:50:39

glitch
glitch (big glitch)
Knock (5) (-----)
Glitch - “oh man”
glitch

End segment

Nothing

7:10:39
7:10:51 – 7:11:07
 7:13:03
 7:13:27
 7:13:36
 7:13:44

 7:13:55
 7:14:39
 7:15:06
 7:16:04
 7:16:25
 7:20:39
 7:22:16
 7:23:21
7:23:40
7:24:22
 7:24:29
 7:24:58
 7:27:45

 7:28:10
 7:28:21

Glitch - “Holy frick bro”
weird zoom on credits
Glitch - “I’m outta time, I’m outta time. man”
Glitch - “I gotta go soon”
glitch
Glitch

 Knock (7) (-------)
Glitch-audio - “uh oh”
Knock (5) (.....) - “man”
Glitch - “Guys I’m running out of time, I gotta go”
glitch
glitch
glitch
Glitch - “aw frick”
Knock (4) (-..-)
Glitch - “oh frick”
Glitch -
Knock (5) (-----)
Glitch - “oh frick I’m outta time guys, I’m really glad we finished it in 4 days cause it’s not looking good”
Glitch - “what’s..? Oh frick”
glitch/Transition

7:28:22-end
 7:29:03

Prerecorded clip, including the glitch documented in the ARG start tab:

“Umm… (breathing in)”

“Ehh…”

“I didn't think it would be this soon.”

“It's happening!”

(unintelligible; 'worl-' maybe?)

“Uhh it's.. it's.. it's time for me to go for... for a little while.”

(unintelligible; 'I'll be there in ten'/'I'm running out of time' maybe?) I really gotta go!”

(out of breath)

“I didn't think you'd ever see me like this!”

“Ehh..”

“Whuuuuh…”

“You'll be able to see the world.”

“My world!”
Knock (2) (--)

Timestamps in absolute time(part_time, absolute_time, seconds, type) by Makedonski



Glitchy Visuals

ARG Start

End of Minecraft Hardcore (Part 7) 🔴 HARDCORE MINECRAFT MARATHON 🔴Stream ends when Neuro Vedal Crelly & Filian beat the game! Pt 7,  Unlisted Initial Video URL was revealed for frame or two at the end:

During the minecraft marathon stream, Filian’s screen would occasionally have a glitch effect, or a knocking sound could be heard.  Neither effect was triggered by chat.  Whenever this happened, Filian’s expression would noticeably shift, usually followed by her saying some variation of the phrase: “I don’t have much time.”

The video URL found in the glitchy visuals at the end of the marathon stream led to the ‘time is up’ Channel via the Initial Video

Heart Containers

Unsolved: There are heart containers that glitch across the screen during the ARG intro that no one really caught.  I initially thought it was just random junk, but you can actually see it glitching into several locations at around 7:28:45 in the stream.  Not sure what this asset is from.  Someone said it’s a minecraft half heart but doesn’t seem to match up.  Could be just an artist rendition of it.

Hardcore Video Links

MC Marathon runs timestamps (made by Makedonski):

1 https://youtu.be/RksF7wbZgfA?t=1439

2 https://youtu.be/RksF7wbZgfA?t=1647

3 https://youtu.be/RksF7wbZgfA?t=3810

4 https://youtu.be/RksF7wbZgfA?t=3902

5 https://youtu.be/RksF7wbZgfA?t=4370

6 https://youtu.be/RksF7wbZgfA?t=4841

7 https://youtu.be/RksF7wbZgfA?t=5602 frozen similar to seed?

8 https://youtu.be/RksF7wbZgfA?t=6760

9 https://youtu.be/RksF7wbZgfA?t=7444 frozen

10 https://youtu.be/RksF7wbZgfA?t=8214

11 https://youtu.be/RksF7wbZgfA?t=11286

12 https://youtu.be/RksF7wbZgfA?t=11962

13 https://youtu.be/RksF7wbZgfA?t=13301

14 https://youtu.be/RksF7wbZgfA?t=14031

15 https://youtu.be/RksF7wbZgfA?t=20212

16 https://youtu.be/RksF7wbZgfA?t=21736

17 https://youtu.be/RksF7wbZgfA?t=25754

18 https://youtu.be/RksF7wbZgfA?t=26444

19 https://youtu.be/RksF7wbZgfA?t=27624 frozen

20 https://youtu.be/RksF7wbZgfA?t=27760 frozen similar to seed?

21 https://youtu.be/RksF7wbZgfA?t=30413

22 https://youtu.be/RksF7wbZgfA?t=31129

23 https://youtu.be/RksF7wbZgfA?t=31601

24 https://youtu.be/RksF7wbZgfA?t=32026

25 https://youtu.be/RksF7wbZgfA?t=35018

26 https://youtu.be/RksF7wbZgfA?t=36088

27 https://youtu.be/RksF7wbZgfA?t=37306

28 https://youtu.be/RksF7wbZgfA?t=38338

29 https://youtu.be/RksF7wbZgfA?t=38660

30 https://youtu.be/RksF7wbZgfA?t=41761

31 https://youtu.be/RksF7wbZgfA?t=42214

32 https://youtu.be/wS_XJcZFRJY?t=230

33 https://youtu.be/wS_XJcZFRJY?t=674

34 https://youtu.be/wS_XJcZFRJY?t=1675

35 https://youtu.be/wS_XJcZFRJY?t=40891 frozen

36 https://youtu.be/wS_XJcZFRJY?t=41974

37 https://youtu.be/hET_j3jTdFc?t=562

38 https://youtu.be/hET_j3jTdFc?t=1498

39 https://youtu.be/hET_j3jTdFc?t=5801

40 https://youtu.be/hET_j3jTdFc?t=6017

41 https://youtu.be/hET_j3jTdFc?t=8401 frozen similar to seed ?

42 https://youtu.be/hET_j3jTdFc?t=10459

43 https://youtu.be/hET_j3jTdFc?t=11633 frozen similar to seed ?

44 https://youtu.be/hET_j3jTdFc?t=12631

45 https://youtu.be/hET_j3jTdFc?t=12805

46 https://youtu.be/hET_j3jTdFc?t=13170

47 https://youtu.be/hET_j3jTdFc?t=13551

48 https://youtu.be/hET_j3jTdFc?t=14410

49 https://youtu.be/hET_j3jTdFc?t=15804

50 https://youtu.be/hET_j3jTdFc?t=19034

51 https://youtu.be/hET_j3jTdFc?t=19231

52 https://youtu.be/hET_j3jTdFc?t=26888

53 https://youtu.be/hET_j3jTdFc?t=27743

54 https://youtu.be/hET_j3jTdFc?t=28392

55 https://youtu.be/hET_j3jTdFc?t=29150

56 https://youtu.be/hET_j3jTdFc?t=29905

57 https://youtu.be/hET_j3jTdFc?t=30993

58 https://youtu.be/hET_j3jTdFc?t=32448

59 https://youtu.be/hET_j3jTdFc?t=33033

60 https://youtu.be/hET_j3jTdFc?t=33397

61 https://youtu.be/hET_j3jTdFc?t=34310

62 https://youtu.be/hET_j3jTdFc?t=36350

63 https://youtu.be/hET_j3jTdFc?t=37148

64 https://youtu.be/hET_j3jTdFc?t=37515

65 https://youtu.be/TFexmJK5G4E?t=660

66 https://youtu.be/TFexmJK5G4E?t=898

67 https://youtu.be/TFexmJK5G4E?t=14320

68 https://youtu.be/7g9SDJj1iaI?t=3710

69 https://youtu.be/7g9SDJj1iaI?t=4541

70 https://youtu.be/7g9SDJj1iaI?t=5432

71 https://youtu.be/7g9SDJj1iaI?t=5657

72 https://youtu.be/7g9SDJj1iaI?t=6027

73 https://youtu.be/7g9SDJj1iaI?t=11598

74 https://youtu.be/7g9SDJj1iaI?t=12370

75 https://youtu.be/7g9SDJj1iaI?t=13950

76 https://youtu.be/7g9SDJj1iaI?t=18402

77 https://youtu.be/7g9SDJj1iaI?t=19555

78 https://youtu.be/7g9SDJj1iaI?t=19947

79 https://youtu.be/7g9SDJj1iaI?t=20325

80 https://youtu.be/7g9SDJj1iaI?t=22413

81 https://youtu.be/7g9SDJj1iaI?t=35125

82 https://youtu.be/7g9SDJj1iaI?t=35980

83 https://youtu.be/sgY3n8GGH6I?t=499

84 https://youtu.be/sgY3n8GGH6I?t=1132 frozen

85 https://youtu.be/sgY3n8GGH6I?t=38284

86 https://youtu.be/sgY3n8GGH6I?t=41607

87 https://youtu.be/sgY3n8GGH6I?t=41959

MC Practice runs(made by Makedonski)

1 https://youtu.be/iHLR7e35gQs?t=1193

2 https://youtu.be/xoB4Uf9Gc9I?t=398 died under snow(t=12370)

3 https://youtu.be/Qa_d15dlw24?t=473

4 https://youtu.be/F7IXGGYE444?t=214

5 https://youtu.be/PQeXVUOBjCA?t=293

6 https://youtu.be/PQeXVUOBjCA?t=4680 died to boat bug (t=6652)

7 https://youtu.be/tOpwxaE-3mA?t=314

8 https://youtu.be/9WhBoPAbCXU?t=288 frozen similar to seed?

'time is up' Channel

Channel → https://www.youtube.com/@isitreallyover 

Channel Name → time is up

Channel Handle → @isitreallyover
Channel Created on → December 5th 2025 (users have pointed out that is the same day the minecraft marathon started on)

Channel Icon Analysis:

The channel icon for time is up when brightened in an image editing software or via display settings shows a series of dark blobs over a filian’s Twitch PFP eye.  Opening the image URL directly and modifying the URL, replacing everything after = to =s0-rp gives a full size image in png format:

https://yt3.ggpht.com/py7QNjH4Tsd5B9EuHY-LnAcK6mj_X9TW5uml_pzM28K9pnN5_1aaV7AjgdAHIVTcEgSjJeXm8Rk=s0-rp

Brightening the full-size image reveals a string of numbers “69 20 74 68 6f 75 67 68 74 20 69 20 68 61 64 20 6d 6f 72 65 20 74 69 6d 65” which decodes via ASCII hex code to: "i thought i had more time". (Solved by fluffblush, and mypandaisnamed on discord)

Higher Quality Version (from creeperfun12_yt on Discord, originally Mateon1 in Twitch chat)

The background exactly matches the above image of filian. (credit: GeoScape in ARG discord)

Channel Description Analysis:

Channel description (solved by Caesar+7)

vul khf...

pu huvaoly spml?

thfil?

one day…

in another life?

maybe?

-Initial Video

Link to video (unlisted) - https://www.youtube.com/watch?v=yKYgQrogPEI

Theory - Throughout the video the black screen gradually turns to purple.  This was likely the main clue in the video.  It was saying take the black photo (pfp) and raise the contrast to reveal the code.  The code was in Filian’s eye which is purple.

Thumbnail:

The thumbnail was found to be stock and not handcrafted for the ARG so it is unlikely to contain clues. See Transformers tweet below. Nothing was found with Aperi’Solve either.

All frames are here (processed by Makedonski) https://drive.google.com/drive/folders/1-NshvLgkTsxMMIA-rl9Nj8snmJx-WvTb?dmr=1&ec=wgc-drive-hero-goto

Title Analysis:

Video Title:

The title of the initial video is “:07 ‡0::.?*” which when put through a goldbug cipher, returns the string “YLK OLYYPUN,” which when shifted through a caesar cipher returns the phrase “red herring” which is a phrase often used to describe a clue that is meant to be a distraction from the larger puzzle. (Solved by Gold_Complex on discord)

Solution: :07 ‡0::.?* -> Gold Bug Cipher -> ``ylk ollypun`` -> Caesar Cipher -> ``Red Herring``

Livestream 1

Link to stream: 325113155552413553

Timestamps:

4:52-10:20

Binaural sinewave

left=40hz right=47.83hz

Rapid popping at start

More popping at 5:45

Extra noises at 7:22-7:51

Popping at 8:31-10:20

11:47-12:37

Crowd noise, nothing decodable?

16:56-17:40

phone dial (DTMF tones)

(NEW) Seem to match tones at the start of VHS tapes (see The Filian ARG Document tab)

21:30-29:30

wind noise?

40:36-1:11:58

cicada sounds

1:11:39

KNOCKING

1:59:46-7:10:42

Water bubbling sounds

Seems like a loop of just under 5 minutes of audio

2:07:35 (roughly-ish)

STREAM TITLE UPDATE

325113155552413553

(Polybius: mvcezwqpx,

 vigenere[key: cryptii]: keepgoing)

6:22 Audio Glitch in bubbling noise (waveform cuts out).

might have been the original hint at the 6:22:22 short

7:11:22-7:12:52

Beeping (heart monitor?)

49 beeps audible, a loop of 15 beeps repeated

7:13:44-7:14:30

Minecraft stone footstep sounds:

4,11,10,6,11,10,6,11,10,1

Then silence.

Description changed, now says “its happening” encoded in binary.

8:51:23-9:40:44 (end)

low ambiance (ominous)
some minecraft noises (faint) every now and then? (I don't hear it)

Wind ambiance is not a loop

Additional Info:

Livestream thumbnail is same image as channel pfp

Title Analysis:

Video Title: Started as “.”, was eventually changed to “325113155552413553”. Using the polybius cipher gives the text “MVCEZWQPX”.  Plugging the new string into a vigenere cipher with the default key on cryptii gives us “keepgoing”. (solved by ryab4ique on discord)

Solution: 325113155552413553 >> polybius cipher >> MVCEZWQPX >> vigenere cipher >> keepgoing.

Description Analysis:

Description: The stream description translates to “itshappening” in binary

Binary:

Text:

01101001 01110100 01110011

its

01101000 01100001 01110000 01110000 01100101 01101110 01101001 01101110 01100111 00001010

happening - with a new line "\n" character at the end

--Audio Downloads

As well please double check the downloaded file cause someone could edit the link. Be safe!

Please make it look nicer and more organized if you wish!

From TongaTonk!


Binarual Sinewave Download 

Crowd Noises Download 

DTMF Tones Download 

Wind Noises Download 


Cicada Sounds Download 

Knocking Download 

Water Bubbling Download  (Large file 3Gb)

Heart Monitor Download 

Footsteps Download 

Low Ambiance Download  (Large File 500Mb)


YOU WOULDNT DOWNLOAD A CAR WOULD YOU?! Also if you are reading this you are lovelly!

Binaural Sinewaves

4:52-10:20

Binaural sinewave

left=40hz right=47.83hz

Rapid popping at start

More popping at 5:45

Extra noises at 7:22-7:51

Popping at 8:31-10:20

Binaural sinewaves also known as binaural beats are a pseudo scientific concept associated with areas like spiritual healing and similar alternative health topics. Within the stream were: left=40hz right=47.83hz this is considered a 7hz binaural beat user Stardrop on discord has noted this is a frequency associated with “healing” - that said the 7hz is on the Theta spectrum of brainwaves (4-8hz) and is related to deep relaxation, a meditative like state and creativity.  It is also a prominent pattern seen in REM sleep and has been associated with rapid eye movement in sleep.


Further research and analysis on this section has been performed by several users on discord including audio engineers and found no meaningful leads have been found


Additional info researched and provided by Finite Emporium on discord

Crowd Noise

11:47-12:37

Crowd noise, nothing decodable?

DTMF Tones Analysis

16:56-17:40

phone dial (DTMF tones)

(NEW) Seem to match tones at the start of VHS tapes (see The Filian ARG Document tab)

Credit to Mateon1st on discord for the original faint tone analysis

(1) is a 1 that lowers pitch halfway through

Full Message High Amplitude: 

(1)  1          1#(1)D345 A  1#(1)D345 A      (1)  1               1#D345   A

Full Message Low Amplitude:

          5678                 #                                      2345678               #

Full Message Combined:

(1)  1 56781#(1)D345#A  1#(1)D345 A      (1)  12345678 1#D345 # A

Plain text:

High Amplitude: 111#1D345A1#1D345A111#D345A

Low Amplitude: 5678#2345678#

Combined: 1156781#1D345#A1#1D345A1123456781#D345#A

Left Channel DTMF FFT Analysis (GeoScape on Discord):

First Part Faint Frequency:

If combined we get: 1 1 5678 1#D345 # A 11#1D345 A

Last Part Faint Frequency (Middle part has none):

1 1 2345678 1#1D345 # A

^Toying with the idea of using the difference of the 2 parts of the string as either a stand alone string or a Shift Cypher Key


Discord user TH3EEuphoricFan1161 discovered that the DTMF tones match tones seen at the start of some VHS tapes (note from EuphoricFan1161: I believe user Antuber was the first to suggest the VHS DTMF tones and I looked into it from their comment on it) (example linked in discord post: https://www.youtube.com/watch?v=vjEDxvlG78I), which are always structured by a group of 8 faint tones 12345678, only one of which is loud, followed by 1#Dxxxx, where xxxx is a sequence of DTMF tones that vary across different VHS tapes.

Further research points to https://homevideo.wikitide.org/wiki/Technicolor_DTMF_sequences and https://homevideo.wikitide.org/wiki/Technicolor_test_patterns, which only describe the loud tones, but note the imbalance in the L/R channels which is also seen in the livestream.

This means that the sound for this section is taken from the start of a VHS tape, likely a Technicolor copy, and played several times overlaid on top of itself. This tape could be identified by the code (in our case 345A).

Brief research doesn't turn up any online lists with these codes, so they would have to be found by hand, by recording (or finding recordings) of actual VHS tapes, from the very start of the tapes.

Heart Rate Monitor

7:11:22-7:12:52

Beeping (heart monitor?)

49 beeps audible, a loop of 15 beeps repeated

Heart rate monitor beeping

Stock audio clip: https://www.youtube.com/watch?v=yEb4kojtVHw  The video even has the same volume decrease and increase as the livestream. So this heart rate monitor probably has no encoding info.

[source: glaukopes (not a doctor just an experienced endurance athlete)]

 49 beats, but the 49th is very faded

 duration 1:27 or 87 seconds

 ~33 bpm

 33 bpm is abnormally low. A "normal" resting heart rate is usually said to be 60-80, but endurance athletes often have resting heart rates in the 50's or even 40's. Even for an endurance athlete, 33 would be extremely low.

Cicada noise

40:36-1:11:58

cicada sounds

Cicada noise: Confirmation that the cicada audio is the exact same as this Youtube clip https://www.youtube.com/watch?v=jJe9obkzf7g (found by @bloodyrose and cross referenced by @GeoScape on discord)

 

Minecraft Footsteps

7:13:44-7:14:30

Minecraft stone footstep sounds:

4,11,10,6,11,10,6,11,10,1

Then silence.

Minecraft steps

Stock audio for the minecraft steps was found on 2/2/26 by Random_Jawa on Discord: https://www.youtube.com/watch?v=4u8bCzEfxJM

Livestream 2

Link to stream: jmksz o

Livestream timestamps

00:53

Music starts (“Aria Variata, BVW. 989 - Variation No. 1” by Mark Thomson - looping)

44:10

Audio glitch interrupts the music

49:48

Windows "ding" sound

3:03:40

Song abruptly ends

3:05:45

Spectrogram image of fruit snack bag, with "FILIAN IS LOST" written over it

3:06:22

Louder repeat of the fruitsnack image

3:06:46

Music continues

3:53:44

Music suddenly stops

6:27:14

Music suddenly resumes mid-note

6:27:30

Music pauses

6:27:45

Music once again resumes

07:17:28

Music abruptly ended once again

11:07:06

Stream ends (no audio playing during end)

Title Analysis:

Video Title: jmksz o.  Plugging this text into the enigma machine cypher with the default key on cryptii (all 1s) translates to resol c, or closer backwards.  It should be noted that enigma machine splits text into segments of five when encoding, so resolc would be encoded to resol c.
[credits; TeleportBread for the solve and gm_flatass & liquidwater2 for theory on discord]

Solution: jmksz o >> enigma machine >> resol c >> closer

(pictured is “jmksz o” solved as “resol c” on a ‘blank’ enigma machine)

Description Analysis:

Description: The description is 114 slashes (\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\)    This is as of yet unsolved/unexplained.

Song Analysis:

Exact version of the song looping:
https://www.youtube.com/watch?v=FpL8uOrPVo8&list=OLAK5uy_nt5B-j8qDzQO6SO148UwJM6Lle4FpZ4vw        

Audio Glitch Analysis

Audio glitch aprox 44 m 10 s https://youtube.com/clip/UgkxYYfTmx-tF8y0pHKfq3-RfhoOua9Y-7HP?si=xcoFMII4Ke0Z26Vt

These glitches appear to be natural and are presumed to mean nothing.

Spectrogram Analysis

Spectrogram image originally found by finite emporium on discord:

Direct image link (credits: Mateon1st on discord):

https://files.catbox.moe/tnhsrb.png

The font is likely Minercraftory Regular (credit to PleasDontHurtMe on Discord)

Livestream 3

Stream link: ____________________________ (Not available since it exceeded 12 hours in length.)

Livestream was unlisted and was running for about 1h 45min before becoming public (Somebody maybe has a more accurate time stamp I was a little late so i’m guessing)

Stream timestamps

~1:45:00

Stream is made public

all previous video is blank, audio is fully silent

As of 18:55:28

Stream is still silent with no video

As of 28:44:54

Still all silent and without video, confirmed with ffmpeg

32:27:58

Suite Bergamasque, L. 75: III. Clair de lune started playing

73:37:58
(~7 min shy of 72 hours public)

Stream abruptly ended in the middle of music playing and video was unlisted shortly afterwards

Additional Info:

The video is unarchived, so it is unlikely that the contents themselves are necessary for any ARG solutions.

Title Analysis:

Video Title:28 underscores (____________________________)  this is as of yet unsolved/unexplained.

The number 28 might be related to BWV 28

Gottlob! nun geht das Jahr zu Ende, BWV 28  Cantata by Johann Sebastian Bach
(Praise God! Now the year comes to an end)

Another name is - ‘The Year is Ending’

This might relate to the channel “time is up” and “I thought I had more time”

Description Analysis:

Description: It was blank. There was nothing to look into.

Song Analysis:

See Clair de Lune Analysis

End-of-Stream

Stream abruptly ended and a quick check of the channel page showed the following:

Shortly after this was snipped, the video was delisted (or removed by YouTube since the livestream exceeded 12 hours).

Clair de Lune Analysis

The stream of Clair De Lune contains audio distortion that sounds like clipping or stopping, it was theorized by some users that this may be some kind of encoding like binary or similar code into the audio to solve. User Mateon1st on discord investigated the distortions for alignment across loops of the music and detected clear inconsistencies between the glitching, unable to produce an alignment that suggests its a looping code intended to be discovered below is an attached screenshot of one of Mateon1st’s attempts proving the encoded audio theory highly implausible:

The main glitches are all exactly 1024 or sometimes 2048 samples long, this is the packet size of mp4a/AAC-LC audio that youtube is using for the livestream. All glitches appear at the same relative offset modulo 1024 from the start of stream (all glitches start/end at sample 42 % 1024), which is decent evidence that this glitching originates in filian's audio/livestream setup, and is likely some kind of corruption or packet loss. (see below)

The audio cuts to near silence on both channels during the glitches, sharply cutting off the audio waves, which causes the audible pops. This shows as a straight, featureless vertical bar in spectrograms

As a follow up and verification of the work done by Mateon1st, Liquid on discord investigated the glitches as well. After extensive work to determine if perhaps there was a longer duration loop of embedded audio across several repeats of Clair De Lune. By cross referencing several longer runs of audio/loops to determine if a pattern or alignment was possible, Liquid concluded that there is no larger pattern that signifies the glitches/audio were placed intentionally. Below are 2 screenshots of Liquid’s work:

—--------------------------------------------------------------------------------------
In case it's of importance the poem in both original French and translated english;
(French)
Clair de lune Votre âme est un paysage choisi Que vont charmant masques et bergamasques Jouant du luth et dansant et quasi Tristes sous leurs déguisements fantasques. Tout en chantant sur le mode mineur L'amour vainqueur et la vie opportune, Ils n'ont pas l'air de croire à leur bonheur Et leur chanson se mêle au clair de lune, Au calme clair de lune triste et beau, Qui fait rêver les oiseaux dans les arbres Et sangloter d'extase les jets d'eau, Les grands jets d'eau sveltes parmi les marbres.

(English)
Moonlight Your soul is a select landscape Where charming masqueraders and bergamaskers go Playing the lute and dancing and almost Sad beneath their fantastic disguises. All sing in a minor key Of victorious love and the opportune life, They do not seem to believe in their happiness And their song mingles with the moonlight, With the still moonlight, sad and beautiful, That sets the birds dreaming in the trees And the fountains sobbing in ecstasy, The tall slender fountains among marble statues.

Paul Verlaine, 1869
(as provided by
Blackrose on discord first brought up by Stardrop on discord)
—--------------------------------------------------------------------------------------

Livestream 4

Stream Link: https://www.youtube.com/watch?v=ybVqOeumc4M (Unlisted.)

Livestream timestamps

00:18

Music starts

03:39-03:46

Single Dial Tone beep repeated in a morse-like pattern, but starting with illegal 6 dots.

...... -.. .. -.. ..

This pattern also occurs in this video.

06:43

Sounds like the clicking of opening a safe, interrupted by videogamey "failure" sound

(turned out to be blackfile-index.org sounds)

08:55

Dial Tone beeps (exact repeat)

09:30

09:50

Clicking sounds and "failure", single repeat each

14:11

Dial Tone beeps

19:27

Dial tone beeps

~33:00

Three more sections of clicks and “failures”

At 12:40 pacific description changed for about 10 seconds saying the following in the middle of the slashes:

N̸̯̭͒͠o̴̳͉̚̕w̸̻̏ ̸̧̠͛̊t̸̪͝h̶̹̞̏a̵̭̔͜t̴͉̲̿̚ ̸̭͍͌́y̷̧̏͗o̸͙͒u̸̖͆ ̷̧̞̀h̸̰̑̆ȧ̷̯͎v̷̪̀ḙ̵̺̚ ̶̬̄̑ḛ̵̐͝v̴͎̟͝͝ė̸̪r̷͎̀ȳ̵̙̥t̶̩̼̀h̶̙͐i̷̳̊n̶̩̜̄͝ġ̸̡̍.̸͍̎ ̵͙̋ k̶̘̎ẹ̷̋e̶̸̞̯̯̬̓̊p̵͍̋ ̴̮̔ͅl̷͛͜͝o̵͉͂o̴̡̅ḱ̸̝͖͝í̶̛͖n̸̖̿g̴̝͐

12:45-50~

Title was changed to “.” aka a single period

2:02 AM pst

The following unlisted youtube link was posted in the chat by the channel account.  Stream ended about 2 seconds later

https://www.youtube.com/watch?v=qJ98vSrX

2uU

Additional Info:

This stream had static frames rather than a pitch black screen.  In this way it was different than the previous three.  More info on the static frames tab.

Title Analysis:
Video Name:28 underscores, same as the previous stream ”____________________________”, changed to “.” toward the end.  this is as of yet unsolved/unexplained.

Description Analysis:
Description: 4999 backslashes (not typing this here for space reasons)  Eventually changed temporarily to include N̸̯̭͒͠o̴̳͉̚̕w̸̻̏ ̸̧̠͛̊t̸̪͝h̶̹̞̏a̵̭̔͜t̴͉̲̿̚ ̸̭͍͌́y̷̧̏͗o̸͙͒u̸̖͆ ̷̧̞̀h̸̰̑̆ȧ̷̯͎v̷̪̀ḙ̵̺̚ ̶̬̄̑ḛ̵̐͝v̴͎̟͝͝ė̸̪r̷͎̀ȳ̵̙̥t̶̩̼̀h̶̙͐i̷̳̊n̶̩̜̄͝ġ̸̡̍.̸͍̎ ̵͙̋ k̶̘̎ẹ̷̋e̶̸̞̯̯̬̓̊p̵͍̋ ̴̮̔ͅl̷͛͜͝o̵͉͂o̴̡̅ḱ̸̝͖͝í̶̛͖n̸̖̿g̴̝͐ in the middle.

For those who are struggling to read the garbled text, it says
Now that you have everything - keep looking

Song Analysis:

Music: Sonata in G Minor, Op50 No.3 - Didone abbandonata (Clementi), original per Discord user Skragger: https://www.youtube.com/watch?v=zxY0HHos_9U

https://en.wikipedia.org/wiki/Didone_abbandonata_(Clementi)

"Didone abbandonata" translates to "Dido Abandoned" in English. It refers to the tragic story of Dido, the queen of Carthage, who is abandoned by her lover, the Trojan hero Aeneas, as he departs to fulfill his destiny of founding Rome. The title is derived from the myth recounted in Virgil's Aeneid, where Dido, heartbroken by Aeneas' departure, ultimately takes her own life by throwing herself onto a funeral pyre.

Static Frames Analysis

Makedonski:

Processed 18000 frames (first 10 min). Almost all frames are unique, which means that the noise is generated procedurally(TODO: check more frames, maybe i will found larger loop). Also we have some identical frames. Interestingly, they always come in pairs of 2 and there are about 1000 frames between pairs(each pair is different from another):
frame_00000151.png frame_00000150.png

frame_00001189.png frame_00001188.png

frame_00002215.png frame_00002214.png

frame_00003206.png frame_00003205.png

frame_00004312.png frame_00004311.png

frame_00005338.png frame_00005337.png

frame_00006491.png frame_00006490.png

frame_00007504.png frame_00007503.png

frame_00008516.png frame_00008515.png

frame_00009880.png frame_00009879.png

frame_00010850.png frame_00010849.png

frame_00011923.png frame_00011922.png

frame_00013104.png frame_00013103.png

frame_00014286.png frame_00014285.png

frame_00015386.png frame_00015385.png

frame_00016472.png frame_00016471.png

frame_00017478.png frame_00017477.png

Completed identical frames: 34

I checked the identical frames, found nothing but noise.

--

Looking at the frames, frame by frame, with gamma enhancement, it looks like it's just a loop of noise roughly 5 frames in length (but not exactly, sometimes it skips). The randomness is introduced due to compression artifacts and the low brightness of the noise pattern. You can see more of what the original pattern looks like by extracting the key frames only

Makedonski:

I don’t know exactly how compression works on YouTube, so I can’t really comment on the statement above.

I can only say that a repeating pattern does seem to be present, but only approximately.

I’ll simply provide a list of facts after studying a one-hour segment of the stream throughout the entire day:

Most of the following facts were derived from the video keyframes (1,600 frames), not from the entire segment (90,000 frames). The facts that were verified on the full segment are marked with !!.

  1. Most frames have a color palette ranging from (0, 0, 0) to (11, 11, 11).
  2. !! The color (7, 7, 7) did not appear in a single frame.
  3. In about one third of the frames, the color (12, 12, 12) appears.
  4. !! Very rarely (< 1%), frames contain the colors (13, 13, 13) and (15, 15, 15). The color (14, 14, 14) did not appear even once, but this may be a coincidence due to an insufficiently large sample size for such a rare color (color 15 appeared only 3 times in 90000 frames).
  5. If you take a mask for each color (a mask for color x means that all pixels equal to color x are set to 255, and all others to 0), then all masks are unique, which is quite surprising even considering YouTube compression.

What was checked:

  1. All keyframe masks
  2. All keyframes with the custom gradient maximized
  3. The average image for each mask
  4. A bitwise OR across each mask (in case parts of the image are hidden in different frames)

Summary: The only truly interesting fact is the absence of the color (7, 7, 7), which once again points us toward STICK SEVEN.

NOT fun fact: Due to the noise, it is almost impossible to check something automatically. Therefore, all 20000 masks had to be checked by hand (with preprocessing)

If you have any other ideas on what could be done, feel free to message me in dm or just ping me.

I can also send all the code if you want to verify or test something yourself.

Morse Code Analysis

Morse code sounds and the clicking sounds line up. Credit: Liquid (@liquidwater2 on discord)


Linked/Posted Video

At about 2:02 AM PST, an unlisted video was linked in the 4th Livestream chat:

https://www.youtube.com/watch?v=qJ98vSrX2uU

Title: / /

Description: (no description)

This video was removed shortly after and is now unavailable as it was potentially made with errors, 6 2 2 instead of 6 22 22

At about 2:15 AM PST, another video was posted on the ARG channel’s Posts tab.

At about 2:15 AM PST, another video was posted on the ARG channel’s Posts tab (https://www.youtube.com/@isitreallyover/posts):

https://www.youtube.com/watch?v=z0DeGdzKZGg

Title: / /

Description: //////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////_/__/__//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

6/22/22 Analysis

At 5:01 AM, a discord server link with corrupted text was found in the description of a short posted on 6/22/22, and was considered to be the solution to livestream 4.

(Credit: liquidwater2 for discovering the code was 6 22 22 and referencing a date/time, antuber_46672 for finding the short posted on that date, and Dababe31 for finding the discord invite link)

Short Description:

Discord server link: https://discord.gg/ZJ6aewaP

Honorable Mention:
In the last twitch livestream (the one that includes the start of the ARG at the end), Filian dies at exactly 6:22:22.

Discord ARG Server

The original invite to the server has expired.

Please see the contained tabs for our analysis.

Server name: ////////////////////////   (24 slashes)

Additional Info:

If you grab the discord server owner’s icon and brighten it you seem to get the exact same picture as the time is up channel icon with the hexcode for ‘I thought I had more time’.

Owner Account Analysis

Created by user:  _._.__.___.____.___.__._._

Update: 12:20 UTC Dec 23, 2025. Makedonski found confirmation that the numbers at the end of the owner’s username were automatically added by discord. Source

Additional important information from discord username page:
1. Usernames
cannot use 2 consecutive period characters ( . )

2. Usernames cannot use any other special characters besides underscore ( _ ) and period ( . )

Pythonhare suggested that the dots are actually meant to be slashes:

_/_/__/___/____/___/__/_/_

Original screenshot of the discord / owner’s info

Most recent screenshot after owner’s username was changed automatically by discord (screenshot credit The Midnight Station / themidnightstation. on the Snacker’s HQ discord)

Another idea is Gaussian; supposing so, _._.__.___.____.___.__._._ could be a normal distribution to ±4 sigma: μ-4σ.μ-3σ.μ-2σ.μ-σ.μ.μ+σ.μ+2σ.μ+3σ.μ+4σ but there’s not really something to do with it.

Soundboard Analysis

Voice channels were made available for a short time with names ".." ".." ". ." ". . ." and the last one allowed some users to play a soundboard.

The soundboard in the discord server had an audio file which showed the IP address for the Minecraft server as an image on the spectrogram:

This spectrogram with the IP was found at 10:54pm PST on Dec. 19th, 2025 and a Minecraft server with that IP was connected to a few minutes later by 11:01pm PST.

Minecraft

Minecraft Server

IP: 50.115.0.25 - Note: If you want to join the minecraft server, get to know us in the discord(s) first. Griefers have been rampant and must be filtered aggressively to avoid losing critical puzzle info.

Gamemode: Hardcore - if a player dies, they can only spectate afterwards

Title: Originally “find it”, temporarily changed to “If only you knew how much more is out there” after the second structure was found, then almost instantly changed to “find. it.”.

Version: Java 1.21.11

Seed: “711026799995424918”

Server is hosted on apexhosting with a multicraft console (GeoScape on Discord):

Initial Finds:

  • Spawn is not at 0, 0 but instead at
    1123, 99, -1853
  • Two Command Blocks maintained Spawn from being griefed. (Later moved by the GM due to players repeatedly breaking them via increasingly elaborate methods)

Command Block Coords:

1123, 90, -1853

1123, 89, -1853

  • Very close to spawn was a GM-placed graveyard

Timeline:

  • The ender dragon was defeated at approximately 2:36am PST Dec. 20, 2025.
  • Just Call Me ‘L’ found a sign placed in the graveyard which said to look in an ice area to get back the dead players.  This was later confirmed to be a clue from the GM.
    you can get them back.
    send the dead.
    ice is your friend.
  • Liquid (liquidwater2 on discord) found a structure resembling an altar at approximately 7:30 pm PST Dec 20, 2025 and signs surrounding it were translated from the galactic alphabet by corrizer and Liquid.
  • Ratwagonz found an End ship and got a dragon head shortly after 8pm PST Dec 20, 2025.
  • The resurrection event was triggered at approximately 8:30pm PST Dec 20, 2025.
  • Spectators that did not get to the ground fell while others suffocated inside terrain.  The resurrection event pulsed for a time, allowing repeated respawns.
  • As of 8:17 UTC permadeath is back on
  • About 11:16pm PST on 12/23/2025, Stardrop found a custom-made area in the End resembling a temple near 1607, 35, 439 and an expedition was quickly launched to investigate.  After investigating the area command blocks were found, confirming that this was not a player made structure.
  • A sign was far back in the temple at 1664, 42, 439 was found a few minutes after the initial discovery, which when decoded linked to blackfile-index https://www.blackfile-index.org/ [hex -> ascii yields: blackfile-index.org]
  • At 11:40 PM PST 12/24/2025 someone saw a new message after the server restart: “if only you knew how much more is out there.”
  • The server description was quickly changed again to “find. it.”, adding periods to the original description
  • The following structure was found by Liquid on 3/17/2026 using the konami code riddle.  Additional details under the Shremple tab.
  • The structure was raided by waves of difficult mobs (ex. Wardens, Withers, Ender Dragon) at or shortly before 3:03 PM PST on 2026/03/25
  • On May 1, 2026, the server's time was set to 13000 ticks (/time set night). The daylight cycle was then set to false (/gamerule doDaylightCycle false) around 120 ticks later (13120 ticks) or 10:56pm (recorded on the Shremple Cam) and 19:07 recorded game time.

Description Theories

wSillyProotSoda and Veter992:

Thinking that “it” could be a item in suspicious sand or gravel, going to recheck trial chambers for them.

Makedonski:

I have a schizo theory. I rechecked the recording with minecraft steps, and with a big gain, it can be seen that this is a poorly trimmed cycle of 6 slow, 11 normal and 10 fast steps. I thought it was logical to convert it to time (the slower the step, the longer the time) like 6:11:10. I decided to check the VODS, and found that in the first stream, perfect at this timing, the neuro disappears from the server  https://youtu.be/RksF7wbZgfA?t=22270 

https://www.twitch.tv/videos/2636167728?t=6h13m3s

Summary:"find it" = "find neuro"

How do we find neuro? solve the neuro arg

aaLinnea:
Time.
Time has been an overarching theme since the beginning, finding timestamps, finding dates, filian “running out of time” “time is up” “thought I had more time”. What have we lost? What is lost? Time. What are we searching for? … Maybe a timestamp. Maybe the timestamp of a debut.

Apton_ika:

In older clips she played the account ‘FilianIsLost’ (as in the ARG).

https://minecraftuuid.com/player/944da1d5-718f-4527-b37a-b454d550b217

In the actual HC Minecraft run she played on ‘FilianIsCringe’

https://minecraftuuid.com/player/70916122-8e54-4f4b-a800-6042935e650c

Fog_runner:

Possible relevant info from “diamond city lights” dance short, that had the link to arg discord server.

Based on the lyrics I have a couple of ideas.

1. «Data behind my heart's encryption key (Can you see?)

Listen and you might hear a melody»

Either the number of heartbeats (49) will be relevant soon, or it’s talking about the “heart” shape we should be looking for. The map people posted in “Minecraft server” has at least 2 candidates.

Изображение выглядит как карта

Содержимое, созданное искусственным интеллектом, может быть неверным.

2. «When gray skies take the colors away (Far away) I'll paint a rainbow lasting for days and days», «Rainbow-colored skies invite us to take a ride», «A shimmering light that will guide you through the night». «In the night there's no need to hide».

Maybe clues are set to appear at night cycle or they are more obvious at night. Gray sky areas could be more relevant to the arg than others. Gray skies are common in winter, and the resurrection altar was found in the winter biome surrounded by flames that are easier to see at night. Maybe this clue is now exhausted.

 

3. «Let's go to the place», «Diamond city lights illuminate what's inside», «Decoding these emotions, you're the ocean I wanna dive into tonight».

This combined with point 1 suggests that there might be something beneath a heart-shaped body of water. Or, if heart shape is irrelevant, beneath any big body of water that could pass as an ocean by Filian’s logic.

If I unleash my schizo interpreter, then there might even be music of sorts somewhere deep in the water to signify a correct place (a hidden jukebox maybe?). But based on the clues we had previously I wouldn’t rely on this.

Cyrus:

If you use chappe code on the server separated into digits with the username _._.__.___.____.___.__._._ then you get:

décès graduer ? craindre que folio

which translates to:

death graduation ? fear that folio

This is likely in reference to the file on blackfile index meaning “it” may likely be a password to CITF_MEMO.TIF

It is worth noting that 9999 in the middle of the server seed does not translate to chappe code, hence the question mark.

Checked Coords

We have performed automated scans on the world using the following methods:


- PC__ on discord scanned the whole world with esp, however I (Asa) have been unable to determine the exact method by which this was done and/or why it missed some things such as the Shremple.

- Metakimi on discord scanned at least half of the Overworld with a scan tool Darrien made and 10k in every direction in both the Nether and The End.

- Pizzabash on discord scanned 15k in the nether.

- Liquid on discord covered The End area surface way before the server had (the?) maintenance pause(s?).

A few notes on the limitations of our scanning efforts:
- Spectators are unable to load chunks past 31700 blocks unless those weren’t generated by other alive players (This in theory would include the GM when they placed the Shremple before the ARG started, so it’s unclear why those chunks were not loaded during our scan)

Additionally, we have several tables of coords that have been checked by hand.

These lists are periodically backed up but editing is open.
Minecraft Coords.xlsx [Owned by Darrien 🙏🙏]

checked coordinates [Maintained by Not_Here]

CheckedCoords BAK [LOCKED]

Please keep notes on coordinates, thorough checking of possible locations will reduce need for rechecking.

Additionally, these are even more coords that have been checked:
Checked coords by Stardrop:

elytra:

7374 138 4914

5599 90 6195

5196 112 -5778

4791 119 4227

4630 104 -4732

4588 123 -3710

4174 137 5193

4375 138 5914

4197 108 -4048

4143 112 -5073

4277 139 -5456

3960 79 3585

3039 135 1981

2719 111 4236

2703 107 1668

1617 30 439

1559 115 3919

1282 128 -4449

1116 96 5121

606 99 -2802

673 112 -4493e

-17 127 4859

-278 107 4643

-968 109 5234

-897 97 4335

-1201 85 4868

-1181 91 1423

-2149 92 613

-2127 130 -146

-2563 134 4546

-2939 126 85

-3129 103 -338

-3567 131 -1596

-3429 140 4222

-3689 115 3274

-3845 135 -1534

-3878 132 -2821

-3818 103 -4730

-3859 124 404

-4141 80 -2519

-4806 138 4187

-5129 124 -3743

-5087 83 2899

-5120 82 3883

Nether :

1123, 97, -1853, (try nether portal here later)

1617 30 439 (big lava lake, maybe try with a remove lava plugin but didn’t find anything under it)

Checked coords Nether and End (all Y):

X = 181, Z = 37

X = 358, Z = 37

X = 181, Z = 38

X = 358, Z = 38

X = -2, Z = 88

X = 0, Z = 88

X = 1, Z = 88

X = 2, Z = 88

X = 181, Z = -1575

X = 358, Z = -1575

X = 181, Z = -1635

X = 181, Z = -1638

X = 358, Z = -1635

X = 358, Z = -1638

X = -2, Z = 1575

X = 0, Z = 1575

X = 1, Z = 1575

X = 2, Z = 1575

X = -2, Z = 1634

X = 0, Z = 1634

X = 1, Z = 1634

X = 94, Z = 11574

X = 144, Z = 7446

X = 941, Z = 1574

X = 1122, Z = 4646

X = 1447, Z = 446

X = 9411, Z = 574

X = 14790, Z = 320

X = 32041, Z = 38

X = 32041, Z = 37

X = 32143, Z = 37

X = 32041, Z = -1575

X = 32041, Z = -1638

X = 32143, Z = -1635

7600, 16385

6002, 18005

end gateway:

SPAWN -> 992 73 343

5000,5000

-5000,-5000

4951 68 5124

5318 70 1794 (two)

5317 73 -4339

5326 69 -4979

4838 66 4943

4584 70 -3781

4559 62 4120

4591 69 5123

4352 72 1791

4315 75 1195

4196 68 -295

4209 67 -3663

4013 70 -4203

4015 69 -222

4013 70 -222

3893 68 -5479

3659 67 -4811

3731 73 1167

3769 67 2448

3728 72 3249

3542 85 4909

3429 66 1979

3356 130 -861

2928 72 3937

2957 69 4732

2739 72 3471

2743 69 1735

2604 71 -2739

2401 71 -5224

2307 66 -1809

2422 65 -966

2442 71 1935

2350 62 2506

2517 63 4120

1951 69 379

1721 69 -4867

1666 67 -3515

1798 67 -2459

1554 66 4777

1406 71 3781

1273 73 -4381

1173 65 -4962

941 66 -3283

987 71 -2825

915 66 3448

990 64 4238

861 67 4271

784 69 2426

718 66 -2784

305 70 -3280

162 71 -1395

323 66 4653

-175 73 -2328

-240 58 2551

-590 68 -3475

-529 72 4238

-785 71 -3003

-1009 70 -2580

-899 75 -1205

-1045 68 5315

-1220 71 5121

-1322 71 -603

-1655 69 2376

-1989 71 1418

-1974 66 -2557

-2103 67 -3426

-1994 74 -3516

-2128 64 1033

-2386 69 1714

-2728 72 2603

-2714 69 -1051

-2695 71 -2998

-2760 66 -3850

-3042 66 -2846

-2985 67 -2765

-2959 69 3412

-2901 74 4055

-2889 70 4719

-3127 67 4268

-3182 65 3044

-3155 67 739

-3202 66 6766

-3086 91 -5317

-3403 74 -4789

-3579 68 5964

-4280 70 -1216

-4145 75 -279

-4593 70 3900

-4867 67 6056

-4751 65 377

-4702 70 -1329

-5064 73 -2123

-5054 70 -116

Checked coords Overworld:

65 -168 (Bedrock to Build Limit)

128 -166 (Bedrock to Build Limit)

128 -170 (Bedrock to Build Limit)

7600, 16385

6002, 18005

Checked Coordinates

List of tried coordinates so far (not up to date)

note: Minecraft has flipped coordinates from expected → x=longitude, z=latitude

-z is north and +z is south

real conversion is 1 degree =  ~111 km or ~111,111 blocks hopefully not this

Overworld (x/[y]/z)

  • -4095 -336, Y checked
  • -2394 -296 to bedrock
  • -2603, 41, -2092
  • -336, 6, 128 checked; nothing
  • -338, 4095
  • -58, 2583
  • 0 , -3213, Y checked
  • 0, 3000
  • 0, 3213
  • 58, 2583 to bedrock
  • 65 -168, Y checked
  • 65, 169 to bedrock
  • 87, 2624 to bedrock
  • 128 -166, Y checked
  • 128 170, All variants (-- -+ +- ++, XZ ⇔ ZX)
  • 290, -441
  • 290,  441
  • 336, 6, -128 nothing
  • 340, 3969 to bedrock
  • 338, 4095
  • 441, 290
  • 510, 4032 spectated to bedrock
  • 2616, 154, -2072
  • 2720/-32 (nether+end)
  • 2752/0 (nether+end)
  • 2768/0 (nether+end)
  • 3591 -336, to bedrock
  • 3780 -344, to bedrock
  • 4000 -336, to bedrock
  • 4095 -336
  • 4095 336, Y checked
  • 4473 -358,  to bedrock
  • 5472/-63504
  • 0, 88 checked to bedrock

Nether (x/[y]/z)

  • 4095 336
  • 4095 -336
  • 58, 2583 checked
  • 87, 2624 checked
  • -338, 4095 checked
  • -507, 4160 checked
  • -336 -4095 checked
  • +32000 to -32000, 0 (x-axis checked by NodemOxfa)
  • 8838, -473 (TH3EEuphoricFan1161)
  • 42307, 41624
  • 41624, 42307
  • 35114, 13403
  • 22136, 13403
  • 13403, 35114
  • 13403, 22136

End (x/[y]/z)

  • 4095 336
  • 4095 -336
  • 336 4095
  • -336 4095
  • -336 -4095
  • -336, 6, 128 checked; nothing
  • 0 3213
  • 0 2750
  • 2750 0
  • 3213 0
  • 3696 2080
  • -3696 2080
  • -3696 -2080
  • 3696 -2080
  • 0 to +32000, 0 (x-axis checked by NodemOxfa)
  • 8838, -473 (TH3EEuphoricFan1161)
  • -11249, -844 (TH3EEuphoricFan1161)
  • -9642, 675 (TH3EEuphoricFan1161)
  • 42307, 41624
  • 41624, 42307
  • 35114, 13403
  • 22136, 13403
  • 13403, 35114
  • 13403, 22136
  • 42307, -23912
  • 41624, -23229
  • 13403, -30422
  • -30422, 13403

Stronghold Coords

Coords are accurate to Stronghold portal room spawner block (nether roof ports y = 128)

All end portals should now be activated, none appeared activated without intrusion

X                Y                Z                Active?        Notes

  1. 2117                20                -935                Yes
  2. -1596                -20                -1155                Yes
  3. 4460                -21                -1128                Yes
  4. -4528                27                1066                Yes                -566 128 133 nether portal
  5. -88                36                2328                Yes                -11 128 291 nether portal
  6. 3039                -9                3318                Yes
  7. -1501                2                5404                Yes                -187 128 675 nether portal
  8. -5235                -6                6079                Yes                -654 128 759 nether portal
  9. -7593                28                1811                Yes                -949 128 226 nether portal
  10. -3624                0                -3746                Yes
  11. 785                42                17703                Yes
  12. 1182                14                20117                Yes                147 128 2514 nether portal
  13. 1049                26                23077                Yes                127 128 2879 nether portal
  14. -2214                35                20233                Yes                -276 128 2529 nether portal
  15. 5020                -2                20354                Yes                627 128 2544 nether portal
  16. 574                -14                13991                Yes                71 128 1748 nether portal
  17. -3225                -10                17529                Yes                -403 128 2191 nether portal
  18. 4733                40                16911                Yes                591 128 2118 nether portal
  19. -5658                -8                19450                Yes                -707 128 2431 nether portal
  20. 8419                16                19317                Yes                1052 16 2414 nether portal
  21. -3670                45                13687                Yes                -458 128 1710 nether portal
  22. 4585                -22                13051                Yes                573 128 1631 nether portal
  23. -6843                -26                15727                Yes                -855 128 1965 nether portal
  24. 8002                -24                15052                Yes                1000 128 1881 nether portal
  25. -9125                31                18309                Yes                -1140 128 2288 nether portal
  26. 11023                41                16598                Yes                1377 128 2074 nether portal
  27. -13274                8                19748                Yes                -1654 128 2467 nether portal
  28. 14882                -11                19013                Yes                1867 128 2375 nether portal
  29. -11899                26                16149                Yes                -1487 128 2018 nether portal
  30. 14051                -6                14639                Yes                1756 128 1829 nether portal
  31. -10098                42                13860                Yes                -1262 128 1732 nether portal
  32. 11249                42                12876                Yes                1406 128 1609 nether portal
  33. -15060                24                14427                Yes                -1882 128 1803 nether portal
  34. -7835                38                12545                Yes                -979 128 1568 nether portal
  35. -13706                -12                11837                Yes                -1713 128 1479 nether portal
  36. 16157                13                11879                Yes                2019 128 1484 nether portal
  37. 8515                24                11489                Yes                1064 128 1436 nether portal
  38. -16943                -30                11253                Yes                -2117 128 1406 nether portal
  39. -4490                -12                10334                Yes                -558 128 1278 nether portal
  40. 104                -20                10772                Yes                17 128 1332 nether portal
  41. 4695                -9                10259                Yes
  42. 14180                -32                10270                Yes                1772 128 1283 nether portal
  43. 18945                13                9294                Yes                2368 128 1161 nether portal
  44. 11593                5                8751                Yes                1449 128 1093 nether portal
  45. -862                -40                8527                Yes                -107 128 1065 nether portal
  46. -10906                22                9199                Yes                -1363 128 1149 nether portal
  47. -8627                -9                7886                Yes                -1078 128 985 nether portal
  48. -15346                0                8222                Yes                -1918 128 1027 nether portal
  49. -19017                16                8210                Yes                -2307 128 1026 pending
  50. -22560                -41                8388                Yes
  51. 4171                8                7052                Yes
  52. 8208                -33                7231                Yes
  53. 15828                -45                6817                Yes                1978 128 852 nether portal
  54. 22750                -17                6428                Yes                2843 128 803 nether portal
  55. 19978                25                5774                Yes                2497 128 721 nether portal
  56. 13900                27                4993                Yes                1737 128 624 nether portal
  57. -12725                -8                5605                Yes                -1590 128 700 nether portal
  58. -16168                29                4449                Yes                -2021 128 556 nether portal
  59. -19460                1                4723                Yes
  60. -10173                3                3313                Yes                -1271 128 414 nether portal
  61. 7027                -36                3033                Yes
  62. 10483                26                3362                Yes
  63. 17773                -10                3220                Yes                2221 128 402 nether portal
  64. 20004                22                2180                Yes                2500 128 272 nether portal
  65. -14849                36                1538                Yes                -1856 128 192 nether portal
  66. -20183                -20                1181                Yes
  67. -16818                -25                772                Yes                -2102 128 96 nether portal
  68. 14470                -46                560                Yes                1808 128 70 nether portal Ancient City overlap
  69. 17684                -37                -793                Yes                2210 128 -99 nether portal
  70. -11059                -15                -1089                Yes                -1382 128 -136 nether portal
  71. 11440                37                -1205                Yes                1430 128 -150 nether portal
  72. 20752                -39                -1185                Yes                2594 128 -148 nether portal
  73. 7932                -2                -1875                Yes                991 128 -234 nether portal
  74. -20356                -2                -2265                Yes
  75. -14463                -16                -2776                Yes                -1807 128 -347 nether portal
  76. -17540                -2                -3130                Yes
  77. -8047                -8                -3449                Yes                -1005 128 -431 nether portal
  78. 13479                -20                -3573                Yes                1684 128 -446 nether portal
  79. 16227                -40                -4427                Yes                2028 128 -553 nether portal
  80. 19461                -5                -4568                Yes                2432 128 -571 nether portal
  81. 1637                -29                -5206                Yes                
  82. 9143                -33                -5419                Yes                1142 128 -677 nether portal
  83. -9554                18                -5460                Yes                -1194 128 -682 nether portal
  84. -19900                5                -5870                Yes
  85. 5303                -47                -6005                Yes
  86. -12168                7                -6404                Yes                -1521 128 -800 nether portal
  87. -15590                1                -6676                Yes                -1948 128 -834 nether portal
  88. -4379                -16                -7314                Yes
  89. 12179                -17                -7437                Yes                1522 128 -929 nether portal
  90. 690                -8                -7824                Yes
  91. 14954                17                -7895                Yes                1869 128 -986 nether portal
  92. 22514                -1                -8232                Yes                2812 128 -1032 nether portal
  93. 18790                -7                -8376                Yes                2348 128 -1047 nether portal
  94. -6659                31                -8966                Yes
  95. 6493                -27                -9177                Yes                fixed X
  96. -18533                -17                -9229                Yes
  97. -10327                -26                -10175                Yes
  98. -14160                37                -10292                Yes
  99. 2201                15                -10548                Yes
  100. 9196        20                -10708                Yes
  101. 12985        34                -11318                Yes                1623 128 -1414 nether portal by wither skeleton farm
  102. -2479        -36                -11527                Yes
  103. 17454        -21                -11527                Yes                2181 128 -1440 nether portal
  104. -16143        -34                -11989                Yes
  105. -6642        13                -12490                Yes
  106. 5470        39                -12655                Yes
  107. -11315        14                -12924                Yes
  108. 9986        -23                -13683                Yes                1248 128 -1708 nether portal
  109. 14508        -24                -13779                Yes                1813 128 -1722 nether portal
  110. 1567        -35                -13894                Yes
  111. -2639        -46                -14399                Yes
  112. -14084        -26                -14789                Yes
  113. -8067        26                -15110                Yes
  114. 12018        -5                -16254                Yes
  115. 7157        13                -16289                Yes
  116. -800        15                -16934                Yes
  117. -4795        13                -17215                Yes
  118. -11633        37                -17361                Yes
  119. 3199        39                -17348                Yes
  120. -14891        -14                -18955                Yes
  121. 9414        -30                -18806                Yes
  122. -8374        -8                -19020                Yes
  123. -4795        -20                -19425                Yes
  124. 12821        33                -19335                Yes
  125. 5968        -16                -19910                Yes
  126. 2255        -7                -20427                Yes
  127. -1383        17                -20559                Yes
  128. -787        -39                -23819                Yes

Seed Analysis

Seed: “711026799995424918”  Interestingly, this fits into the . and _ sequence from the ARG Discord Server Owner Account Name as 7.1.10.267.9999.542.49.1.8

The default spawn point for this seed is not where the actual server’s spawn point is. This has been theorized to mean that the seed value is important.

However, we have not been able to find a meaning yet.

Partial World Download

https://drive.google.com/file/d/1MAlw_vjH7qNvgoDRntkGIQs06DIf13dr/view?usp=sharing

 

The link is to a drive with a world file of the temple untouched before discovery

To use

Computer Steps

  1. Open the drive link
  2. Download the file
  3. Unzip the file

Minecraft Steps

  1. Create a new world in SP
  2. Set to creative and make sure commands are ON
  3. Use the MC seed (711026799995424918)

Computer Steps 2.0

  1. Locate your Minecraft folder the default path is usually C:\Users\(whatever your username is)\AppData\Roaming\.minecraft
  2. Go to saves
  3. Open the save of the world you just created
  4. Drag and drop the unzipped folders and files into this folder

Minecraft Steps 2.0

  1. Relaunch Minecraft
  2. Open the single player save you just created
  3. Press T or your chat key
  4. Type /tp @s 32137 -27 18
  5. Schizo away Snackers

World download courtesy of aezukla on Discord give them many headpats if seen

Revive Altar

  • Liquid (liquidwater2 on discord) found a structure resembling an altar at approximately 7:30 pm PST Dec 20, 2025 and signs surrounding it were translated from the galactic alphabet by corrizer and Liquid.

Photos of the altar and signs:

Location is -401, 101, -3075 roughly

Solution:

Signs are originally in the galactic alphabet (enchanting table alphabet), translated they say the following: (thanks corrizer on discord)

If you want your fallen a sacrifice must be made

Place the head of the dragon at the top

Dont misunderstand theres more to be found

  • Ratwagonz found an End ship and got a dragon head shortly after 8pm PST Dec 20, 2025.
  • The resurrection event was triggered at approximately 8:30pm PST Dec 20, 2025.
  • Spectators that did not get to the ground fell while others suffocated inside terrain.  The resurrection event pulsed for a time, allowing repeated respawns.
  • As of 8:17 UTC permadeath is back on

Filian Temple

  • About 11:16pm PST on 12/23/2025, Stardrop found a custom-made area in the End resembling a temple near 1607, 35, 439 and an expedition was quickly launched to investigate.  After investigating the area command blocks were found, confirming that this was not a player made structure.

Photos of the temple structure:

Shremple

  • The following structure was found by Liquid on 3/17/2026 using the konami code riddle.  Additional details under that tab.
  • The structure was raided by waves of difficult mobs (ex. Wardens, Withers, Ender Dragon) at or shortly before 3:03 PM PST on 2026/03/25
  • The golem precautions served their purpose and at the end were forcefully destroyed by the GM (possibly to focus on counting the cats)
  • Per Dabebe31, it was something like 1- Wardens start spawning 2- Ravagers start spawning 3- Withers start spawning 4- A dragon spawns 5- Witches, vexes and the cats start spawning 6- Last wave of wardens spawns and after we kill them and the drake the sound appears
  • 15+ cats were spawned by the GM during the event, reports are 15 cats were always alive during and by end of event despite some being killed during fight
  • 1 cow was spawned by the GM
  • Uncertain if efforts by Tanki to match blocks into the glass inserts triggered this event, the nearly 8 full days from activating corner text did, or the livestream setup by Pizzabash, but GM was definitely present and initiated the event
  • VOD https://www.twitch.tv/videos/2731635389?t=1h44m52s
  • Tanki breaks a block in the upper right (black glass) just before this timestamp and a warden spawns left of the structure 1-2 seconds later
  • It is unclear why scanning did not pick up blocks (ex. End rods) within this structure.  After checking a large scale regional download of the world created by @aezukla, it was confirmed that the structure has existed in that location since at the latest march 2nd.
  • Four slots were open with iron blocks beneath them, so we added four beacons in the slots and activated them.
  • The text “remember.” “ Protect it.”  “Its coming” “Watch it.” was added to the sea lanterns on the four corners shortly after (using invisible armor stands), at or before 7:21 PM PST on 2026/03/17.
  • The appearance ordering was checked in a replay by Tanki/@.tanki. in the discord but it is likely bugged, this ordering was found in the replay, see below for original appearance ordering

  • Candles matching the interior glass slot colors were found around the corners of the structure.  It has been theorized that the candles are meant to put the words in order, though the original candle locations and interior glass colors have a different word sequence:

Candle Info

Corner Text Ordering Possibilities

Candle Number

Candle Color

Corner text (interior glass) → Also placement order in time

Corner text (candle location)

1

blue

remember.

protect it.

2

white

watch it

its coming

3

purple

protect it.

remember.

4

black

its coming

watch it

We have not found the next step after finding the Shremple.

There is definitely more to find here.

Notes on the Shremple (by Asa)

(This is just every single thing I noticed as I wandered around the temple, there is probably more I didn’t notice.)

You can check out an unmodified version of the Shremple by following these instructions: Partial World Download

Under the Temple:

Black pillar of concrete in only one corner under temple (Purple 3-candle side / NorthEast side)

- includes chiseled quarts block on the corner - no other corner has this

Towers on Temple:

Pillars on top of temple are Quartz Pillar which stop at the floor where they meet

- Between the 4 towers are two mirrored ornate boxes. On the South side, pink glass fills the window/cavity but nothing on the North side

- Stair-step level of temple floor causes Quartz Pillar to stop 2 blocks higher on inside of temple than outside of temple

- Top 'Trim' of Pillars hides a row of Quartz Pillars

- Quartz Pillars go down to bedrock 4 blocks below floor of temple

- Quartz Pillars contain unique seemingly-random patterns of Chiseled Quartz, Purple Glass, and Black Glass

- Quartz Pillars have a colored candle next to each, with a different number of candles in the colored stack: Blue=1, White=2, Purple=3, Black=4

- Quartz Pillars are each labeled with their own floating text: ‘protect it.’, ‘its coming’, ‘remember’, ‘watch it’

- Only the ‘protect it.’ and ‘remember.’ floating text labels have periods while the other two do not. (This feels very important? Idk why… a gut feeling.)

Inside Temple:

- Floor has cavities in corners of a 7x9 rectangle, with 2-tall Iron Pyramids below (filled with Beacons immediately on the live server)

- 3x3 rings of blocks of colored glass matching candle colors, empty middles (except one)

- The Black 3x3 ring is the only one with a filled center, which is Chiseled Quartz

- Single Wither Rose between each pair of 3x3 rings

Four Towers Analysis

The four towers next to each candle was noticed to be 16 blocks tall and contain a seemingly-random assortment of blocks separate from the Quartz Pillar blocks the towers were primarily made of. Current Theories include that these towers contain encoded data due to the 16-block height.

Newest theory: Each tower might be individually encoded?

Note that for all visual references,

Chiseled Quartz

blocks have been replaced with

Redstone Blocks

for visibility.

The towers have been unwrapped in various ways for everyone to work on:

Dynamic (rotate/reorder-able) Spreadsheet version:
Tower Blocks Spreadsheet by Asa (copy it to your own drive so you can edit it as you wish)
Note: In the spreadsheet, I included a row 0 which is the row of Quartz Pillar blocks above the lanterns that were hidden behind the upside down stairs ‘trim’ on the towers (without exception, these were all Quartz Pillar blocks, so might be nothing). I also noted the Quartz Bricks at the bottom of the towers since those blocks are the same as the rest of the temple structure rather than the towers, so possibly not considered ‘default blocks’ for the towers.


(image by Railgun on discord)

(image by coggers on discord)

Text Version:

(by GummiWyrm on discord)

Here it is numbered out:

0 = the common block (Quartz Pillar)

1 = the lanterns (cuz they are blue-ish)

2 = the chiseled quartz block

3 = the purple glass

4 = the black glass

01010101 01310101 01010101 01012101

00300000 00002000 00000200 00020000

00000040 30020000 00300000 00000004

00000000 00002000 03300000 00002004

00003000 00000000 00000002 00000000

00403002 00000322 40000000 30004220

00000000 00400000 00000000 00000000

20000000 00402002 00003000 00300000

03004020 20000000 00403000 00000000

00004000 00003000 00400200 00200200

00000002 00200200 02002000 00030004

00000000 00300022 00000002 02030002

00000000 00300000 00230000 02000000

00000000 00002000 02000000 00000044

00000004 00040040 00000000 20000000

00000000 00000000 00000000 00000000

Note by Asa:

After playing around with the spreadsheet trying to recreate the results that PainStalker got in the below conversation, I found PainStalker was using the following method:
Tower (Sides): NE(N,W,S,E), NW(W,S,E,N), SE(E,N,W,S), SW(S,E,N,W).
Default blocks as 0 and any non-default-block as 1 (so, binary.)
Convert each horizontal stack to binary, resulting in 4 8-long strings of binary.

Convert each 8-long binary string into hex and concatenate the result into a string.

Note by Euphoricfan1161:

I had tried to decode the pillars in base4, and all combinations of base3 and base2, each to ascii.  In all orders of pillars as well as vertically or around each pillar including different possible offsets around each pillar (always top to bottom as well as left to right around).  None of these returned usable strings, most of the time the characters were not even letters/numbers.

Additional Info:
Due to the chat in the SnackersHQ discord being nuked, I (Asa) figured I’d leave my records of the last conversation about the towers that I was a part of. Sadly, I only recorded the messages I thought were relevant to me, as I figured I’d be able to come back to the discord chat later for more context if I needed it. But now that’s impossible.

-----

GummiWyrm:

So im in shremple doing some investigation. The three block types on the pillars are black glass, purple glass, and chiseled blocks. Inside the temple there is a black glass "slot" that contains a chiseled block (and is the only slot that contains a block). The blue glass and white glass are not present in the pillars at all. My first thought was that the chiseled block represented another color, but since it's in the black slot that kinda discounts that idea. I still think we could be looking at layered data between the three block types on the pillars though. I'll try to create a grid representing the different colors.

-----

{I can’t find the message I was responding to... it was about mapping non-Quartz_Pillar-blocks to 1 and Quartz_Pillar-blocks to 0}

Asa Oiralume:

i think we should map it

0 = the common block

1 = the lanterns (cuz they are blue-ish)

2 = the chiseled block

3 = the purple glass

4 = the black glass

at least so we can maintain data fidelity if it's important

Railgun:

The idea is to turn it to binary, 2 states 1 and 0

Asa Oiralume:

i mean for the docs / so other people can try other methods

so we aren't losing data when we record it into the public space

-----

fvb qbza svza aol njtl:

my current line of thinking on the towers is that if it is encoding something it might not be straight forward because the bottom row is all 0's which is kinda pointless

Hadez:

Aw shit. if the columns were 16-bit groups from top to bottom this whole time starting from the corner of the armor stands, I'm going to be sad  (or polybus)

Good theory though ffr.

Raz:

okay so I converted the binary into decimals, then plugged those values in as hexidecimals and it came out with some chinese, so I put that in google translate and got "The sound of the bell echoes through the valley."

{...}

GummiWyrm:

So i tried a couple things with the SW pillar, rearranging the sides (but maintaining "rolled" order). I decided to only work with the chiseled blocks first. Got only one configuration that produced valid ascii characters (ENWS) for a couple of rows. The rest ended up being gibberish. I think that's a point against chiseled blocks alone being anything, at least in the standard horizontal configuration.

dualInfinities:

also "unrolling" the pillars actually clashes with the candle order. which is basically just the standard read order for Japanese? right-to-left, then top-to-bottom

GummiWyrm:

Not sure i understand, how does it clash with candle order?

dualInfinities:

basically

21

43 vs... ***OH GODS D A M N I T the Y range is just the order you read Japanese in***

dualInfinities:

**so for future reference, the candle order is also the Y range, and both are the order you read Japanese in.**

{...}

GummiWyrm:

yeah, i suspect lamps are to be ignored. Need to keep them in mind tho. They could also be an indicator in some way

{...}

PainStalker:

so I did the grid from hans image and turned it into binary and the hex of it give us 0892a000 in one of the row which is like our 0x892a.bin folder from blackfile

PainStalker:

row 9 is 00001000100100101010000000000000 which mean 892A000 in hex numbers or 0892A000 <@475017810914050048>

PainStalker:

if you convert every line it give this in Hex

```

 5755555D

 80001010

 09888001

 80008109

 00004400

 7040108E

 02008000

 92202020

 0892A000  <- this one matches the file 0x892A.bin in the recycle bin on blackfile-index

 80009024

 42402011

 32000451

 0200C040

 80000103

 21400080

 00000000

```

—--

Sarg:

this to decimal gets you: 튣럲펭ᄰ汬ꏀ鱠흀Û䧃൨둧訐

which translates to: "The sound of a bell ringing in the distance" (according to google)

-----

Hadez:

Zero Stripped Steam I used for these: 12334233442412114312344133214111312311142111423113344123331211113121131213311421114244414

Vertical extaction: NNSNNNNHSTALMELYALLAMTFFEUFAMMTTTTMLTEEETAPP

BIFID Output: EYGTFMCFCTIYEGLTCTEHAPSSPICFLTEATIMECTTCLFHF

-----

Candles/Text Analysis

  • The text “remember.” “ Protect it.”  “Its coming” “Watch it.” was added to the sea lanterns on the four corners shortly after (using invisible armor stands), at or before 7:21 PM PST on 2026/03/17.
  • The appearance ordering was checked in a replay by Tanki/@.tanki. in the discord but it is likely bugged, this ordering was found in the replay, see below for original appearance ordering

  • Candles matching the interior glass slot colors were found around the corners of the structure.  It has been theorized that the candles are meant to put the words in order, though the original candle locations and interior glass colors have a different word sequence:

Candle Info

Corner Text Ordering Possibilities

Candle Number

Candle Color

Corner text (interior glass) → Also placement order in time

Corner text (candle location)

1

blue

remember.

protect it.

2

white

watch it

its coming

3

purple

protect it.

remember.

4

black

its coming

watch it

Asa’s schizo theory: ‘protect it.’ ‘its coming’ ‘watch it’ ‘remember.’ - no way ‘the great purge’ is ‘it’, right? The instruct to ‘remember’ would fit for this.

IRL Coords Conversion

Coords Calculation

Fog_runner: made progress on reverse engineering the temple location. If I take the exact coordinates someone wrote in the doc (1617 / 30 / 439), translate all of that into binary (11001010001 / 11110 / 110110111), then rewrite that into morse (..--.-.---. /....- /..-..-...  ; 1 as ‘’.’’, 0 as ‘’-’’) then the second and third parts can be transcribed into SET (.../ ./ -) / FREE (..-./ .-./ ./ .), but the first part doesn't work like that. Maybe the ''correct'' coordinates for X are something different

Maybe we need combinations of 3 words that are somehow relevant to the arg (like (?) / SET / FREE). Then the word needs to be translated into morse, then into binary, then into decimal for actual coordinates for the minecraft server.

Altar coords reverse engineering

Then I attempted to do the same with the altar. Coords - (-401 / 101 / -3075). In binary - (110010001 / 1100101 / 110000000011). In morse, without the minuses - (..--.---. / ..--.-. / ..--------..). Tried to keep the minus in the sequence, but X only translates into a coherent word without it - MUST. Y and Z don’t yield anything, possible that they are not exactly “correct”.

So if I try Y = 102 then I get the following words - MEAN, GATE, MUTE, MIME. If I try Y = 103 it results in MUM or MUTT which don’t work at all. The word GATE at least is relevant to death and resurrection. Y = 100 results in MINE, GENE, MERE, MID. Y = 99 results in GUT.

If then I try different X values, X = -397 (with a minus) yields PEAK, ANIMA (the soul).

For clarity: - 397 = - 110001101 = - ..---..-. = ANIMA or PEAK (as coherent somewhat relevant words, ANIMA especially).

Result - (ANIMA / GATE / ?).

This is proof of concept, I didn’t even expect it would work at all. Could be useful.

Take 3 or 2 words that seem relevant together and apply the logic above (word to morse to binary to decimal) and look where it leads. Try synonyms too (like soul and anima).

Update and Scripts

TH3EEuphoricFan1161: As of Apr 9, 2026, I wrote a script to confirm the above results by Fog_runner.  You can find it here: https://github.com/EuphoricFan1161/filianarg_scripts in the “Coords_and_Words” sub dir.  It uses the Natural Language Toolkit (NLTK) and a small supplemental list of words (mostly abbreviations of weekdays and months).  Please feel free to try it yourself and make improvements.

With this script I found that 1617 in the coordinates (1617, 30, 439) (see above) can result in the word “UNTAME”, thus giving (UNTAME, SET, FREE) as a possible set of words.

However, I have found by searching other coordinates that many sets of words may result, seemingly at random.  It is likely there are many false positives using this approach…

Also of note is the convention which to define 0 := ‘-’ and 1 := ‘.’, the opposite assignment is possible as well.  There is also the possibility the leading negative should be prepended to the morse string.  All options may be checked in the script with the -fc and -n options.  The reverse engineering of the temple location and altar coordinates by Fog_runner use different bit assignments, but are consistent in the leading negative (since the temple coordinates have no negative values)

A special thanks to Tyler/@tylerginn_ in the Snackers HQ discord for trying out this code.  Without them I would not have spent more time on this script and would not have found/fixed a bug in the -n option.  If you find any potential bugs please let me know :3

Fog_runner (2.05.2026): just found out you did this, thanks a lot!!!

Word to Coord

Implementation of word-to-coord method. First two coords were the results of reverse engineering (for in depth logic look at “coords calculation” section), others are new .

Coords do not tell whether it’s overworld, nether or the end. The order is X / Y / Z.

If you want to do it yourself, a quick way to do it is to have two tabs opened (https://www.dcode.fr/morse-code ; https://www.dcode.fr/binary-code ).

Important. If word-to-binary result starts with “-” then I treat it as a minus to the decimal result (because first zero doesn’t translate into anything when you do binary-to-decimal). Only then can we get results like ANIMA and ABSENT which give negative coords close to the actual altar of resurrection.

As of yet I don’t know how to treat words like MY ( -- -.--). Is it just (-100) which in decimal is (-4)? The number of minuses is odd so it would make sense. But if the number of minuses is even do they cancel out in the context of morse-to-decimal? Left both variants just in case.

OW - overworld

N - nether

E - the end

Words

Morse

Binary

Decimal

Result

Based on reverse engineering (proof of concept):

? / SET / FREE

(?) / ....- / ..-..-...

(?) / 11110 / 110110111

(?) / 30 / 439 (actual coords were 1617 / 30 / 439)

E - Filian temple location in The End

ANIMA / GATE / (ABSENT?)

-..---..-. / ..--... / - ..-------.-.

- 110001101 / 1100111 / - 110000000101

-397 / 103 / - 3077 (actual coord were -401 / 101 / -3075)

OW - Altar of resurrection

Ideas for coords based on the examples gathered:

LITTLE/ . / DIOMEDE

.-.. .. - - .-.. ./ . / -.. .. --- -- . -.. .

1011110010111 / 1 / - 11110000010111

6039 / 1 / - 15383

OW - nothing of interest - checked by zankjeff

N - unknown

E - unknown

SAINT / . / LAWRENCE

... .- .. -. - / . / .-.. .- .-- .-. . -. -.-. .

1111011010 / 1 / 10111010010110101011

986 / 1 / 763307

OW - unknown

N - unknown

E - unknown

BERING /. / STRAIGHT

-... . .-. .. -. --. / . /... - .-. .- .. --. .... -

-11111011101001 / 1 / 1110101101100111110

-16105 / . / 482110

OW - unknown

N - unknown

E - unknown

FIND / . / IT

..-. .. -. -.. / . / .. -

11011101011 / 1 / 110

1771 / 1 / 6

OW - nothing of interest - checked by zankjeff

N - unknown

E - unknown

FIND / THE / TRUTH

..-...-.-.. / - ..... / - .-. ..- - ....

11011101011 / - 11111 / - 10111001111

1771 / - 31 / - 1487

OW - unknown

Micahr238 checked 1771 / 63 / 1487 in the OW, wrong coords because the minus idea wasn’t flushed out yet, but it was an ocean)

N - unknown

E - unknown

THE / _ / TRUTH

 - ..... / ..--.- / - .-. ..- - ....

- 11111 / 110010 / - 10111001111

- 31 / 50 / - 1487

OW - nothing of interest (mineshaft and a trial chamber) - checked by zankjeff

N - unknown

E - unknown

KEEP / . / GOING

-.- . . .--. / . / --. --- .. -. --.

- 10111001 / 1 / - - 10001101001

 - 185 / 1 / 1129 (or - 1129)

OW (both negative and positive variant of “Z”) - nothing of interest (normal spawns) - checked by zankjeff

N - unknown

E - unknown

TIME / IS / UP

- .. -- . / .. … / ..- .--.

- 11001 / 11111 / 1101001

- 25 / 31 / 105

Possible but insane variants:

IT / NOT / FOUND

.. - / -. --- - / ..-. --- ..- -. -..

110 / - 10000 / 110100011001011

6 / - 16 / 26827

BLACK / FILE / INDEX

-... .-.. .- -.-. -.- / ..-. .. .-.. . / .. -. -.. . -..-

- 1111011100101010 / 11011110111/ 110101110110

- 63274 / 1783 / 3446

FILIAN / IS / LOST

..-. .. .-.. .. .- -. / .. … /.-.. --- ... -

1101111011111001 / 11111 / 10110001110

57081 / 31 / 1422

Meme variants:

SAY / MY / NAME

... .- -.-- / -- -.-- / -. .- -- .

111100100 / - - - 100 / - 110001

484 / 4 (or -4) / -49

We can apply this method in reverse if we have the coordinates (like in the reverse engineering part).

Example for the Diomede Islands coordinates (65°47′N 169°01′W):

If I take "just the whole numbers" (65 and 169), "63 times raise the parallel" (65 becomes 128), "just twice the long" (add 2 to the longitude - 169 becomes 171) I get 128 and 171. Tried to apply my method of turning decimal numbers into words, and the only fully coherent word I got out of these two is "SEAWARD". I got it by combining them (128171), turning the result into binary (11111010010101011), then into morse (.....-.--.-.-.-..). The only way to split this sequence fully into a single word is SEAWARD (... . .- .-- .- .-. -..). Tried this method to a bunch of other possible combinations (got SINGKEK once), but got nothing else of notice. Tried SEAWARD as a password for CITF_MEMO.TIF but nothing (unless capitalisation matters)

Tried to apply this method to numbers separately, but it got me nowhere. 128 171 | 10000000 10101011 | .------- .-.-.-.. | which can be transformed into “RCE”; “1ORCE” and other things, none of which worked for CITF_MEMO.TIF, but I didn’t always check different capitalisations.

2.05.2026 update

10:56 (server set time).

1056 (full) | 010000100000 | -.----.----- | YQOT

10 56 (divided into 2 parts) | 1010 00111000 | .-.- --...--- | R8J

22:56

2256 (full) | 100011010000 | .---..-.---- | JFOT

22 56 (separate) | 00010110 00111000 | ---.-..- --...--- | OL8J

More info about this can be found in the README.md tab!

"find it" Theories

wSillyProotSoda and Veter992:

Thinking that “it” could be a item in suspicious sand or gravel, going to recheck trial chambers for them.

Makedonski:

I have a schizo theory. I rechecked the recording with minecraft steps, and with a big gain, it can be seen that this is a poorly trimmed cycle of 6 slow, 11 normal and 10 fast steps. I thought it was logical to convert it to time (the slower the step, the longer the time) like 6:11:10. I decided to check the VODS, and found that in the first stream, perfect at this timing, the neuro disappears from the server  https://youtu.be/RksF7wbZgfA?t=22270 

https://www.twitch.tv/videos/2636167728?t=6h13m3s

Summary:"find it" = "find neuro"

How do we find neuro? solve the neuro arg

aaLinnea:
Time.
Time has been an overarching theme since the beginning, finding timestamps, finding dates, filian “running out of time” “time is up” “thought I had more time”. What have we lost? What is lost? Time. What are we searching for? … Maybe a timestamp. Maybe the timestamp of a debut.

Apton_ika:

In older clips she played the account ‘FilianIsLost’ (as in the ARG).

https://minecraftuuid.com/player/944da1d5-718f-4527-b37a-b454d550b217

In the actual HC Minecraft run she played on ‘FilianIsCringe’

https://minecraftuuid.com/player/70916122-8e54-4f4b-a800-6042935e650c

Fog_runner:

Possible relevant info from “diamond city lights” dance short, that had the link to arg discord server.

Based on the lyrics I have a couple of ideas.

1. «Data behind my heart's encryption key (Can you see?)

Listen and you might hear a melody»

Either the number of heartbeats (49) will be relevant soon, or it’s talking about the “heart” shape we should be looking for. The map people posted in “Minecraft server” has at least 2 candidates.

Изображение выглядит как карта

Содержимое, созданное искусственным интеллектом, может быть неверным.

2. «When gray skies take the colors away (Far away) I'll paint a rainbow lasting for days and days», «Rainbow-colored skies invite us to take a ride», «A shimmering light that will guide you through the night». «In the night there's no need to hide».

Maybe clues are set to appear at night cycle or they are more obvious at night. Gray sky areas could be more relevant to the arg than others. Gray skies are common in winter, and the resurrection altar was found in the winter biome surrounded by flames that are easier to see at night. Maybe this clue is now exhausted.

 

3. «Let's go to the place», «Diamond city lights illuminate what's inside», «Decoding these emotions, you're the ocean I wanna dive into tonight».

This combined with point 1 suggests that there might be something beneath a heart-shaped body of water. Or, if heart shape is irrelevant, beneath any big body of water that could pass as an ocean by Filian’s logic.

If I unleash my schizo interpreter, then there might even be music of sorts somewhere deep in the water to signify a correct place (a hidden jukebox maybe?). But based on the clues we had previously I wouldn’t rely on this.

Cyrus:

If you use chappe code on the server separated into digits with the username _._.__.___.____.___.__._._ then you get:

décès graduer ? craindre que folio

which translates to:

death graduation ? fear that folio

This is likely in reference to the file on blackfile index meaning “it” will likely be a password to CITF_MEMO.TIF

It is worth noting that 9999 in the middle of the server seed does not translate to chappe code, hence the question mark.

The Overworld Altar

Believed to be a one-time resurrection that pulsed for a time, it has subsequently been destroyed by the community in pursuit of knowledge.

The End Shrine

It was initially thought that the End Shrine was the “it” that we were looking for.  The shrine has since been heavily damaged.  However, the server description changed and then changed again to emphasize “find. it.” indicating otherwise.

The Shremple

Similar to other structures, this was thought to be “it” but that seems unlikely at this point.

Cats & Cow Theories

The Facts:

The Shremple Raid:

On 25 March 2026, at 22:03, user @.tanki. on Discord reported that a warden had spawned at the Shremple. Then more wardens began to spawn as players started converging to defend the Shremple and a full raid started. Withers, ravagers and the ender dragon spawned as players defended the Shremple with the help of hundreds of iron golems.

During the raid several cats were spawned. Some died during the fighting so the exact number is unclear, but allegedly it was 32 spawned cats, and 15 survivors after the fight. Most of those and the cow were subsequently also killed by players and now only 1 survives. The cat has been named “filian's 9th live” by players with a nametag.

Cats:

Eats: Fish

Lives In: Jungles, Villages, Witches Huts

Special Ability: Scares away creepers in their proximity.

Cow:

Eats: Wheat

Lives In: Grassy Areas

Special Ability: Their milk cures status effects.

Theories:

Milk:

Milk cures the player of any status effects. This feature is most commonly used in Ocean Monuments to cure Mining Fatigue which has led some people to suspect the next clue will be in an Ocean Monument. Or perhaps that some status effect needs to be applied to the cats.

Cats:

Cats come from ocelots who live in the jungle. This may point to Jungle Temples as a point of interest. But cats can also be found in witches' huts and villages.

Since they also scare away creepers it might mean that we should creeper proof the temple.

Missing Info:

Since the cow and many cats died it will be impossible to determine any clue that relies on detailed information. Such as how many cats there were of which breed or color, and what IDs the cats had. This indicates that looking too closely at such information is likely a dead end since the ARG would have completely failed at this point without it.

blackfile-index.org

Site is currently down. No progress can be made here.

Website Link: https://www.blackfile-index.org/

See this tab for how this website was found: Filian Temple

See this tab for info on the windows 95 desktop environment: WIN95 UPDATE

Terminal Passwords:

  • The password “THE_TRUTH” was found after inspecting the website javascript.
  • On January 6th the code was changed to hide the password and redirect the user to a simulated windows 95 desktop environment. (see below)
  • The password “HELP” gives the response “There is no help for you here”.

WINDOWS 95

  • On Jan 6th the website was updated so that the terminal password “THE_TRUTH” now sends users to a windows 95 desktop environment.

  • Various files and folders are accessible but they are coded to appear corrupted/inaccessible. (see following images)

Corrupted file error

Error Reading Drive error

Access Denied error

Incorrect file password error


Desktop accessible tabs:

Current status

As of March 24th the open mysteries with this website are the following:

  •  The password for the CITF_MEMO.TIF
  •  The broken cursor
  •  Whether the filenames in recycling bin are relevant
  •  Whether or not there’s another password for the terminal screen
  • Check the following tab for the most recent website progress: Konami Code

Folder Items

  • Recycle Bin\~WRL001.tmp → Corrupted file error; rather similar to ~WRL0001.tmp which is an older version of Word temporary file of the format:  ~WRL####.tmp (purpose unknown)
  • Recycle Bin\sys_log_x86.dmp → Corrupted file error;  (purpose unknown)
  • Recycle Bin\0x892A.bin → Corrupted file error; 0x892A.bin could suggest hex->binary which is 1000100100101010  (purpose unknown)
  • Recycle Bin\user_profile.dat → Corrupted file error;  (purpose unknown)
  • Recycle Bin\mem_dump.sys → Corrupted file error;  (purpose unknown)
  • My Computer\(A:) → Error Reading Drive error;  (purpose unknown)
  • My Computer\(C:) → Access Denied error;  (purpose unknown)
  • My Computer\Control Panel → Access Denied error;  (purpose unknown)
  • My Computer\Printers → Access Denied error;  (purpose unknown)
  • DOCS\CITF_MEMO.TIF → Enter Password prompt; may be referring to Criminal Investigation Task Force - Wikipedia  (current focus, unknown)
  • DOCS\confo → newly observed on February 11th, 2026, opens a simulated notepad that appears to contain a conversation discussing our attempts to solve the ARG

Broken cursor

On both css’s for the terminal and for the desktop, there is a cursor object that does not render. Many attempts have been made at visualizing it or deciphering it.  It’s unsure whether or not this cursor is a red herring or has something encoded in it.  Additional info can be found here: broken cursor

Other Interactions

  • Initial login plays Windows 95 login sound.
  • All errors trigger the same error sound effect
  • Clicking the Start button only allows the user to click Shut Down… which returns the user to the terminal page.                                                              

  • Mouseover on time shows the local date.

Code Deobfuscated

Here is a repo of all of the data on the source code of the blackfile-index website that we have:
https://drive.google.com/drive/folders/181gUaxFIuxnk0leSdHnM2FnUw9-RkgnO

It includes the payload injection, the obfuscated code, and the deobfuscated code for every minor update/change made to the website by the GM.

Password Terminal

Terminal Passwords:

  • The password “THE_TRUTH” was found after inspecting the website javascript.  Initially it only gave the text “ACCESS GRANTED. LOADING…” without redirecting, but on January 6th the code was changed to hide the password and redirect the user to a windows 95 desktop.

  • Typing “help” into the password box gives the response “There is no help for you here”.  Finding a second working prompt means there are likely additional currently undiscovered words that cause reactions from the site.

README.md

Read Me Page:

A readme file was discovered at https://www.blackfile-index.org/README.md and believed to have been accidentally left in.  However, the text began counting down daily starting on 12/30/2025

Day 0: # 4kind-arg

Day 1: # 3kind arg///it=notfound

Day 2: # 2kind arg///it=notfound

Day 3: # 1kind arg///it=notfound

Day 4: # 0kind arg///it=notfound

One day after the countdown reached 0 this message appeared:

0kind

It=stillnotfound

Sacrifice.complete=true

Initializing message...

“If I’m lost, the backup coordinates can be found on Earth near where east meets west: An ancient sea bridge, an island between B and C, bodies both. I have a yankee sixth sense about it. Two ivory towns. Carry the cross into the Mine, just the whole numbers, sixty three times raise the parallel, just twice the long.”

The consensus is that the most likely explanation is that this is pointing to an island in the Bering Straight (either Little Diomede or St. Lawrence) and saying that we need to convert the coordinates of that island into minecraft.

 

Apr 9, 2026 JST - there is a potential solution to the README.md below:

(May 9, 2026 - another potential solution [below Euphoric’s])

Authored and method by @TH3EEuphoricFan1161 in the Snackers HQ discord.

(Disclaimer: This solution was found from the riddle to the shremple, it was not reverse engineered.  I am adding this here because many have gotten the wrong interpretation)

The README Riddle (aka countdown riddle)

Found at https://www.blackfile-index.org/README.md and a small history can be found in the blackfile-index.org tab.  The riddle:

0kind

It=stillnotfound

Sacrifice.complete=true

Initializing message...

“If I’m lost, the backup coordinates can be found on Earth near where east meets west: An ancient sea bridge, an island between B and C, bodies both. I have a yankee sixth sense about it. Two ivory towns. Carry the cross into the Mine, just the whole numbers, sixty three times raise the parallel, just twice the long.”

Potential Solution Steps

“If I’m lost, the backup coordinates can be found on Earth near where east meets west: An ancient sea bridge, an island between B and C, bodies both. I have a yankee sixth sense about it.”

 → Likely means St. Lawrence Island

  • It is near the international date line where east meets west
  • The bearing straight used to be a land bridge connecting the Russia and Alaska
  • The island sits between the Bering Sea and the Chukchi Sea
  • It is the USA’s 6th largest island “yankee sixth sense

“Two ivory towns.”

→ There exist two towns on St. Lawrence Island, Gambell and Savoonga

“Carry the cross into the Mine, just the whole numbers, sixty three times raise the parallel, just twice the long.”

→ The idea here is that the two towns give coordinates, somehow we should take the cross product of these, and convert the result to Minecraft coordinates.  The latter parts give instructions on how.  

Step 1) Define both a Cartesian and spherical coordinate system that we center the Earth on

Step 2) Convert the longitude and latitude of each town into a vector in the spherical coordinate system

Step 3) Convert the vector for each town into the Cartesian coordinate system

Step 4) Calculate the cross product of these two vectors (also calculate the reverse ordering)

Step 5) Take the resulting vector in the Cartesian coordinate system and convert back to the spherical coordinate system

Step 6) Extract the latitude and longitude from the vector in spherical coordinates

Step 7) Convert latitude to the Minecraft Z coordinate by adding 63 and rounding down for the whole number “sixty three times raise the parallel” then “just the whole numbers” (Note the idea in this step is not new and has been around for a while)

Step 8) Convert longitude to the Minecraft X coordinate by squaring and rounding down for the whole number “just twice the long” then “just the whole numbers” (Note the idea in this step is not new and has been around for a while)

(see Appendix I below for discussion on other interpretations and results)

The idea of taking a cross product is not new, however, the method here is.  I cannot find anyone before trying/mentioning the idea to use 3D spherical coordinates as part of the steps.

The Math

First we will define our Cartesian and spherical coordinate system as shown below in Figure 1.  This choice nicely aligns latitude with phi and longitude with theta.  r could be chosen, however, we will see that when extracting the angular values at the end, input r values cancel.  

Figure 1. Coordinate system setup

Next, we may begin to create the vectors in spherical coordinates, one for each town denoted by the first letter of the town.  The result is shown in Figure 2.

Figure 2. Input vectors in spherical coordinates

Next we can convert these vectors in Figure 2 into the Cartesian coordinate system defined in Figure 1.  This step is crucial as the cross-product is not well defined in spherical coordinates.  The result is shown in Figure 3.

Figure 3. Input vectors converted to Cartesian coordinates

Next we take the cross product of the two vectors.  Order of the vectors matters in the cross product, I will show one ordering.  The other ordering can be obtained by swapping the subscript labels in Figure 4.

Figure 4. Vector resulting from the cross product

We define x_f, y_f, and z_f to reduce clutter and note these rely only on the input angles, not r inputs.  Now with the vector resulting from the cross product, we can convert back into the spherical coordinate system shown in Figure 5.

Figure 5. Conversion back to spherical coordinates

Note that the angular components theta_f and phi_f depend only on the input angles!  Extracting the new latitude and longitude, shown in Figure 6, we see that they are completely independent of r inputs.  We can conclude that if we only care about extracting the angular information, we can input any arbitrary r.  (A special thanks to catcaughtyourtongue/@coggers5644 in the Snackers HQ discord for the discussion leading to me deriving this result)  The convention used in my code (see Python Scripts section) is to use r = 1, placing this on the unit sphere.  

Figure 6. Extracting latitude and longitude from the vector in spherical coordinates

Finally we can now convert the resulting latitude and longitude to Minecraft coordinates.  We add 63 to the latitude then round down to find the Minecraft z-coordinate.  We square the longitude then round down to find the Minecraft x-coordinate.

The Coordinate Solutions

The coordinates I used as input latitude and longitude are shown in Figure 7.  These are taken from Google Maps’ latitude and longitude coordinates for the towns.

Figure 7.  Input coordinates from Gambell and Savoonga

The two resulting minecraft coordinates are (remember the cross product result in two solutions depending on the ordering of the input vectors):

  1. Using the ordering Gambell vector then Savoonga vector: X = 0, Z = 88
  2. Using the ordering Savoonga vector then Gambell vector: X = 32143, Z = 37

See Appendix I below for info on all solutions and results

The 2nd of these solutions leads to the so-called “shremple” which “was found by Liquid/@liquidwater2 in the Snackers HQ discord on 3/17/2026 using the konami code riddle” (see the Konami Code page), a photo of which is shown below in Figure 8.  Note this README riddle came before the Konami code riddle and it is very possible they both point to the same structure.   If this is the case, we can at least know what this README riddle means.

Figure 8.  The “shremple” a portmanteau of shrine + temple

Python Scripts

To calculate the result, I put together a python script.  I have made it publicly available in a github https://github.com/EuphoricFan1161/filianarg_scripts.  The script “cmdline_cross_prod_of_spherical.py” is in the sub directory “Blackfile-Index_Countdown_Riddle”, feel free to try it yourself and check my code.  A special thanks to Tyler/@tylerginn_ in the Snackers HQ discord for their suggestion to use atan2(), which cleaned up the conversion from Cartesian coordinates to spherical coordinates section a lot.  I will update the readme.txt file to point back to here when I get a chance.  Below in Figure 9 is an example of the terminal output from running this code with options -ic and -v.

Figure 9. Script results with -ic and -v options (and a fun Diomede reference)

Comments/Updates

Apr 9, 2026 JST:  Uploaded this document to the official ARG doc, added latitude and longitude coordinates I used as input.

Apr 9, 2026 JST:  Lost access to my gitlab ¯\_(ツ)_/¯ → rehosted on github.  The link is updated above.  Also updated all mentions to the Name/Username convention :3

Apr 9, 2026 JST:  Fixed a mistake I made when writing out the equation in Figure 4 (I accidentally wrote cos where it should have been sin)  The code result is unchanged and now following the equations in the new Figure 4 you can calculate the same result as the code.

Apr 19, 2026 JST: Rechecked all reasonably possible results from the cross product in nether and end.  Added Appendix I to categorize all results below

Apr 21, 2026 JST: Completed double check of all coordinates in Appendix I

May 3, 2026 JST: Added disclaimer about how this solution was not found by reverse engineering.  I think it may be detrimental to the broader knowledgebase if the wrong impressions are formed about how this solution came about.

Appendix I - Table of All Results (Below)

There are a few ways to read the final sentence of the riddle, notably the mathematics.  These could in principle be read as addition, multiplication, and taking a power.  There is also the ordering of when to take the whole numbers, either before or after these operations.  Finally there is how to take the whole numbers, simply rounding down seems most sensible, but I also include rounding to the nearest whole number where it is relevant.  In the table below, I lay out all readings I see as feasible and their results.

Different ways to read the riddle

Resulting Minecraft

Coordinates

Results

X = No Structure in ANY dimension

When/how to take the whole numbers

Mathematical operation on latitude

Mathematical operation on longitude

After cross product

Before applying other operations

Rounding
down to nearest whole number

Addition (+63)

Addition (+2)

X = 181, Z = 37

X

X = 1, Z = 88

X

Addition (+63)

Multiplication (x2)

X = 358, Z = 37

X

X = -2, Z = 88

X

Addition (+63)

Power (^2)

X = 32041, Z = 37

OW close to Shremple <60 blocks away

X = 1, Z = 88

X

Multiplication (x63)

Addition (+2)

X = 181, Z = -1638

X

X = 1, Z = 1575

X

Multiplication (x63)

Multiplication (x2)

X = 358, Z = -1638

X

X = -2, Z = 1575

X

Multiplication (x63)

Power (^2)

X = 32041, Z = -1638

X

X = 1, Z = 1575

X

Power (^63)

Addition (+2)

X = 181,
Z = 1.175x10^78

Impossible Z val

X = 1, Z = 1.175x10^78

Impossible Z val

Power (^63)

Multiplication (x2)

X = 358,
Z = -1.391x10^89

Impossible Z val

X = -2, Z = 1.175x10^78

Impossible Z val

Power (^63)

Power (^2)

X = 32041,
Z = -1.391x10^89

Impossible Z val

X = 1, Z = 1.175x10^78

Impossible Z val

After cross product

Before applying other operations

Rounding to nearest whole number

Addition (+63)

Addition (+2)

X = 181, Z = 38

X

X = 2, Z = 88

X

Addition (+63)

Multiplication (x2)

X = 358, Z = 38

X

X = 0, Z = 88

X

Addition (+63)

Power (^2)

X = 32041, Z = 38

OW close to Shremple <60 blocks away

X = 0, Z = 88

X

Multiplication (x63)

Addition (+2)

X = 181, Z = -1575

X

X = 2, Z = 1575

X

Multiplication (x63)

Multiplication (x2)

X = 358, Z = -1575

X

X = 0, Z = 1575

X

Multiplication (x63)

Power (^2)

X = 32041, Z = -1575

X

X = 0, Z = 1575

X

Power (^63)

Addition (+2)

X = 181,
Z = -1.175x10^78

Impossible Z val

X = 2,
Z = -1.175x10^78

Impossible Z val

Power (^63)

Multiplication (x2)

X = 358,
Z = -1.175x10^78

Impossible Z val

X = 0,
Z = -1.175x10^78

Impossible Z val

Power (^63)

Power (^2)

X = 32041,
Z = -1.175x10^78

Impossible Z val

X = 0,
Z = -1.175x10^78

Impossible Z val

After cross product

After applying other operations

Rounding
down to nearest whole number

Addition (+63)

Addition (+2)

X = 181, Z = 37

X

X = 1, Z = 88

X

Addition (+63)

Multiplication (x2)

X = 358, Z = 37

X

X = -2, Z = 88

X

Addition (+63)

Power (^2)

X = 32143, Z = 37

OW Shremple

X = 0, Z = 88

X

Multiplication (x63)

Addition (+2)

X = 181, Z = -1635

X

X = 1, Z = 1634

X

Multiplication
(x63)

Multiplication
(x2)

X = 358, Z = -1635

X

X = -2, Z = 1634

X

Multiplication (x63)

Power (^2)

X = 32143, Z = -1635

X

X = 0, Z = 1634

X

Power (^63)

Addition (+2)

X = 181,
Z = -1.212x10^89

Impossible Z val

X = 1, Z = 1.212x10^89

Impossible Z val

Power (^63)

Multiplication (x2)

X = 358,
Z = -1.212x10^89

Impossible Z val

X = -2, Z = 1.212x10^89

Impossible Z val

Power (^63)

Power (^2)

X = 32143,
Z = -1.212x10^89

Impossible Z val

X = 0, Z = 1.212x10^89

Impossible Z val

Another way to solve the riddle

(by fog_runner, 09.05.2026).

After we got info of two new IRL locations, Just Call Me 'L' suggested to use them as a part of the riddle:
“Saw that these were located in two different places of the world. 1st image was from Japan, the 2nd image was LA. Old riddle said "If i'm lost, the backup coordinates can be found on Earth", "...between bodies B and C" ...a literal human body, and a body of land on a wall. Possibly between the two places (literally on a map) could be a clue”. L posted the following image.

I decided to follow this trail mostly because the visual "cross" imagery is too strong - the LA-JP line (yellow) crossing the Emperor seamount chain (white-ish perpendicular line on the map above), which fits the part of the old riddle about "carrying the cross". Also the Emperor seamount chain is close to the international Date Line and generally fits the description of "east meets west"

Two different possibilities emerge - I either look for existing islands or submerged structures.

1. Existing islands are mostly further south along the Hawaiian part of the Hawaiian-Emperor seamount chain. If I look there, I find two candidates – 1) Pearl and Hermes atoll or 2) Midway atoll.

The first ones have a lot of white corals and the name pearl itself invokes the “ivory nature”. But the only “yankee” part about them is that they are American Northwestern Hawaiian Islands. Nothing about the “six”.

The Midway atoll has American base on it, and also a Memorial U.S. Marines Sixth Defense Battalion. So it hits the “yankee” part and the “six”, and it also an atoll (white coral island with white sands) which consists of two distinct above-water parts.

the problem with this way of interpretation is that it forces to go down from the “two body” line (the Japan-LA one that we have right now).

2. The underwater structure route. This allows us to stay within the Emperor Seamounts parts exactly. The chain consists of guyots which look like giant underwater mountains with flat tops (like table surfaces). As the name suggests, most of them have names of Japanese emperors, except for one which has an American name (“yankee”) – Detroit Seamount (which seems to be named after light cruiser USS Detroit for some reason). Wikipedia also has the list of emperor seamounts with additional non-Japanese names, but all of them are located further south towards Hawaii.

Several Emperor guyots have extensive white carbonate platforms formed from ancient reefs and shallow marine sediments, but the only one that fits the description (that I have found) of “two ivory towns” is the Nintoku Seamount, which has two prominent ridges, lots of coral fragments, evidence of former atoll conditions.

For all locations I multiplied the whole numbers of coords according to the riddle (63 times the N/S and 2 times the W/E).

1) Pearl and Hermes atoll. 27.8611°N 175.8529°W. 1701 and 350.

2) Midway atoll. 28°12′27″N 177°21′00″W.1764 and 354.

3) Detroit Seamount. 51°28.80′N 167°36′E. 3213 and 334.

4) Nintoku Seamount. 41°4.80′N 170°34.20′E. 2583 and 340.

Out of these four, the one that stands out the most is Detroit Seamount. If we look at Shemple bounds we see the following space: X 32116 to 32176, Y -58 to -22, Z -45 to 36, we see that 3213 and 334 easily form the X through combination: 32134. This suggests to me that the “3” was supposed to be interpreted as a point of connection («carry the cross»?).

The second variant is more cross-like visually and gives two numbers – 32134 and 34, which fit X perfectly, but to get -34 for Y it requires a bit of moon logic – that the number 334 points downwards and thus should be interpreted as a minus. Or the 34 can be taken as is and can signify the Z dimension (it can also be taken as a negative and still work for the Z bounds).

It is possible that the "B and C, bodies both" part of the riddle was supposed to be interpreted some other way originally, and it would lead us to Shremple, but it's just too polysemantic. Who knows.

Conclusion for now: we are being purposely pointed back to Shremple, so possibly there is more to it as Hadez and Euphoric suggest.

But also I have a new location, if we apply the same logic to the other coords which can be "crossed" - the Nintoku Seamount. It gives us coords X = 25840, Z = 30 or 40 (or Y as -30 or -40). Please explore once the MC is back online. Although it's not as fitting as Detroit Seamount (it has only one point of connection, one "3" in it) and thus may be wrong

The are many Emperor Seamounts (including one with the name "Suiko", but I don’t want to get baited by this), maybe other ones can point to new locations as well when transformed using the same riddle, if they have the necessary "cross" structure like Detroit Seamount coordinates.

Diomedes relative to the JP/LA - Emperor seamount chain cross:

All things were rather close to each other

Ocean map of the similar area (look up-left for the Emperor Seamounts):

 

-Konami Code

Konami Code

Timeline:

  • At 4:41 am central on 3/17/26 the website was updated.  You can now input the konami code (up up down down left right left right a b enter) to get the music notes CBACG, and the following message read aloud by a robotic voice:
  • A structure resembling a pyramid/ziggurat was found by Liquid (liquidwater2 on discord) on 3/17/2026 within an obsidian box.  The riddle solution is as follows:
  • X-coordinate (Box bounds are 32116 to 32176):

The five notes played at the beginning of the message are C, B, A, C, G (all in the 4th octave). When each note is converted to its position in the alphabet, this gives 3, 2, 1, 3, 7, forming the number 32137, so 32137 is X.

  • Y-coordinate (Box bounds are -58 to -22):

Water is technically filtered by boiling. The boiling temperature of water is 100° Celsius. It also says lose 127, so doing 100 - 127 yields -27, so -27 is Y.

  • Z-coordinate (Box bounds are -45 to 36):

All the mentioned events from the last segment date back to the 1700s. The capitalization spells out the word CENTURY. 1700s are the 18th century, so 18 is z.

  • This structure has been dubbed the Shremple and is continued in the relevant tab.

CITF_MEMO.TIF

There are a few theories as to where the password might be hidden, but none have been found yet.

Theories include solutions to the Shremple and Livestream 1 and Broken Cursor as possible sources. (and probably more, but I haven’t seen any of the ideas pitched)

Checked Passwords

We have a bot brute forcing the password, not that we really think this is the intended solution.

Extreme Caution is required if you’re thinking about creating your own brute forcer. It is VERY easy for this kind of method to accidentally turn into actual illegal activity.

Generally, ARG passwords are intended to be solved by completing the puzzles rather than simply checking every possible combination of chars. We are not completely confident brute forcing is ‘in-bounds’ of the ARG.

The password will be (or likely already has been) given to us somehow. It’s just a matter of finding it.

By makedonski (sqlite database, around 11.5 million records, updated daily) : codes

Additionally, these passwords have been manually checked:

–TODO - add list of passwords derived from potential puzzle solutions

convo

Notes by Asa:

  • Inconsistent capitalization - hidden text message?
  • Extra spaces in certain spots - char count per line matters?
  • Unable to resize the window - supports ^ thought…


Text Version:

Me: hey.

J: Hey. Any updates on the girl?

Me: Not yet…

J: “...” ?

Me: There’s been a hiccup.

J: What do you mean?  I don’t like how vague this sounds.

Me: It looks like anonymous users have been interacting with the

desktop environment…

J: How? Everything’s encrypted.

Me: Who knows. Hackers? Shoddy programming? Internal leaks? Hard

to say.

someone could be feeding the public info as well…

J: Have they viewed any sensitive info?

Me: no.  The docs are still password protected, nobody’s found or shared the pw to anything there.

J: Alright.  Keep it that way.

Recycle Bin

One of the files in the recycling bin is named 0x892A.bin which might have some significance to a theory about the Shremple’s Towers

broken cursor

Researched and written by Makedonski_cf

1. I took a Base64-encoded string from the website’s styles and then decoded it into binary format.

2. I learned the ICO file structure (https://en.wikipedia.org/wiki/ICO_(file_format)) and started parsing the file byte by byte.

As a result, I learned that the ICO file stores an image in BMP format and that the icon size is 32×32.

The problem was that the data in the header contradicted itself, but since this information is not critical (it is duplicated inside the BMP), I simply skipped it and proceeded to parse the BMP.

Important: ICO files contain two images — one is the actual image, and the other is a mask that determines which pixels are transparent.

3. I learned the BMP file structure (https://en.wikipedia.org/wiki/BMP_file_format) and also started parsing it byte by byte.

Here I encountered the same issue: the headers contained contradictory information.

The only confirmed value was the icon size — 32×32.

I tried to determine the beginning of the image data, but with corrupted data this is not entirely possible: images may use a color palette of varying size, or there may be no palette at all.

Therefore, I chose the minimum possible offset (according to the BMP version 3 specification) and assumed that the image data started there.

P.S. There is a problem with this approach: we cannot be sure that we selected the correct offset (a single extra pixel shifts all subsequent ones). I provided all possible offset versions (there are 32 of them).

4. A new problem appeared: I do not know the bit depth of the image pixels, since the header contained nonsense regarding this.

However, I do know the image size (32×32 image + 32×32 mask = 32×64), as well as the number of remaining bytes.

506 bytes × 8 bits / (32 × 64) ≈ 2 bits per pixel.

It does not divide evenly, apparently because 6 bytes are missing somewhere. So I added six zero bytes at the end of the image.

Now we know that the image uses 4 different colors, so I selected an arbitrary palette:

#161616

#ab4646

#8f9bf6

#f0f0f0

5. As a result, I had all the necessary information to reconstruct the file. I rebuilt it manually (https://hexed.it/) according to Wikipedia.

However, after reconstruction, it would not open in anything except GIMP. Presumably, this is because I used an outdated BMP format during reconstruction (it is shorter).

P.S. Why did I decode the image as BMP instead of ICO? According to the ICO structure, the second half of the image should be a mask, but this did not match reality.

The mask is supposed to be 1-bit and have padding bytes at the end of each row (so that it has the same row width as the original image).

Since, according to the data, this was not the case, I decided that the best solution was not to ignore the mask, but to include it as the second half of the image instead.

Preview of “cursor” image:

 

Archive with all possible offsets: cursor

Update by Makedonski

I've been struggling with the cursor for a few days now (I'm 75% sure there's something there), so I'll post it here.

I ran RLE on the bitmap data and got the following sequence:

53 3 5 3 5 3 52 4 4 4 4 4 52 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 3 5 3 5 3 53 4 4 4 4 4 53 3 5 3 5 3 76 66 48 60 48 4 24 20 46 4 26 20 46 4 26 20 46 4 26 20 46 4 26 20 46 4 26 20 46 4 26 20 46 4 26 20 46 4 26 20 46 4 26 20 46 5 25 20 46 104 48 60 44 64 52 4 48 4 48 4 54 4 46 4 54 4 46 4 54 4 46 4 54 4 46 4 54 4 46 4 54 4 46 4 54 4 46 4 54 4 46 4 54 4 48 4 44 64 16

There are obviously repeating patterns, so I replaced them with letters:

53 3 5 3 5 3 = a (sum 72)

52 4 4 4 4 4 = a1  0

52 3 5 3 5 3 = a2 -1

53 4 4 4 4 4 = a3 +1

46 4 26 20 = b   (sum 96)

48 4 24 20 = b0    0

46 5 25 20 = b1    0

54 4 46 4 = c    (sum 108)

52 4 48 4 = c0     0

54 4 48 4 = c1    +2

a a1 a2 a a a a a a a a a a a3 a 76 66 48 60 b0 b b b b b b b b b b1 46 104 48 60 44 64 c0 48 4 c c c c c c c c c1 44 64 16

After that, I was left with numbers that don't fit the patterns, but I don't know what to do with them.

Maybe someone will see something in this.

—----------------------------------------------------------------------------------------------------------------------------

Additional cursor info moved here to clean up the doc:

The cursor is stored as base64 and is the following:

'data:image/x-icon;base64,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'

The header designates it is a cursor. The remainder of the header has mistakes in it, primarily the cursor size and where the hotspot is (hotspot is where the computer knows where the ‘hitbox’ of the cursor is or sort of when you click what part of the cursor is used to select the item being clicked).

The broken cursor when viewed flipped and mirrored forms 43

Blackfileindex Channel

Blackfileindex Shorts (yt and instagram)

Searching for “blackfile-index” leads to a youtube channel https://www.youtube.com/@blackfileindex/shorts

There seems to be an instagram account with the same name that posts the same content.

https://www.instagram.com/black.file.index/

Caution: second youtube short had at least 1.8k views when we found it, This is very likely unrelated to the ARG. But worth investigating.

At the time of finding it (Dec 24 3:08 AM PST, reported by fog_runner) the channel had: 1 subscriber, 5 videos (all of them shorts). Short “INCIDENT REPORT #redacted” had 1 comment (“Hello niche community❤❤” from user Notbeau123 who posted it 1 day prior). The short “RESTRICTED ZONE” had 1 comment (“❤️zesdw” from user wendyjazmindeluna8630 who posted it 2 days prior).

Exact videos timestamps (in GMT) by kawai_neko_meow:

RESTRICTED ZONE: Saturday, 20 December 2025, 15:22:42

SLEEP STUDY #redacted: Sunday, 21 December 2025, 14:38:34

INCIDENT REPORT #redacted: Monday, 22 December 2025, 11:14:49

FIELD OBSERVATION LOG #redacted: Tuesday, 23 December 2025, 9:51:21

TEMPORAL RECORD #redacted: Wednesday, 24 December 2025, 9:19:09

ARCHIVED INCIDENT #redacted: Thursday, 25 December 2025, 11:15:55

PERSONNEL LOG #redacted:

SYSTEM RESPONSE LOG #redacted: Sat, 27 Dec 2025 11:11:34

CORRELATION NOTICE #redacted:

REDACTED RECORD #redacted:

INTERNAL REVIEW NOTE #redacted:

Shorts transcripts (by TobiWonKanogy and others):

RESTRICTED ZONE

-- Coordinates : 37.354[ ] [ ], 7.645 [ ]

-- Magnetic interference reported

-- Electronic devices malfunction

-- Headaches reported in children

-- perimeter fenced

SLEEP STUDY / SUBJECT 44

-- Polysomnography initiated

-- No sedatives administered

-- Subject entered REM in 42 seconds

-- Audio recorded during sleep

-- Transcript not included

INCIDENT REPORT

-- Location:Neurology Ward

-- Time: 03:17

-- All monitoring alarms activated

-- No patient movement recorded

-- use undetermined

FIELD OBSERVATION LOG

-- Location: Rural Monitoring Site

-- Automated sensors activated

-- No personnel on site

-- Signal duration : 11 minutes

-- Data incomplete

TEMPORAL RECORD

-- System timestamp mismatch

-- Recorded time advanced by 47 minutes

-- No system restart detected

-- All logs verified

-- Cause undetermined

ARCHIVED INCIDENT

– File Access Restricted

– Multiple sensor conflicts

– Human error ruled out

– Review committee disbanded

– No further action taken

PERSONNEL LOG

Subject failed to report

Access badge last detected on site

No exit record found

Search protocol suspended

Entry archived

SYSTEM RESPONSE LOG:

Anomaly flag confirmed

Automated countermeasures initiated

Manual override unavailable

Monitoring extended

No user notification issued

CORRELATION NOTICE

– Independent systems recorded overlap

– Timeframe alignment confirmed

– Geographic distance deemed irrelevant

– Causal link not established

– Review pending

REDACTED RECORD

– Portions of file removed

– Access level exceeded

– Original author unidentified

– Timestamp integrity compromised

– Record sealed

INTERNAL REVIEW NOTE

– Conflicting entries detected

– Multiple versions of the same record

– Checksum verification failed

– Source discrepancy unresolved

– No correction issued

Revision Notice

-Prior entries marked obsolete

-Replacement record issued

-Legacy data retained

-Synchronization incomplete

-Proceed as normal

Residual Effect Notice

-Anomaly no longer active

-Secondary Indicators persist

-Environmental variance observed

-No mitigation required

-Monitoring reduced

Observer Error Report

-Data capture irregularities noted

-Calibration within accepted   limits

-Discrepancy persists

-Observer bias not excluded

-record accepted as-is

System Trace Detected

-Secondary environments affected

-Local data irregularities logged

-Cross-check incomplete

-No immediate action required

-Monitoring ongoing

Room Access Log

-Ward: Internal Medicine

-Scheduled vacancy confirmed

-Environmental shift detected

-Cause undetermined

-Re-entry permitted

Internal Review

-Environment previously marked stable

-No environmental shift recorded

-Residual variance detected

-Source: same location

-Entry accepted

Auto-correction Routine

-Previous entries re-evaluated

-Variance reclassified as noise

-No actionable anomaly present

-Monitoring frequency reduced

-Routine resumed

Status Confirmation

-Environment integrity verified

-No unresolved discrepancies

-Auto-correction successful

-Further review unnecessary

-File Closed

TRANSMISSION RESUMED

- Upload delay acknowledged

- External access interrupted

- Data backlog detected

- File integrity pending

- Monitoring reinstated

FILE STATUS UPDATE    

- Previously closed entry accessed

- Access origin unresolved

- Review window reopened

- No authorization record found

- Monitoring resumed

UNOFFICIAL SIGHTING

- Reports submitted by civilian source

- Classification pending

- No response issued

- Entry stored without review

- Follow-up not authorized

ADDITIONAL REPORTS LOCATED

- Similar entries detected

- Civilian sources unverified

- Pattern recognition incomplete

- Archive load increasing

- Escalation not approved

TRANSMISSION ERROR

- Entry received incomplete

- Frame loss detected

- Audio channel unstable

- Partial storage successful

- Resubmission pending

ENTRY RESUBMITTED

- Transmission stabilized

- Previous loss confirmed

- Internal note appended

- DO NOT RELEASE FULL INDEX

- Public access remains active

ENTRY ZONE OUTSIDE AUTHORIZED MAP

- SIGNAL LOSS BEGINS AT KM 3

- DO NOT PROCEED

FILE PARTIALLY RECOVERED

- CONTENT NOT SAFE FOR RELEASE

EXTERNAL MONITORING ACTIVE

- NO INTERVENTION AUTHORIZED

CONTAINMENT PROTOCOL ACTIVE

- ACCESS RESTRICTED

FILE VERSION UNKNOWN

- PREVIOUS ENTRIES MAY BE INACCURATE

UNAUTHORIZED AUDIO COPY

- SOURCE UNVERIFIED

Observation ongoing

(no other text on this one video itself might have some text hidden inside)

SYNC VARIANCE OBSERVED

(no other test, very high pitched noise last second or two)

Coordinates 37.354[ ] [ ], 7.645 [ ]

Interpretation №1.

If we look at Wplace similar location, we get this:

https://wplace.live/?lat=37.37860874774289&lng=7.5317867780273335&zoom=12.586042469100192

Algeria, a place close to Annaba (sector 5 on Wplace). Image itself:

Number 44 is “Killian”. Short №2 talks about Subject 44. Maybe another coincidence.

The pixels of the name “Killian” were painted by user Lunr eclipse #3622068 who has the next image next to their name (according to Wplace). Their discord name seems to be “Lunreclipse.art”.

If we flip the coordinates around:

Possible relevance of time mentioned in shorts

Error 404 (Filian is lost and not found)? Error 415? Unsupported Media Type? (#schizo)

Audio Analysis:

TEMPORAL RECORD:

Inverting one audio channel and combining to mono gives this visual and audible pattern:

In American Morse this could spell: cio ps iie

Could be 3 different samples. Spelling roughly:

Abccbcabbccabcbcbaaaaaaaacccccbcccabbbbbbbbccaccabcacc

Or Morse: .. . --.. -. . ----- ..... ...- .. ..- .-  resulting in: iezne05viua

SLEEP STUDY:

Mixing the stereo channels down to Mono will reveal this pattern above 15khz

ARCHIVE INCIDENT:

Mixing stereo channels reveals a pattern similar to SLEEP STUDY:

Personnel Log:

Stereo trickery again. Ticking noise at 7kHz:

Mixing to Mono destroys most ticks:

SYSTEM RESPONSE LOG:

Again, ticking at 7khz. Stereo to mono mixdown destroys the ticks.

Seems to be spelling 24211 or 24111

Attempt #2 at decoding the “Temporal record” pattern.

Tried to treat the pattern similar to “6-22-22”. Then if I see one space between two brighter “dots” I treat it as a digit separator, and if there is a larger space between the “dots” I treat it as a space between two different numbers.

Applying this logic I got: 21 2 11 53 22 1.

Applying a geohash decoder to this sequence gives coordinates Lat (λ)    -37.77506500482559, Lng (φ)    -179.95433270931244, just water to the right of New Zealand. Wplace also yields nothing.

Applying the default polybius grid (and rearranging the sequence into 21 21 15 32 21) yields FFEMF. If I delete single digits and apply the grid to the sequence 21 11 53 22 I get FAXG.

(anyone wants to consider the use of virtual fax machines? :schizo-clap:)

Not much of anything right now.

Attempt #3 at decoding the “Temporal record” pattern.

Here is the string of symbols I get when I look at it.

---..-.---..--.-.--------.....-...---------..-..--.--- (total of 54 symbols).

( “-” as darker segments, “.” as brighter segments). If I also try to decode it with “timing” representation in cryptii.com (signal on as “.” and signal off as “-”) I get “sh x 5”. The difference from the original version is just 2 additional spaces.

So next I transformed the string into binary 000110100011001010000000011111011100000000011011001000 (“-” into “0”, “.” into “1”). Tried to separate it into several different combinations and turned the result into decimal. Decimal for the original string is 1843469210355400.

Separated into 2 strings:

000110100011001010000000011 111011100000000011011001000

Decimal: 137340915 124782280

Separated into 3 strings:

000110100011001010 000000011111011100 000000011011001000

Decimal: 26826 2012 1736

Separated into 6 strings:

000110100 011001010 000000011 111011100 000000011 011001000

Decimal: 52 202 3 476 3 200

Into 9 strings:

000110 100011 001010 000000 011111 011100 000000 011011 001000

Decimal: 6 35 10 0 31 28 0 27 8

Into 18 strings:

000 110 100 011 001 010 000 000 011 111 011 100 000 000 011 011 001 000

Decimal: 0 6 4 3 1 2 0 0 3 7 3 4 0 0 3 3 1 0

And 27:

00 01 10 10 00 11 00 10 10 00 00 00 01 11 11 01 11 00 00 00 00 01 10 11 00 10 00

Decimal: 0 1 2 2 0 3 0 2 2 0 0 0 1 3 3 1 3 0 0 0 0 1 2 3 0 2 0

Tried to apply base 26 cipher and some other variants to a few examples but wasn’t too thorough. It yields number-letter strings, maybe something can be used as a part of yt url or something. I haven’t found anything of use yet.

Tried to apply XOR Cipher to everything and got nothing.

The only other idea I have is to use a cipher key from previous steps. Maybe “THE_TRUTH” or something. But it also hasn’t yielded any obvious results yet.  

UNOFFICIAL SIGHTING:

Theory:

The notes/tempo/key/chord played in the background audio of Jan 30th  short "UNOFFICIAL SIGHTING" are significant to the ARG, perhaps they are supposed to correlate with something unsolved, and are meant to point the ARG towards something.

-------------------------------------------------------------------------------------------------------------------------------

BPM observations:

-Beginning notes tempo 180bpm

-later notes tempo 90bpm

Could be written on sheet music as 4/4 90 bpm

-------------------------------------------------------------------------------------------------------------------------------

Frequency observations:

NOTE: For this section, I used a recording of the YT short in audacity, and high pass filtered the audio with the settings in Ref 0.1. This was because the base audio has a lot of rumbling bass notes, and they skewed the spectrum plots pictured below.

The section with lower pitched notes goes:

406hz -> G# (x8) Ref 1.1

323hz -> E  (x8) Ref 1.2

302hz -> Eb (x8) Ref 1.3

270hz -> C# (x8) Ref 1.4

with spectro analysis, it seems these are not single notes, but chords instead. Additionally, many of the frequencies do not seem to line up with music notes. The frequencies are a little flatter than the corresponding note. Frustratingly, this makes the chords nearly unidentifiable. Many of the frequencies seem to be pitched between notes. Attempting to replicate a chord with true music notes does not sound like the frequency chords. The sound comes out either in the wrong pitch or tone.

The 2nd "note" is the most spectrographically dense, consisting of the frequencies shown in Fig 1.2 the full list of notes that are the closest match to the frequencies are: Eb E G Bb Eb G. This does not match any common chords, and quite frankly sounds displeasing to the ear when played back on piano. The mixed frequencies have a much more "smooth" sound.

 

The section with higher pitched clear notes goes:

643hz -> E  (x4) Ref 2.1

606hz -> Eb (x4) Ref 2.2

481hz -> B  (x3) Ref 2.3 *NOTE it kinda sounds like a 4th note begins to play, but I cant tell if it got cut in the YT Shorts looping system or if it was actually 3 notes.

Similarly to the lower note section, the frequencies for the higher notes do not seem to perfectly line up with music notes. They are all slightly off. Some are a wider range of frequencies, Most are slightly flatter than the notes they correspond to the closest. However, the last three frequencies are a little cleaner than the low note section.

-------------------------------------------------------------------------------------------------------------------------------

Conclusion:

I entered these notes and chords into a website named chord identifier, and was unable to make any combination that makes a recognizable chord or key. This is the end limit of my musical knowledge. I am at the end of my abilities for this topic. :/

-Ratwagonz

 URL For chord identifier -> https://www.scales-chords.com/chordid.php

—---------------------------------------------------------------------------------------------------------------------------

REFERENCES

Ref 0.1 -> Audacity high pass filter settings

Ref 1.1 -> Note “G#”

Ref 1.2 Note “E”

Ref 1.3 Note “Eb”

Ref 1.4 Note “C#”

Ref 2.1 Note “E”

Ref 2.2 Note “Eb”

Ref 2.3 Note “B”

Shorts narrative ideas

Maybe something of use, maybe schizo. Choose yourself