Hunting the Narco Boss: Deconstructing Christy Kinahan’s Digital Footprint
Bu çözümün Türkçesi de var: sağ üstten dili TR yapın.
In this investigation, we take on Bellingcat’s Open Source Intelligence challenge centered around Christopher Vincent Kinahan, the notorious head of an international drug cartel. Despite operating in deep secrecy, Kinahan left behind an extraordinary trail of digital breadcrumbs through his public Google Maps reviews and personal web properties.
Our primary objective was to derive a three part numerical key based on his digital traces:
- The digits embedded in Christy’s personal email address.
- The exact day of the month this email first surfaced on the Wayback Machine.
- The day of the month Christy captured the photos outside a Lisbon tapas restaurant.
Phase 1: Initial Profiling and Search
We began by reviewing the public exposure of Kinahan’s operational security failures. Previous investigative reporting by Bellingcat highlighted how the fugitive cartel boss frequently reviewed hotels, restaurants, and aviation facilities worldwide.
As documented in video breakdowns of the investigation, Kinahan operated under the business persona and alias Christopher Vincent.
Phase 2: Uncovering the Hidden Web Footprint
Investigations revealed that Kinahan had established a self styled consulting and business broker presence under his own domain, christopher-vincent.com. A direct lookup yielded nothing active on the live web, leading us to archive records via the Wayback Machine.
Initial snapshots from 2018 failed to render correctly, displaying empty frames and broken components.
Moving systematically across the archive timeline, we identified a fully structured capture from January 16, 2021. While visual elements still partially failed to render on screen, the core architecture of the site was intact
To bypass dynamic rendering issues, we inspected the raw HTML page source (Ctrl + U). Filtering for standard mail providers immediately revealed the underlying form configuration:
“notificationPreference”:”EMAIL”,”formEmail”:”christopher.vincent57@gmail.com”
The email christopher.vincent57@gmail.com provided our first key component: the number 57. Furthermore, because previous snapshots contained no email integration, the date of this capture confirmed the day of the month as 16.
Phase 3: Correlating the Gaia ID and Google Maps History
Using open source intelligence query engine Epieos, we enumerated the Google account linked to christopher.vincent57@gmail.com. The lookup successfully exposed his permanent Google Gaia ID: 107715424953684019563
Querying this Gaia ID brought up Kinahan’s Level 7 Local Guide profile, detailing his travels across Dubai, South Africa, and Europe.
Phase 4: Chronolocating the Lisbon Tapas Spot
Navigating through his review history led us to his activity in Lisbon, Portugal, specifically his review for Tapas n’ Friends Trindade. In his text review, Kinahan noted that he visited the establishment three times during his stay
While his food photos listed a general upload period, one specific photograph taken right outside the venue entrance held the decisive chronolocation clue: an outdoor television screen displaying a live international football match.
A close inspection of the pitch and broadcast graphics revealed the UEFA EURO 2020 group stage fixture between Russia and Belgium. Historical sports records confirm this match took place on June 12, 2021. This established the photo date as the 12th.
Conclusion: Final Key Assembly
Combining our three discovered segments in chronological order:
- Email Digits:
57 - Archive First Appearance Day:
16 - Photo Capture Day:
12
Final Flag: 57-16-12
Originally published on Substack