So, as it turns out, the hacker’s IP is also hosting a website. I’ve copied all the stuff on the site and put it up here:
http://heroesoflightandshadow.ml/weirdsite
However, I’ve hit a wall even on the homepage. Everything is using some sort of cipher… I have no idea. Do you? Tell me everything you figure out in the comments.
I suppose it’s vigenere. ROT didn’t yield anything. If it’s vig I need to find the key for it
Hmm, Vigenere? Perhaps there’s a hint to the key somewhere.