Step-by-Step OSINT Method to Identify Photo Shooting Locations Using Social Engineering and Terrain Analysis

Hello, I am Xuan Yuan.

Recently a fan posted a photo in a reader group and asked us to guess its location, sparking a discussion about using online tracing to locate the shooting spot.

Step 1: Social Engineering

The first photo contains many clues: it was taken on a train in the north, with distant mountains, indicating a railway‑plus‑north‑plus‑mountain scenario.

By checking the poster’s social media, I discovered two frequent locations: Nanchang, Jiangxi and Karamay, Xinjiang (China University of Petroleum), suggesting the person is a student traveling home for the winter break.

Using the train ticket platform 12306, I searched for routes between Karamay and Nanchang, found a connection via train T308 between Wuwei and Lanzhou, and focused on that segment.

Step 2: Terrain Judgment

Next, I examined satellite maps along the identified railway segment, narrowing the search area by looking for flat terrain with distant mountains, eliminating steep canyon routes.

By focusing on the red‑circled region where the mountain color matches the photo, the possible area was further limited.

Step 3: Feature Search

Analyzing the shadow direction (sun from the southeast at 10 am) indicated the mountain’s right side faces northwest.

Observing the relative distances of the mountain sides and the railway allowed me to sketch a rough layout.

Comparing the railway map, I found a matching section where the left side shows mountains and the right side a red line (the railway).

Additional visual cues—absence of nearby buildings, a small water ditch, adjacent barren land, and a strip of vertical farmland—matched a specific spot on the map.

Finally, I overlaid the model onto the map and identified the exact shooting location, confirming it with the original photograph.

The problem is solved, and a follow‑up question is posed: how would you locate the first photo’s position using a different approach?