The video was mostly shared on Twitter, we focused on this dark web platform. Having the URL of the video, we were using this as token to search Twitter for posts including this link. Based on these posts, we were then able to identify those who were retweeting the content – allowing us to build the network of users in contact with the upload. By tracing back the retweets and discussions, we were able to then identify the user who originally posted the video as well as the one who had injected the video to Twitter where the content went viral.