Investigation Report — "The Daily Decoy" (QR2) · Utah Treasure Hunt 2026 · Salt Lake City
LIVING DOCUMENT — UPDATED AS THE INVESTIGATION PROGRESSES
STATUS: UNSOLVED · ACTIVE
Last updated: October 7, 2026, 8:35 AM MDT (10:35 AM Eastern · 2:35 PM UTC)
1. The Newspaper
A full-page newspaper — "The Daily Decoy" — arrived as the second item (QR2) of the Utah Treasure Hunt 2026. It is a single 1024×1536 image. The masthead reads SALT LAKE CITY · FRIDAY, OCTOBER 9 · VOL. 1, NO. 7 · FIVE CENTS, with the tagline "All the news that's fit to misinterpret." (October 9, 2026 is a Friday — the date is real.)
2. Provenance — What the File Itself Says
The image file carries a signed C2PA content-credential manifest (the industry standard for media provenance). Its contents:
Created by an AI image model — "ChatGPT / gpt-image" via the "OpenAI Media Service API" (classified as trainedAlgorithmicMedia).
Creation time: September 30, 2026, 2:43:43 PM MDT (20:43:43 UTC).
Three recorded actions:c2pa.created, c2pa.converted, and c2pa.watermarked.unbound — the file was watermarked at creation, and the watermark is unbound (not tied to the exact file contents).
Signed by OpenAI — the signature verifies against OpenAI's C2PA certificate chain (claim 3ed9f203-…-fb3a3e47dba0, instance bd7b1b5d-…-c8a5e01fc814).
Interpretation — the "Invisible Ink" article is a meta-layer. The paper contains an article titled INVISIBLE INK: "Warehouse staff believe the missing shipment has arrived, although nobody is willing to sign for it." The file itself carries an invisible, unbound watermark — the shipment nobody signs for. The watermark action is also timestamped 3.5 milliseconds before the create/convert actions, as if the ink was applied at the moment of creation.
3. What the Text Is Saying
Mirrors and reversal. The stated hint for this puzzle is "mirroring of some kind or doing something backwards." Confirmed in the text:
"YRT ECIN" appears in the paper — NICE TRY spelled backwards.
The lead article (LOC MAN REPORTS SUSPICIOUS ACTIVITY) is about a resident who followed a suspicious stranger for forty minutes — "detectives established that the individual was him." Witnesses described both men as unusually evasive: "Every time I stopped, he stopped." Police advised him to avoid reflective surfaces until the investigation concludes. The paper is talking about a reflection.
The top-left curiosity box carries a garbled phrase (OCR: "CURIOSITY KEEPS A BRIGHTER WORLD … TRUTH FLIES OFTEN") beside a dash-and-dot glyph — a pattern that looks like Morse code. Decoding it is an open item.
Ten planted typos. The ROUNDABOUT article ("PROOFREADER DISMISSED — Ten errors survive final inspection") contains exactly ten deliberate misspellings (pzess, nows, eaitor, cbief, pagx, pwinter, erxor, prant, aye iak, plus one fully garbled line). The letters the typos substitute spell REDHERRING — the paper's own label for its decoys.
The classifieds spell a word. The first letters of the classified ads read W-R-O-N-G ("Wanted…", "Room to let…", …).
The radio box. A boxed notice reads, verbatim:
HEARING VOICES? Tune in at the top and bottom of the hour. If you hear voices your radio is working.
This is the ham-radio thread: "top and bottom of the hour" is classic ham-scanning language, and the numbers 023 / 074 recur in the paper (candidate frequencies: 7.023 / 14.074 / 28.074 MHz — the 40m / 20m / 10m bands). Under active testing.
The stock table. "Closing Prices — Salt Lake Exchange," 21 tickers. Best current reading (two cells still in conflict between the vision read and the OCR read — flagged, pixel verification pending):
BRK
VLM
NVR
CRN
DLV
HBR
WST
28
46
36
45
28
52
85
ALD
FNC
GLN
KST
MRW
PPR
RDL
33
76
25
25 or 45 ?
43 or 52 ?
81
27
SVN
TLM
UNW
VDR
WLC
YRN
ZPH
87
34
48
25
55
41
63
Numerology, letter-value, and reverse-order readings of this table are under active testing (per the mirror hint).
4. Image Forensics (First-Pass Lab Results)
Pixel-level analysis of the 1024×1536 image (39,994 unique colors; the top colors are all paper beige):
No simple LSB steganography. Even/odd imbalance of the least-significant bits is under 0.3% in every channel (R 0.11%, G 0.29%, B 0.24%) — within the noise of a normal image. The first 256 R-channel bits are not ASCII.
No plain invisible ink at normal contrast thresholds; the low-contrast candidate region is a broad band across the page, not a hidden shape. A finer threshold pass is queued.
The border berries form one connected structure. The colored pixels around the page border (311,296 px) connect into a single component — the berries are not separate marks. Per-berry color clustering (count by color → bits) is the next step; the suspicion that a code is hidden in the berries is alive.
Hot blocks. Three regions of elevated color variance stand out in the page grid: blocks (14,11), (6,3), and (5,2–4) — candidates for hidden structure, under examination.
5. Hypotheses Under Active Testing
A Salt Lake City business name, address, or driving directions — the leading solution class for this hunt. The check-in phrase at the desk: "I'm here to report a suspiciously attractive person. It's me."
Ham radio — the "Hearing Voices?" box; "top and bottom of the hour"; the 023/074 number pattern (7.023 / 14.074 / 28.074 MHz).
GPS coordinates near Salt Lake City — candidate number strings from the stock table and the creation timestamp (20:43:43.615) under examination.
Mirror/reversal applied to the data — ticker order, value order, and reversed readings of the stock table.
The berry border code — per-berry color clustering → bits.
The curiosity-box glyph — the dash-and-dot pattern (Morse?) in the top-left box.
6. Timeline
When (MDT)
What
Sep 30, 2026, 2:43:43 PM
Newspaper created (C2PA-signed, watermarked at creation)
Oct 6, 2026, ~9:49 PM
Puzzle received; investigation opened
Oct 7, 2026, ~7:00 AM
First analysis pass: full text read, C2PA/EXIF provenance, pixel forensics
Oct 7, 2026, 7:23 AM
Findings + questions sent to Randi Stephens
Oct 7, 2026, ~8:35 AM
This living report published
7. Open Questions — Input Welcome
The investigation is actively working the items above. If anything in the paper reads differently to you — a headline, a classified, the stock numbers, the border berries, or the curiosity-box glyph — say so. Outside eyes on the text are exactly what this kind of puzzle is built for.
Update Log
When (MDT)
Update
Oct 7, 2026, ~8:35 AM
Report created: provenance/watermark findings, text analysis, first-pass image forensics, active hypotheses