Same challenge, however we’ve been told that right clicking has been blocked. I guess I unknowingly solved this one with the first stage. Although one can get the source by right clicking, using ctrl+u is a quick shortcut which achieves the same effect.

<body oncontextmenu="javascript:alert('right clicking has been blocked!');return false;">
<h1>natas1</h1>
<div id="content">
You can find the password for the
next level on this page, but rightclicking has been blocked!

<!--The password for natas2 is XXXXXXXXXXXXXXXXXXXXXXXXX -->
</div>
</body>