Hello everyone Today we are back with a new TryHackMe challenge called Cache Me Outside

Challenge info:

1
## Background
2

3
Years after walking away from the scene, a retired hacker has left pieces of his identity scattered across the open internet.
4

5
At first glance, it looks like nothing more than a leaked conversation screenshot. But buried in that image is the first thread of a much larger trail. Public profiles, forgotten details, and small mistakes begin to connect into something more deliberate.
6

7
Someone wanted this person found.
8

9
## Your Assignment
10

11
You are an OSINT investigator tasked with identifying the retired hacker and tracing the clues he left behind.
12

13
Start with the conversation screenshot, follow his online presence, connect the exposed details, and use the final evidence to determine where the trail ends.

We start the challenge from the conversation screenshot The important clue is the Komoot profile link shown in the chat :

1
https://www.komoot.com/user/5667624959835

The link takes us to a Komoot account using the name Jim Lee The profile also exposes an external GitHub link so the next OSINT step is to visit that GitHub profile

From the GitHub profile we can identify the username jiml33t

There is also a repository with the same name : jiml33t We should inspect it because repositories often expose useful metadata even when the visible content looks empty

The repository does not contain much visible content It only has one commit which appears to be the initial commit used to create the project

To extract more metadata we clone/download the repository locally and inspect the Git commit history

Now we run git log to check the commit author information especially the email address used when the commit was created

The commit metadata reveals the email address :

1
jimleepro1@gmail.com

Important note : for the phone number after a long search especially in the TryHackMe Discord the intended solution is to send an email and request a reply The mailbox sends an automatic response that contains the phone number

Now we return to social media OSINT

We search for the username :

1
jiml33t

This leads us to an Instagram account and there is also a linked Threads account

Instagram link:

1
https://www.instagram.com/jiml33t/

Threads link :

1
https://www.threads.com/@jiml33t

On the first visible Threads post the target writes that he finished his last run before the big day and is taking the tram to get coffee at his favorite French supermarket

The attached image is the key clue Even though the post mentions a French supermarket the street scene does not strongly match France the road design tram infrastructure buildings and general urban layout look more consistent with an Eastern European location

Image analysis:

Based on the visual environment including the road, tram lines, trees, houses, and infrastructure, the location appears to be somewhere in Europe but more likely Eastern Europe than Western Europe Romania or a nearby country is a strong possibility

This is still a visual estimate not a confirmed geolocation

However there is a stronger clue in the image : the text on the building/sign appears to show

1
irigatii.ro

This looks like a domain name the .ro top level domain is associated with Romania which supports the Romania hypothesis

Next we search for irigatii.ro on Google and inspect the results

The results match the expected clue Now we verify the location using Google Maps and compare the street level view with the image from the threads post This also helps identify the exact city

There is another positive match for the same location :

When we open Google Maps and compare the road tram line, building position and the IRIGATII.RO sign we reach the same location :

The comparison is close enough to confirm the area

therefore the city is:

1
Timisoara

Now we return to the threads post He said he was going to get coffee at his favorite French supermarket after taking the tram Since we already identified the area the next step is to locate the relevant French supermarket near the tram route

The final solution for the question is :

As the post suggested the supermarket is Auchan which is a French supermarket chain by following the tram location evidence on Google Maps we find Piata Gheorghe Domasneanu (Auchan), which matches the final answer shown in the screenshot