Bellingcat - Back In Time walkthroughs

Bellingcat recently released their Back In Time series of challenges authored by Sofia Santos. I had a lot of fun solving these and I hope you did too. Here’s a walkthrough of how I tackled each of these challenges.

Hope you learn through these walkthroughs as much as I did solving these challenges.

Fresh Faced: Finding the Founder

:(
Problem Image

So the question tells us that the founder of Bellingcat, Eliot Higgins, was featured on many news outlets for his groundbreaking discoveries in the year 2013. We need to find the YouTube video from which the newspaper clipping was taken.

The first and most obvious lead we have is the caption in the image. Let’s put this into Google Translate to see what language it is.

:(
Google translate for the caption in the image

We can see that the language was detected as Croatian. Now from here, I didn’t find any leads, so I looked into the Wikipedia page on Eliot Higgins. Reading this page, we can see that Wikipedia mentions some non-English sources. Let’s check this page out and see what’s in it

:(
Non-English sources listed in brown-moses

Over here, we can see a Croatian news article, which aligns with our earlier finding of the language on the news clipping. The site didn’t contain any sort of link to a YouTube video, just the same picture as we were given in the question.

So the next thing I did was to check the journalist who interviewed Eliot Higgins. His name was Tomislav Krasnec. So I just searched Tomislav Krasnec Eliot Higgins in the Google videos section and got the interview.

The answer is simply the video code.

:(
Search result for Tomislav Krasnec's interview with Higgins

Training Time: There’s a lot to learn.

:(
Problem Image

So we’re asked to do some cool indoor geolocation on this image. We have to find the room in which this picture was taken. Another hint is that the image is credited to ARIJ network. We are also told that this workshop was conducted in 2017 so that’s gonna be a cool lead as well.

So just googling, Christiaan Triebert Workshop 2017 yielded this post on X.

:(
Searching for Christiaan Higgins workshop in 2017

This didn’t give much information. So instead I tried using Google Dorks to find the workshop.

By Google dorking this intext:"December" intext:"2017" intext:"Christiaan Triebert" intext:"workshop" I found that the event was ARIJ 10th Annual Forum and in their website we had an address of Mövenpick Resort & Spa Dead Sea | Dead Sea Road, 11180

:(
https://arij10thannualforum2017.sched.com/list/simple

So from finding this I looked at the rooms available in the hotel in this part of their website. Through that I found the answer to be The Grand Ball room.


Creating Community: A new place to connect.

:(
Problem Image

Ok, so here we will have to do a little bit of scripting, nothing too complicated, just some copying and pasting.

By just using this Google dork intext:'We finally got around to creating a bellingcat Discord server" we can find the post on X. get this time: 7:42 PM · May 12, 2020. Note that this time will be displayed differently based on what timezone you fall under.

:(
Twitter post containing the bellingcat server announcement

So once I found the post, I joined the Discord and used this method to get the age of the server.

So, this method has the following steps:

  • Enable developer mode on your Discord.
  • Open Discord in your browser and open the Inspector tab on your browser.
  • Paste the following code snippet in your browser.
new Date("709752884257882135"/4194304) + 1420070400000
:(
Result of the js code

This gives us this timestamp: Tue May 13 1975 18:34:34 GMT+0530 (India Standard Time)1420070400000 Now, this will be different according to your timezone, but on doing the math we get the time to be 68.


Future Plans: A timely document.

So we’re told that Bellingcat published a document nearly 2 years after they registered.

So I found the pdf by using this Google Dork: intext:"bellingcat" intext:"future plans". Since bellingcat was registered in 2018, it tracks that this result was the right one.

Now there is no author explicitly listed in the pdf, neither do I wanna read the whole pdf. So, I decided to take a look at the pdf metadata, which revealed that the author was Aric Toler.

Great, so we have one part of the challenge solved. Now let’s see if we can get all the articles he published around 2019-2020.

So on searching bellingcat.com aric toler I found this link. I scoured every article until I got this one. The last word of this article is the answer.


Toolkit Tracing: Tool tips new and old.

This was the easiest question of this release. We are asked to find a missing document in an older edition of the Bellingcat Online Investigations toolkit released in the year 2020.

I used this Google dork to search it up: intext:"Guides & Handbooks" intext:"2020" intext:"Bellingcat"

:(
Result of the Google dork

You can find the actual document mentioned in the question here.

In this document, in the Guides & Handbooks section, you can find this document. As it turns out, it is inaccessible. So the obvious first step was to simply check for a snapshot of this document in the WayBack Machine.

:(
Result of the wayback machine search

Once I got to the wayback machine, I simply entered the URL and voila! there it was. So we’ll simply navigate to page 39 of the document and get the first hazard listed.


Hope you found this as useful as I did.

Have a nice day! :)