Classified Archive
New ARG related to Warframe: 1999 that begun on the 25th of October 2024
Last updated
Was this helpful?
New ARG related to Warframe: 1999 that begun on the 25th of October 2024
Last updated
Was this helpful?
WIP - This page and the related ARG are still very much in progress.
Information here should not be deemed final and is subject to sudden change.
To see the latest up-to-date information regarding this ARG, please refer to this google doc
During the closing section of Devstream #182, the stream abruptly switches over to a strange clip, which seems to consist of multiple spoof ads. Among others, the boy band "On-Lyne", a game called "War Sector" and "Big Bytes Pizza" are prominently featured.
The closing section of Devstream #182 has been separately uploaded to Warframe's official YouTube channel:
Towards the end of the strange clip (1:16-1:24), the sentence "we end as we began", along an obfuscated is presented on top of the visage of Albrecht Entrati:
Players quickly understood that it was indeed supposed to be a web address, and it wouldn't take long until it was uncovered that the address was supposed to be www.doktorentrati.com, thanks to the flickering image of Albrecht Entrati. The address redirects anyone visiting to https://www.warframe.com/1999/doktorentrati.
Note: Although both links shown above spell 'doktorentrati', substituting the 'K' for a 'C' in both addresses also works and redirects to the correct page.
Alternatively, the page could also be accessed by going to warframe.com and clicking on the Entrati logo once it appears in the place of the Warframe logo.
The page that players landed on after entering the address is a simple site consisting of the Entrati logo, the sentence "WE END AS WE BEGAN", and a simple "BEGIN" button:
Pressing on the "BEGIN" button, the user is then taken to a page that imitates the desktop of an older computer. On this desktop, numerous files and applications could be found:
Below you can find a set of collapsed sections with detailed descriptions for each numbered element seen in the image above:
These files were known prior to the ARG, as they were released in the days leading up to Tennocon 2024.
They could be found on https://www.warframe.com/news/suspicious-correspondence-flagged-for-review
Note that the news page now redirects straight to the doktorentrati page
All chat logs are pasted in below. To see how they would originally look, click on the link next to each file name
'h' : help
can be found in the upper right corner of any opened .kin file. Pressing the key on your keyboard opens another file, titled 'help.bat':
PLEASE JUST OPEN THE DAMN DOOR ALREADY I CAN SEE IT N OW IT ITSS HEREI CANT GET OUT PLEASE PLEAS EPLASE JUST WANT TGO HOOME SOMEONE PLEASE DONT LEAVE ME HERE
This file is encrypted by your organization
As the name suggests, SETTINGS.APP contains a number of options:
YAPPR is a mock e-mail client that contains an advertisement email from Big Bytes Pizza that mentions a number of toppings:
Pressing "Reply" opens a new window that allows the user to reply to the e-mail from Big Bytes Pizza with a freeform message. Screenshots for both of these screens can be found below.
Once a reply has been sent, all open YAPPR windows will be closed.
KINEMATIC-ONLINE is a mock web browser that, once opened, shows a fake loading screen consisting of a logo with Höllvanian characters translating to "kinematic online". The Session id that is shown during loading also seems to contain a number of references, or may be a special message altogether:
A∂6B4A-V<>IV74-KPΔ9T9-WW®B17-TYSM<3
Given a few seconds, the loading page disappears and a page called "ASCLOID" is presented instead.
The page consists of a small title and beneath it, a search bar with accompanying "ASC!" button.
Clicking on the search bar displays a hint pop-up with 4 distinct links:
"cracking encrypted zip files"
The first three links will open a new tab with the content once clicked. These links are previously known and accessible from the previous Entrati ARG which was active during Tennocon 2024.
The last link shown in the pop-up on ASCLOID will show another page named "DE/CRYPTR" that also begins with a short loading sequence. Pressing the "G3T DE/CRYPTR" button in the middle of the page will provide yet another app on the desktop, which will prove to be useful at a later point.
If the user instead chooses to enter any other address or search term into the search bar, an error page is presented:
ERROR Could not connect to search server, please check your connection
"Documents" is a folder that contains a total of 7 files (4 .brush files, 3 .kin files):
These three icons in the dock were at the time inaccessible. Clicking on them would show the following error:
Similar to "Documents", as it appears to be a folder containing two files; "Welcome.kin" and "01_Lure.kin". Clicking on them does nothing, but at the bottom of the window, a "Restore Files" button can be seen.
Clicking on the button will then make the two files shown here appear on the desktop, which allows the user to access their contents.
The following files can be restored from RUBBISH.APP:
This file seems to be an introductory e-mail/message addressed to a Mr./Mrs. Paige from Gwen Arran, a senior employee at Digital Extremes (in-universe), creators of a game named "War Sector", which seems to be a mix of Dark Sector and Warframe.
This file is locked, and can not be accessed without a password, which hints at the next step of the ARG.
The button imitates a shutdown of the "computer" that the user is browsing. During the sequence, three messages can be seen, informing the user about the shutdown status of the computer. At the end of the sequence, a reflection can be seen flickering on the screen. This flicker consists of two images; an overlay graphic to create a CRT effect, as well as a reflection of Major Neci Rusalka. This implies that she is the one using the computer at the time.
After the flicker appears, the computer is now turning on, displaying "DE-OS", along with the Entrati logo above it. The startup of the OS may be a joke, or a hint that Entrati is directly involved with the in-universe version of Digital Extremes.
Pressing the button will prompt the page to reset to its original state (i.e any steps performed will be reverted). The user is prompted for a confirmation before the reset happens.
From this point on, the page contains the steps discovered to progress with the ARG.
Steps may often refer to information that has been provided in previous sections of this page.
As we saw in the 8. RUBBISH.APP section of this page, a locked file could be found in the rubbish. This suggests that there may be multiple hidden files present on the computer, which prompted users to search for similar files.
This section shows the files and the steps to discover them chronologically, even though that is not the order they were found in.
As mentioned above, the file can be found in the RUBBISH app. To have it appear on the desktop, simply press "Restore Files" at the bottom of the app.
All the found files are locked behind a password to begin with, with the first file, 01_Lure.kin being the only one that can be unlocked from the beginning.
As noticed by user soap on the PlayWarframe Discord, the doktorentrati page contains ASCII art of a Requiem icon, as well as the words "TIME", "FORM" and "TRUTH":
Using the Requiem icon as a clue, users quickly noted the corresponding requiem words for the ASCII art to be: "KHRA", "JAHU" and "XATA" (found by TheWarriorCat and Fenix on the PlayWarframe Discord.)
Inserting the password "KHRAJAHUXATA" (as found by Ducky on PlayWarframe) for 01_Lure.kin unlocks the file, immediately revealing the following:
The contents are a reply to the Welcome.kin file, written by someone named Sam Paige.
Once the first file was unlocked, no additional steps for the ARG could be found, and a deduction could be made that further progress was time-gated by DE.
This section describes what the ARGrakata community explored during this downtime and holds no significance to ARG progression.
If you want to continue reading about actual progress done with the ARG, go to the next section of this page.
As this section may be a bit too hard to follow in writing, a video quickstep version of this section made by Mordeth can be found here.
At 28/10/2024 19:23 UTC, the official Warframe X (formerly known as Twitter) account sent out a new ARG-related post:
The last paragraph within the image in the post hints at a hidden message in the blue section of the image. Both ARGrakata and PlayWarframe noted that the circled word ("PRIMED") hinted at taking all the words that had prime-numbered positions within the blue section (words 2,3,5,7,11,13,17,19,23,29,31 in the section.)
Doing this resulted in the following message being extracted out of the blue section: "combine all the prime words together and then multiply by nine". (Solution and Application were found by Kaski_ and Panji respectively on ARGrakata.)
After several different attempts throughout the document, users soon understood that it was specifically the words in the blue section that mattered. Taking the sum of the prime numbers mentioned above (160) and multiplying it by 9 resulted in 1440 (found by Craft26, calculations by Ar'kohn Lock and Mordeth on ARGrakata.)
Using the solution taken from the X post (1440) and using it as the password for 02_Cheat.kin, unlocks the file, displaying the following:
After 02_Cheat.kin was unlocked, a second check of the page source showed that the JS object containing the hash for 01_Lure.kin was updated to contain a hash for 02_Cheat.kin.
This confirmed that the other files were time-gated, and the community had to wait for the page to be updated before the ARG could proceed further.
WIP - Currently this is as far as this page goes, but there is a lot more information to come. To see any information that has not yet been added here, please check out this google doc.
The .kin files accessible on the desktop appear to be logs of previous chats between a number of different persons.
>Intercepted from unregistered PC at: [DATA CORRUPTED] >Priority Level: 15% [Session started on -̵̡͈̳̝̠̪̻̘̊̆̊͂≮̫̯̟̙͚̮͈̿̈́̎̉͘/̶̧̲͔̹̌̉͌0̷̦̓͑̒̐̿/1999 at 16:47:38][ r--r--r-- ] [ restricted ] > Letterbomb says: did you guys here about this doctor guy > SockIt says: hear* > Letterbomb says: he’s like this super scientist or whateveri heard he's got a cure :‑O > Odyssey says: Who are we talking about? > Deadboy says: o_0 > Mothership says: Doktor Friday > SockIt says: No, you mean Doctor Entrati. How have you not heard of him? He’s all over the net. > Mothership says: Aren't they the same guy? > SockIt says: Well, not really "all over," but if you know where to look… > Mothership says: Whoa. You take that pic yourself? You met him in person? > Letterbomb says: lmao posers don’t act like you guys know something special > Odyssey says: You brought it up, dude. > Deadboy says:XD [Session ended on x̵̮̲̽͗̚̕x̴̛̠̺͈̬̟|̶͖̫̼͖̺͈͆~̶̜̗͙̻̰̳̗͑̈́̀̈̊̚͘͝/1999 at 17:03:13]
>Intercepted from unregistered PC at: [̸̺̹̑̉S̷̝͎̆̏T̷̨͓̅̐Ị̷̼̿͠L̴͙̣̒́L̴͈̅̅ ̵̙͚̑̉Ȟ̴͎Ų̷̈N̸̗͂Ǧ̵̱̘R̴̠̋͘ͅẎ̴͎͝]̵̼̂̆ >Priority Level: 75% [Session started on +̷͚̘̇̽̀\̷́̀́͌̆͜;̵̝͈̪̠͓͗̏8/1999 at 18:03:20][ r--r--r-- ] [ restricted ] > SockIt says: Hey, Letterbomb. You there? > Mothership says: … > Deadboy says: Still nothing. :'‑( > SockIt says: Figured it was worth a shot. Gotta keep trying something. > Odyssey says: This can't be real it's like a marketing thing. > Mothership says: How is this a marketing thing? > Odyssey says: like a movie thing like an ad for that new horror movie > SockIt says: I heard whatever LB heard, Ody. > Odyssey says: yuo don't know wit was the s;me thing > SockIt says: There were more of those Scaldra guys with weird guns in my neighborhood the next day. > Letterbomb says: [This user has been suspended on the authority of SCALDRA according to Section 21.c of the Emergency Powers Information Access Act. Thank you for your cooperation.] > Mothership says: Well, that's new. > New User [LordSaberwulf] has entered the chat. > LordSaberwulf says: Hey, everybody. I’m hoping you can maybe help me find my sister. I know that she used chat rooms for local residents like this one. Have any of you had contact with the person in this photograph? > Deadboy says: Oh, hey yeah! :D I know this person super well actually. > Mothership says: Come on. DO NOT feed the trolls. > LordSaberwulf says: How do you know this person? > Deadboy says: We used to date! :‑J > LordSaberwulf says: You did? Do you remember the last time you saw them? Can you provide details as to a specific time and location? > Deadboy says: I don't think so. See, I'm a famous supermodel and I really need to keep my privacy, or the paparazzi just won't stop harassing me. I told them we had to break up for their own safety. It was really heartbreaking stuff. :-( > SockIt says: We didn't see anything, but we'll be sure to let you know if we do, officer. > Odyssey says: i gotta go. I just cn't deal with this right nwo > User [Odyssey] has left the chat. > User [LordSaberwulf] has left the chat. [Session ended on x̵̮̲̽͗̚̕x̴̛̠̺͈̬̟|̶͖̫̼͖̺͈͆~̶̜̗͙̻̰̳̗͑̈́̀̈̊̚͘͝/1999 at 17:03:13]
At this point in the ARG, 'Oubliette' was a locked and inaccessible folder, clicking on it shows the following message:
"Entrati" Wallpaper with Entrati's logo/insignia
"Ollie" Wallpaper with the logo of "Ollie's Crash Course"
"On-lyne" Wallpaper with the logo of boy band "On-lyne"
"Drippy" A drop shaped character bounces off of the edges of the screen, similar to the well-known DVD-logo screensaver
"Space" Particles extending outwards from the center of the screen, with an occasional appeareance of a Liset moving like the particles
OneTwoThree.kin:
OpenRoad.kin:
VirtuesOfPizza.kin:
Please wait message:
Safe to shut down:
Not safe to shut down:
Image with CRT overlay:
Image without the overlay:
Open up the KINEMATIC-ONLINE.app, press the search bar and click on the fourth link:
Press the "G3T DE/CRYPTR" button, which will "download" the app and display it on the desktop:
Press 'Reply' in YAPPR, and provide the answer from the previous step:
Press 'Send'. This will close all YAPPR windows, and Big Bytes Pizza will send a reply to us, which can be seen thanks to the notification shown on the YAPPR icon:
The reply consists of a short message and an accompanying attachment, which can be seen at the bottom of the window:
Press on the Liset whenever it is shown:
All of the files have the spellcheck functionality available. Press on it to find any misspelled words:
The three keys we need to hold are indicated by three of the four .brush files:
Forcing the locked files open By editing the HTML to show the other 5 files as unlocked only showed the following message with a link: The link is rather well known, and well... clingy to say the least