UPDATE!!! Eon8 has been deployed!! Read about it here!!

So, browsing online tonight, I ran across eon8.com. If you ask me, the whole thing kinda creeps me out. But then again, I’m somewhat of a conspiracy theorist.

Ok, so here’s what I’ve gathered from different sources on the internet:

1. The site includes a countdown timer to 12 midnight on July 1st 2006 (00:00:00 2006/07/01)
2. The site logs the ip address of all users and any http referers that link to the site
3. An MD5 hash of a date and time are then created and stamped on the site when a visitor displays the main page.
4. The Distribution List contains MD5 hashed dates as well. (Maybe… the last one usually isn’t the correct length for a hash, i.e. 32 characters)
5. IP addresses of visitors are probably logged and displayed on a world map using red dots for indicators.
6. Speculated that the dots on the map correspond to nuclear power plants/missle silos.
7. There are several links on the main page which forward the user to protected areas of the site.
8. The server is running Apache 1.3.33 at a colocation hosted by The Planet.
9. The Planet uses CPanel hosting control panels.
10. If you go to www.eon8.com:8000 or www.eon8.com:9000 you have access to ShoutCAST servers (Both of which are down at the moment. They must have caught on that we knew…)
11. The ShoutCAST servers linked to NoteBookInHand a forum about writing songs and composing music.
12. The only person to link to the ShoutCAST servers on NoteBookInHand was the forum administrator, who owns the site http://www.chrisrossi.com/
13. Chris Rossi is a web developer based in Southern Australia. He may be located near BBHosts.net, where the site is actually hosted.
14. The eon8.com address was registered on December 20 2005 to GoDaddy.com through a proxy domain registrar meaning the owner is not visible. The site has been up a maximum of 193 days as of June 30 2006.
15. The site may or may not be linked to an advertising campaign… (I don’t believe that it is an advertising ploy. Why so much secrecy? Why the poorly coded site? Why is it hosted on ThePlanet?)
16. The site probably isn’t related to the Infinuin Labs, Phantom PC, which is a defunct gaming console that never was released.
17. The red dots on the tracker map are simply gif images. The meaning of the numbers has yet to be determined, but the significance of the images themselves is meaningless.
18. According to the conversation between rukind88 and StonerSmurf169 the launch is related to the movie War Games. It is not a launch of a game, advertisement, missles, virus or freedom.
19. StonerSmurf169′s hints: War Games, the counter is counting down for an event, but also as an experement, the counter is for all or nothing, pertains to all the world, has to do with fear.
20. StonerSmurf169 said his name was Joshua, like the password for the computer in War Games.
21. StonerSmurf169 belongs to a 17 year old guy who lives in Florida (Thanks to Nathan K for bringing this up)
22. EON may be referring to EON Productions, the company responsible for the James Bond series.
23. July 1st could be the ahead-of-schedule release date for Casino Royale, the newest James Bond film.
24. According to Cerberus, the sender of the email, eon8 is not affiliated with video games or movies.
25. July 1st is the anniversary of the Night of Long Knives, the night which Hitler killed his political rivals.
26. When you click on a link from an “Unauthorized referrer”, you are presented with a site stating that the site has not been approved and ” Please immediately consult C22:S13 of your handbook for further instructions.”
27. “Please Consult C22:S13 in your handbooks immediately.” Could be linked to The Book of Revelation. Chapter 22: Section 13, the passage reads as: “I am the Alpha amd the Omega, the first and the last, the beginning and the end.”
28. Isaiah 22:13: “and behold, joy and gladness, killing cattle and killing sheep, eating flesh and drinking wine: ‘Let us eat and drink, for tomorrow we will die.’”
29. The bottom of the the main site says “Project Status: X13600 Imminent.” The exact meaning of this is unknown.
30. A possible lead might be that X13600 = Dunce gene of the common fruit fly (Drosophila melanogaster) a memory controlling gene.
31. Timer may correspond to the release of a computer virus
32. http://www.eon8.com/security has a list of all referrers which have been linking to the site. Only two are “authorized,” they are loopback addresses.
33. “All Will Be Revealed Soon… The Beast Sleeps And The Unseen One Has Awakened… The Time Is Almost Upon Us…”
34. Calls have been placed to The Planet, which have yielded few results. Employees of The Planet could not access information on the site.
35. Download the recordings of the phone calls from the link below!
36. The site may simply be a redirect from servers in Australia BBHosts.net
37. The date could have something to do with the newest launch of NASA’s space shuttle which will occur on July 1st. (Although unlikely because the launches are never on-time and the date for the shuttle launch was decided on more recently than the site started)
38. The list of referrers used to be much longer. It was attacked using HTML and javascript injection. Within the last 18 hours, the referrers list has been cleaned up and most of the fake referrers were taken down.
39. The list of referrers includes government addresses. This might be attributed to the fact that the US government is monitoring the site, or that government workers are browsing sites during their lunch break.
40. According to the NMap listing below, the server is running a standard Mandrake Linux installation, with some outdated software. The host is actually at bbhosts.net, and not ThePlanet.
41. From what I know, there are no DDOS attacks being performed, but the MySQL server on the machine is choking under the strain of the userbase who is attempting to connect to the site.
42. Some think that the countdown is actually to the launch of NASA’s shuttle citing the fact that fruit flies will be onboard the mission. (Why does the countdown count to midnight? Shuttle launches are during the day.)
43. Someone over at http://www.1magine.net/ says that he has broken the code for the site and found a listing of hundreds of celebrities names on the page. Sounds fishy to me… they claim to have broken the code, but they don’t say how. And their screenshots are decidedly unconvincing.
44. There are some interesting findings in the javascript controlling the counter on the site. When the site loads, it retrieves the server time, then starts the counter based on that time and subtracting it from 00:00:00 July 1st 2006. Once the counter reaches 0, the page automatically refreshes, obtaining new information from the server. This new information is displayed in a section of the site with the id of “deployed”.
45. Anonymous FTP login is enabled on ftp.eon8.com, but there are no files or directories in the login base folder.
46. Some people think that eon8 might be a halo (or other video) community party. Bungie had a Halo tournament/get-together which was organized by someone with the forum username EON.
47. Yes, changing your system clock may have an affect on the timer displayed on your machine, but does NOT affect the overall countdown. This is due to the fact that javascript is used to display the counter. If you set your clock to after the timer should run out, it will automatically reset itself.
48. The Deployment Log site is not updated in real-time. Notice at the top it says, “Current Deployment as at 0600 hours, 20060630″ That means the dots are based off a already recorded amount of information which was taken at 2006/06/30 6:00 AM EST.
49. The AIM user, eon8countdown is a fraud. He claimed to be part of the site, in actuallity, was just some guy who made the AIM account yesterday to poke some fun.

UPDATE!!! Eon8 has been deployed!! Read about it here!!

Here is a list of some more interesting links:

• http://en.wikipedia.org/wiki/Eon8
• http://forums.unfiction.com/forums/viewtopic.php?t=14673
• http://eon8theinvestigation.ytmnd.com/
• http://www.blogger.com/comment.g?blogID=30285669&postID=1151…
• http://www.khaldea.com/eon/eon8.shtml
• http://eon8whatthehellisit.blogspot.com/
• http://www.digitdreams.com/
• http://whois.domaintools.com/Eon8.com
• http://www.eon8.com:8000 (dead)
• http://www.notebookinhand.com
• http://www.chrisrossi.com/
• irc://irc.usrv.de #eon8
• http://www.1magine.net/
• http://files.filefront.com/eon8phonecallsrar/;5205171;;/fileinfo.html
• http://www.kotaku.com/gaming/eon8/upd…79.php#more

UPDATE!!! Eon8 has been deployed!! Read about it here!!

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-06-30 10:11 EDT
Warning: Servicescan failed to fill info_template (subjectlen: 889). Too long? Match string was line 2683: v/Apache httpd/$1/$2
Interesting ports on f4.f5.1243.static.theplanet.com (67.18.245.244):
Not shown: 1218 closed ports
PORT STATE SERVICE VERSION
1/tcp open tcpwrapped
21/tcp open ftp PureFTPd
22/tcp open ssh OpenSSH 3.5p1 (protocol 1.99)
25/tcp open smtp Exim smtpd 4.52
53/tcp open domain ISC Bind 9.2.1
80/tcp open http?
110/tcp open pop3 cppop pop3d 19.0
111/tcp open tcpwrapped
135/tcp filtered msrpc
137/tcp filtered netbios-ns
139/tcp filtered netbios-ssn
143/tcp open imap UW Imapd 2003.339-cpanel
443/tcp open ssl/http Apache httpd 1.3.33
445/tcp filtered microsoft-ds
465/tcp open ssl/smtp Exim smtpd 4.52
593/tcp filtered http-rpc-epmap
993/tcp open ssl/imap UW Imapd 2003.339-cpanel
995/tcp open ssl/pop3 cppop pop3d 19.0
1434/tcp filtered ms-sql-m
3306/tcp open mysql MySQL (blocked - too many connection errors)
4444/tcp filtered krb524
Device type: general purpose
Running: Linux 2.4.X
OS details: Linux 2.4.19 (Mandrake, X86)
Service Info: Host: night.bbhosts.net

Nmap finished: 1 IP address (1 host up) scanned in 42.511 seconds