Investigator Scheurmann R.​ found this internet site.

Investigator Scheurmann R.​ found this internet site. It appears to be a countdown. It will reach zero at midnight CEST. Any idea what this may mean?

PS: "NL-1331" has not been written by me. It just appeared after I posted the Link.
http://104.197.36.184/

Comments

  1. Martin Zehetmayer​ His "deep web crawlers" came across it. This site was registered almost exactly two years ago.

    ReplyDelete
  2. thedeacon 1972​​​ Port 22 is also open. Sadly I am travelling and have limited possibilities to login. Search for user/pass - maybe there is something interesting.
    Edit: You need a responding private key.

    What was registered 2 years ago? The IP subnet?

    ReplyDelete
  3. It seems official. There aren't many groups that refer vaguely to the #NewWave  groups with non-specificity. The counter's in the negative for me now GMT+10

    http://184.36.197.104.bc.googleusercontent.com/notyet

    It's counting down until 2016-8-26

    ReplyDelete
  4. Martin Zehetmayer don't try and access someone's server without permission. :X

    ReplyDelete
  5. http://104.197.36.184 redirects to http://104.197.36.184/notyet, implying to me that the backend is checking for some event or condition, and since
    that hasn't happened yet, it's redirecting to /notyet. Also, it has the following, implying it might be a 404 page:




    Error: 404





    NL1331 - v0 is in the title tags of the page's HTML, that's where that comes from. And the time zone appears to be irrelevant, as the timer appears to be driven by this little bit of Javascript:



    Now, as for what happens once the countdown hits zero, that's anyone's guess, though it doesn't look like /notyet has any logic for the countdown hitting zero, so you might need to reload http://104.197.36.184, and not just simply refresh the page, though the backend web server might be smart enough to catch that.

    ReplyDelete
  6. I stand corrected, it is probably counting down to midnight UTC on August 26th, according to documentation for the Date object:


    https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Date/parse

    The Date.parse() method takes a date string (such as "Dec 25, 1995") and returns the number of milliseconds since January 1, 1970, 00:00:00 UTC.

    The Date.now() method returns the number of milliseconds elapsed since 1 January 1970 00:00:00 UTC.

    ReplyDelete
  7. And, I may have been in error in my last statement, as the countdown just passed 40,000,000 milliseconds a little while ago, and that is 11 hours, 6 minutes, and 40 seconds from now, or midnight in CST (Nashville, TN, for me). So I'm not sure exactly what it's counting to, but it seems to imply that something might change in the next 24 hours. :)

    ReplyDelete
  8. You probably have found the count down clock for one of the registration deadlines for the anomalies/NL1331 stop sites.

    ReplyDelete
  9. Lazerath Myrddyn​ that's what I thought originally, but it didn't seem to be associated with any domain and I couldn't find cross reference anywhere. Maybe it wasn't meant to be found yet?

    ReplyDelete
  10. Scheurmann R.​ Ethan is over in Europe. If the van is over there then it makes sense to me due to the GMT/UTC adjust for Wroclaw since that's when that timer runs out. 
    https://nlewroclaw.splashthat.com/#settings

    ReplyDelete
  11. Alastair Gilfillan​ I am sure the NWR has a strong security and is not afraid of a simple portscan.

    Why else would they bind SSH to the standard port and put it on the internet?

    ReplyDelete
  12. Martin Zehetmayer because that's standard. 😏🙃

    ReplyDelete
  13. The timer is now set for july...whoops!? :P

    ReplyDelete
  14. Nope, the Javascript Date object constructor accepts values of 0-11 for the month. The previous version of the script was using Date.parse() instead. That threw me initially as well.

    ReplyDelete
  15. 😂 I wonder what the purpose of that site is...The anomaly will be over before they setlle on the countdown code.

    ReplyDelete
  16. It was a countdown to a Password challenge which was ... won ehem by our enlightened opponents.

    ReplyDelete
  17. thedeacon 1972 there was nothing. It just started to count negative😛

    ReplyDelete
  18. Jannes Van Slooten​ That's not what I see when I open the site 😁

    ReplyDelete
  19. thedeacon 1972 hmm last time I checked was just after midnight. Now things are changed indeed..🤔

    ReplyDelete
  20. I guess we need to visit November Lima​ more often!

    ReplyDelete

Post a Comment

Popular posts from this blog

so, general question.

Dear investigators, I have some questions for you.