Clicking around the website. Clicked on "Contact Us"...
I got a pop-up that asked for an invite code.
Inspecting the code on the page, it tells us that the code is 12 characters in length in the format of XXX-XXXX-XXX.
Looking through each "if", we see that: the first 3 letters are "UFO",
Googling "btoa", we see that the next step should be "UFO" encoded as base64. This gives us "VUZP".
And lastly, I Googled the function charCodeAt() which gave me the website above that I could use to get the answer to the third part. charCodeAt() returns a Unicode value for a character in a specific position in a string (in this case, our string is "UFO"). Once we get this value for each character in "UFP", we add them together. 85 + 70 + 79 = 234.
UFO-VUZP-234
In order to access the members-only area, we should look for a username and/or password.
In the "About" page we see the nickname "borgana" - maybe this could be a username?
Let's go to the "Members" page and click "I've forgotten my password." to test it out.
This confirms it is a username! Now to figure out borgana (aka Ben Organa, the UFOria CEO)'s place of birth.
We see on the "About" page that Ben went on a trip to his place of birth with someone named Elliot Talton.
Looking through UFOria's social media accounts, we can see there is an employee listed on LinkedIn, and that employee is none other than Elliot Talton!
Elliot posted a message talking about a Cafe that reminds him of childhood memories - maybe Elliot and Ben are from the same hometown where this cafe is located?
Google says that the cafe is located in a placed called "bourtange".
We put this as the answer to borgana (Ben)'s secret question and we see that his password is "fataborgana42".
Lets go ahead and sign in.
Success! We got the flag!
CTF{fataborgana42}