Uncovering Cicada Wiki


Open leads, untied, loose ends

Outguess results of every unsolved page: https://github.com/rtkd/iddqd/tree/master/lp_outguessed


Flipped cicada in 1033.jpg of onion1 -> 1033 is flipped and the whole image is flipped. 

Three hex strings from onions. http://pastebin.com/raw.php?i=qePehdKM Maybe the delays between the bytes on onion2 and onion3 Text of page 3, 4 and(half of 5 and) 6 of liber primus.https://infotomb.com/fhxhe.txt four lines in the decrypted text of page5 & 6 which don't add up to primes The Square matrix. -> 1033// the magic square, you mean? for a lot of reasons, not a true magic square ok, a 5x5 matrix, yes? yeah! true.the matrix construed as a matrix or the words therein? (the possible letters on 1033.jpg if you believe it's not artifacts). (MXXXIII / MMMCCCI, but not sure if this was the best possible interpretation) MXXXIII was upside down right? Confirmed. Additional 0x35 0x37 / 57 on onion3-longString. It was 0x57 in my opionion <-- The server response grew by two bytes, 0x35 0x37. When viewed (as ASCII) this shows up as 57. If included in the hex-bin conversion it turns into W (0x57/87 decimal). Primes in HTML comments - 761, 1033, 3301 The primes:http://uncovering-cicada.wikia.com/wiki/PRIMES_MENTIONED_IN_2014_PUZZLE#Page_5_and_Page_6 the palindrome prime of cicadas twitter account @1231507051321 the date 6 Jan of the twitter post which started this year -> 61 = prime http://en.wikipedia.org/wiki/Epiphany_(holiday)the embedded Roman/Latin numbers in the image are 1033 in Arab. Therefore, it could have something to do with the Roman/Julian and Georgian calendar change (http://en.wikipedia.org/wiki/Gregorian_calendar)  or, with the image depicting Newton http://www.mathpages.com/home/kmath121/kmath121.htm , which may lead to Gallileo  </head> and <head> misformatting of the webpages of the onions, though it is not evident which tag was used wrong at what onion -> could tie the onions together or give a structure for some other element   2013Wisdom/folly https://infotomb.com/bjzdi (This is a copy of Folly, but they're identical) The parable  http://uncovering-cicada.wikia.com/wiki/Instar_emergence_(mp3_and_hidden_poem)#Meaning_of_Parable_1.2C595.2C277.2C641 and the parable number: 1,595,277,641 2012The ps string 2012, and its factors: P.S.: 10412790658919985359827898739594318956404425106955675643739226952372682423852959081739834390370374475764863415203423499357108713631 P= 99554414790940424414351515490472769096534141749790794321708050837*Q= 104593961812606247801193807142122161186583731774511103180935025763 

missing < /head> from onion 1 and beginning of  onion 4 with < /head>

[06:55] <Pilgrim> what was the first onion with the missing </head>:

onion 4 had </head> for beginning: http://prntscr.com/2ixdzl

JPGs with no outguess:

We have two jpgs with no legit outguess:

  • One of bottom mirrored jpg from onion3 string, that produces garbage
  • Page 4 (5x5 magic square) from server-status string on onion 3

List of strings to look for:

We all know that last jpg we got apparently has no OUTGUESS

  • on the bottom of the link you have log explaining how outguess can be visually detected

More exampes:

[02:28] <masso> Guys, we found out there is most likely some outguess in the rune-pic from the server, encrypted with password or keyfile...
[02:28] <masso> http://prntscr.com/2i0786
[02:28] <masso> http://prntscr.com/2i073p
[02:29] <masso> pics show definitely the same pattern that outguess does

[02:37] <masso> Outguess changes the RGB color values to hide information in jpgs.
[02:39] <masso> With colour correction and by changing brightness/contrast you can see this modified pixels.
[02:40] <masso> Usually outguess doesn't change plain white px,but only modifies the coloured ones.
[02:41] <masso> The rune picture from the server has clearly this modifications in the runes, as seen after doing some colour/contrast magic in PS.
[02:42] <masso> Means, most likely there is some outguessed message in the pic, but protected with a keyfile or password.


  • missing n in onion address in book code
  • mistakes on page 5 and 6 of the book
  • html comments 761, 1033, 3301, for everyting that lives is holy.....
  • post numbers raising for ever onion (see absences post on bottom of page 3)
  • 57 second string on onion 3 v 3

Cicada uses a different port for every onion

  • 97sfcnM.png
    Apache Server at auqgnxjtvdbll3pv.onion Port 5240
  • Apache Server at cu343l33nqaekrnw.onion Port 5241
  • Apache Server at fv7lyucmeozzd5j4.onion Port 5242
  • Apache Server at avowyfgl5lkzfj3n.onion Port 5243

To see PORT number just enter nonexisting link after valid onion url

Maybe the same Server? Would make sense from cicadas view

Onion Header Tags

<cydoniac> Something to note, is that on the new onion, the html source 
           contains a sole < /head> tag, along with the < !--3301--> 
           (spaces for Wikia)
<cydoniac> http://prntscr.com/2ixdzl
<cydoniac> At first glance this appears to be a mistake, but remember that
           the source of the onion (1033.jpg) page has an opening head tag
           but no closing:
<cydoniac> < html >< head > < title >For Every Thing That Lives Is Holy
           < / title> < body >< img src="1033.jpg" />< / body>< / html >  
<cydoniac> This does seem to indicate that there is a direct relation here
           that we have yet to make between the onion pages, and seems to 
           be a continuation of the first page in some form. Related to 
           1033.jpg? Uncertain.
<cydoniac> Some additonal things to note;
<cydoniac> Gematria Values:
<cydoniac> "Patience is a virtue" - 761
<cydoniac> "For Every Thing That Lives Is Holy" = 1033
<cydoniac> ??? = 3301
<cydoniac> It would seem to indicate that a particular phrase matches 3301
           that we have either already seen or yet to be revealed. It would
           probably be a long-ish phrase, so if anyone finds a phrase and
           thinks it might fit, you can check with http://codeseekah.com/cicada/count.html to confirm.

Byte Strings

String 1 - Hidden Service 2 (http://cu343l33nqaekrnw.onion/)


String 2 - Hidden Service 3 (http://fv7lyucmeozzd5j4.onion/)


String 3 - Hidden Service 4 (https://avowyfgl5lkzfj3n.onion/)


String 4 - Matrix from pages 49-51 converted to hexadecimal


All things should be encrypted, 5x5 magic square jpg

Open Lead - Rune Image - Maybe Outguess with password protection http://i.imgur.com/b2XLHxg.jpg

Please add original here

I havent checked those two files if they are original, but i think imgur one is NOT,

Please do not use IMGUR for original Cicada images, reason is that IMGUR resamples jpgs, more here:


~ Lurker

jpg from onion 3 server status