the home of online investigations

MH17 – The Open Source Evidence

October 8, 2015

By Eliot Higgins

This report can be downloaded as a PDF here.

Auf Deutsch herunterladen.

Данный отчет также доступен на русском языке.

Introduction

This report summarizes the open source investigations into the downing of Malaysia Airlines Flight 17 (MH17) on July 17, 2014 in Ukraine. It draws on the work of Bellingcat and others who used open source information to uncover facts about the events that took place on July 17 and the origin of the Buk missile launcher that downed MH17.

The Buk Missile Launcher

After the downing of MH17 on July 17, a number of photographs and videos were shared online claiming to show the movements of a Buk missile launcher through separatist-controlled territory. It was possible to confirm the location where each image was recorded and discover additional information that further evidenced when and where the Buk missile launcher was on July 17. The following is an approximate timeline of where the Buk was and when:

  • 10:45 am: Departed Donetsk eastbound along H21
  • 11:00 am – 12:00 pm: Passed Zuhres and Shakhtersk en route to Torez along H21
  • 12:00 pm – 12:45 pm: Entered and then passed through Torez (eastbound)
  • 1:00 pm: Entered Snizhne
  • 1:30 pm – 2:30 pm: Buk was unloaded from the Volvo low-loader truck in Snizhne; left the city (southbound)
  • 4:20 pm: MH17 shot down

Before the first reports and images of the Buk missile launcher were recorded in Donetsk, communications intercepted by the Ukrainian Security Services (SBU) provided information on the earlier movements of the Buk missile launcher. Intercepts include separatists discussing the arrival of the Buk,[1] and references to a location inside Donetsk known as the “Motel.”[2] The Motel, located in the east of Donetsk and used by separatist forces as a base, is close to locations described in social media postings by Donetsk locals who reported sightings of a Buk missile launcher being transported through the city. These sightings are also close to the location where two images showing a Buk missile launcher being transported on the back of a red low-loader were taken, later published by Paris Match[3] and Bellingcat.[4]

1

Paris Match has claimed that the images were taken around 11 am on July 17,[5] and social media posts indicate that the Buk was in Donetsk after 9:40 am. SunCalc shadow analysis by the Ukraine@War blog suggests that the time the photograph was taken was approximately 10 am to 10:15 am.[6]

The next sighting of the Buk was reported from the town of Zuhres, east of Donetsk, in a social media post that included a video[7] of the Buk being transported by a low-loader matching the low-loader photographed by Paris Match in Donetsk. The post also stated the time it was reportedly recorded and the coordinates of the Buk.

2

The coordinates were confirmed as being correct, and the location was later visited by teams from ARD TV,[8] Correctiv,[9] and 60 Minutes Australia,[10] all of whom confirmed the location was correct.

Just after midday, posts were made on social media sites[11] about a Buk missile launcher being transported through the town of Torez, east of Zuhres, and a photograph of the Buk missile launcher being transported by the same missile low-loader seen in the previous images was posted online several hours later. This photograph was geolocated to Torez,[12] with the location again confirmed by ARD TV, Correctiv, and 60 Minutes Australia. As with the Donetsk photographs, camouflage netting can be seen covering the missile loaded onto the Buk.

3

It was also possible to estimate the time the photograph was taken based on the position of the shadows, which showed that the time was around 12:30 pm. Journalists from the Guardian (UK)[13] and Buzzfeed[14] visited the site a few days after July 17 and confirmed this timeframe with locals who had witnessed the Buk missile launcher traveling through the town just after noon.

The next sightings of the Buk missile launcher occurred in the town of Snizhne, east of Torez, after 1 pm. The Buk missile launcher appears in one photograph and one video shared online, which show that it was unloaded from the low-loader and traveling under its own power. Before MH17 was shot down, an AP report[15] was published in which a journalist in Snizhne claimed to have seen a Buk missile launcher in the town after midday.

4

The video from Snizhne is the last publically known sighting of the Buk missile launcher on July 17. The video shows the Buk missile launcher heading south out of the town[16] toward a large area of farmland with small, scattered settlements. It is from this area that the Buk missile launcher is believed to have fired at MH17 a few hours later.

The Launch Site

As with the movements of the Buk missile launcher, which was last seen traveling south out of Snizhne, there are a number of sources of information that provide insights into the likely launch site of the missile that shot down MH17.

A few hours after MH17 was shot down, a photograph was shared on Twitter[17] claiming to show the smoke trail from the launch of the missile that shot down MH17.

5

Dutch news outlet RTL Nieuws conducted an interview[18] with the photographer of the white smoke trail in December 2014, and two research organizations, Fox-IT and NIDF, verified the authenticity of the photographs, while two other organizations, NEO and the Delft University of Technology (TU Delft), examined the white smoke trail and geolocated the photographs. Bellingcat and others also geolocated the photographs,[19] and the exact direction from which the smoke originated.

On July 20, 2014, social news agency Storyful shared satellite map imagery[20] taken the same day, which showed areas south of Snizhne, including the road the Buk missile launcher was filmed heading south on three days earlier and the fields at the end of that road. Track marks in those fields were noted by a number of individuals who visited the area, including Roland Oliphant, [21] a reporter with the Daily Telegraph, and Christopher Miller[22] of Mashable.

Oliphant and Miller discovered one field where a corner had been burnt over a wide area. He took a number of photographs, which were subsequently used by the Ukraine@War blog[23] to geolocate the exact location of the field. This geolocation, which has been reviewed and confirmed by the Bellingcat investigation team and personally confirmed by Roland Oliphant, points to a field just south of where the tracks were visible on the July 20, 2014 satellite map imagery.

6

This location is in line with the smoke seen in the photograph posted on Twitter and verified by experts as authentic.

Digital Globe satellite imagery of the area shows that the burnt/plowed area in the northwest corner of the same field was absent the day before, on July 16, 2014.[24]

7

On July 22, 2014, US intelligence officials published a black and white satellite map image[25] depicting what they claimed to be the path of the Buk missile that downed MH17. Although the quality of the US imagery is poor, it was possible to identify the launch site shown.

8

Using geographical landmarks in the US imagery, it was possible to identify the same landmarks in Google Earth satellite imagery, and from that determine the launch location. The image below shows origin point in the US imagery in relation to the field visited by Oliphant and Miller, which, again, is in line with the smoke in the photograph posted on Twitter.

9

Locals sharing information on social media in the hours after MH17 was shot down also discussed the launch of a missile from the direction of the field,[26] and an audio recording posted online a few days after July 17 from the Zello[27] chat program, popular in Eastern Ukraine, includes locals discussing the missile launch and the direction it came from, again indicating the same approximate location as the field.

Journalists have also interviewed witnesses in the area who confirmed the launch of a missile from the direction of the field.[28] [29] [30] Locals also claimed they risked retribution from separatists for talking about the missile launch.[31]

The Buk on July 18

On July 18, the Ukrainian Ministry of Interior published a video[32] that was filmed in the separatist-controlled city of Luhansk, close to the Russian border with Ukraine, which they claimed showed a Buk heading toward the Russian border on the morning of July 18 carrying three missiles instead of the usual four. The Ukrainian Ministry of Interior later published the coordinates of where the video was recorded,[33] which were confirmed by geolocation[34] and by news organizations visiting the site, including 60 Minutes Australia and Correctiv. As with the images of the Buk missile launcher being transported on July 17, the same truck and low-loader is being used to transport the missile launcher in the July 18 video.

10

Clockwise from top left – Donetsk, Zuhres, Luhansk, Torez

The owner of the truck was contacted by various news organizations[35] using the phone number visible in the Donetsk photograph. He claimed his vehicle yard had been taken over by separatists (the location of which was confirmed to be in Donetsk) and stated, “It is easy to recognize. We know our vehicles. Yes, it is ours, it is the only Volvo with such a cabin.”[36] Satellite imagery from 11:08 am on July 17, 2014 shows the low-loader was absent from the vehicle yard, while in imagery before and after July 17 the low-loader and truck was visible.[37]

The Joint Investigation Team[38] investigating the downing of MH17 included the route of the Buk on July 17 and the July 18 Luhansk sighting as part of a video[39] asking witnesses to come forward. It also published three SBU intercepts that had not been previously released. The intercepts included two discussions about the Buk missile launcher on July 18, recorded around 8:00 am and 8:20 am, a few hours after the Luhansk video was filmed. It was claimed by individuals in the recordings that the Buk and transport vehicles were both in Russia. Given the distance to the Russian border from the location where the Luhansk video was filmed, there would have been ample time for the Buk to have been transported across the border into Russia before 8:00 am on July 18.

The Buk’s Origins in Russia

During a review of photographs and videos shared online of Buk missile launchers in Ukraine and Russia, it was discovered that one particular Buk missile launcher seen in Russia in late June had features that matched those visible in the two photographs of the Buk missile launcher in Donetsk published by Paris Match. The Buk seen in Russia was dubbed “3×2” due to an obscured number on the side of the vehicle (as is the case with the ID numbers of many of the vehicles transported from Russia to Ukraine). The remaining parts of the numbers of the Buk photographed by Paris Match as well as the loading markings and white paint on the rubber side skirt below those numbers were in exactly the same position.

A burn mark above the exhaust visible in one of the Paris Match photographs was also in exactly the same position as the one seen on Buk 3×2 in Russia. While all of these pieces of evidence seemed to indicate that the Buk in Ukraine and Buk 3×2 were one and the same, an additional piece of evidence made the case particularly compelling. During Bellingcat’s research[40] into the many Buk sightings, it became clear that the rubber side skirt above the tracks of Buk missile launchers can become damaged over time and that this damage creates a unique “fingerprint” allowing different Buk photographs to be matched. In the case of Buk 3×2 and the Buk photograph by Paris Match in Donetsk, the side skirts were nearly identical.

12

However, there was one major discrepancy. A kink in the side skirt, visible around two-thirds of the way from the left, did not match. This could be explained two ways: either the side skirt was different, or the process of flattening the Donetsk image to compare to the Buk 3×2 image was unable to factor in significant three-dimensional damage to the skirt. Additional images of Buk 3×2 in Russia confirmed that there was in fact a large tear in the side skirt, bending it outward in exactly the same position as the discrepancy in the comparison.

13

Comparisons were also made between the Donetsk Buk and other images of Buk missile launchers from Russia and Ukraine. None of the other Buk missile launcher images came close to matching Buk 3×2, and it was therefore concluded there was a very high probability that Buk 3×2, photographed and filmed in Russia, was the same Buk photographed and filmed in Ukraine on July 17, 2014.

Tracking Buk 3×2 in Russia

Buk 3×2 was identified as being part of a military convoy that travelled from Kursk to Millerovo, Russia, between June 23 and June 25. Multiple photographs and videos of the convoy, shared online by Russian civilians who lived along the convoy’s route, were identified. Each image was geolocated to the exact location it was recorded, providing an accurate representation of the route that the convoy traveled.

14

It was possible to identify the 53rd Air Defense Brigade, based outside of Kursk, as the origin of the convoy, along with details of which members and units of the 53rd Brigade were part of the convoy. Furthermore, Bellingcat’s research into the convoy identified the military transport battalions involved in the convoy, including the identities of four individuals who could have driven the vehicle transporting Buk 3×2.[41] The information published on Bellingcat, and additional unpublished information, has been provided to the Joint Investigation Team investigating the downing of MH17.

The 53rd Anti-Aircraft Missile Brigade

The 53rd Anti-Aircraft Missile Brigade was originally linked to Buk 3×2 by matching vehicles present in the June 23 – 25 convoy with vehicles visible in photographs taken by members of the 53rd Brigade at their base near Kursk.[42] Bellingcat has spent the last year investigating the 53rd Brigade. With over 200 soldiers’ social media profiles identified, it was possible to confirm the identity and roles of many members of the 53rd Brigade and their involvement in the June convoy that transported Buk 3×2. Due to the sensitivity of much of this information, Bellingcat is currently only sharing the majority of the research with the Joint Investigation Team. That said, the following information can be published.

The 53rd Brigade is made up of three battalions: the 1st, 2nd, and 3rd. The 1st and 2nd Battalions were active in the summer of 2014, while the 3rd Battalion was used for training students and conscripts. The organizational structure of the 53rd Anti-Aircraft Missile Brigade is shown below:

15

Videos of the June 23 – 25 convoy show that it contained a complete Buk battalion, with all but two vehicles coming from the 2nd Battalion. Those two vehicles – one of which was Buk 3×2 – originated from the 3rd Battalion. It is also clear that only one Snow Drift radar was part of the convoy, which may answer the question as to why Buk 3×2 was deployed without a Snow Drift radar. With only one available to the battalion, it would make sense to leave the Snow Drift radar with the other Buk missile launchers that were part of the battalion, rather than depriving all those units of a Snow Drift radar.

Alternative Theories – The Russian MoD’s July 21 Press Conference

On July 21, 2014 the Russian Ministry of Defense gave an hour-long press conference[43] in which they presented their evidence[44] of who may have been responsible for the attack.

The press conference made four main claims:

  • The video published by the Ukrainian Ministry of Interior showing a Buk in separatist-controlled Luhansk was in fact filmed in government-controlled territory in another town.
  • MH17 significantly changed course just before being shot down.
  • Radar imagery shows an aircraft close to MH17 shortly after it was shot down.
  • Satellite imagery shows Ukrainian Buk missile launchers deployed outside of their base on July 17 in Eastern Ukraine.

Since the July 21 press conference, it has been possible to establish that all four claims were false, and, in some cases, involved the Russian Ministry of Defense producing fabricated evidence to support their claims.

The Luhansk Video

Following the downing of Flight MH17 the Ukrainian Ministry of Interior published a video that was filmed in the separatist-controlled city of Luhansk, close to the Russian border with Ukraine, which they claimed showed a Buk, carrying three missiles instead of the usual four, heading toward the Russian border on the morning of July 18.

In the Russian Ministry of Defense’s July 21 press conference, they claimed[45] that the video had actually been filmed in a government-controlled area:

For example, media circulated a video supposedly showing a Buk system being moved from Ukraine to Russia. This is clearly a fabrication. This video was made in the town of Krasnoarmeisk, as evidenced by the billboard you see in the background, advertising a car dealership at 34 Dnepropetrovsk Street. Krasnoarmeisk has been controlled by the Ukrainian military since May 11.

To support this claim, they provided an image of the billboard visible in the video along with what they claimed the line of text read.

16

However, it was possible to establish the true location the video was filmed using open source investigation techniques,[46] which confirmed the billboard’s exact location in separatist-controlled Luhansk. This location was visited by a Luhansk local who took photographs of the area which both helped confirm the location, and what was written on the billboard.

17

It is clear that not only was the location claimed by the Russian Ministry of Defense incorrect, but the billboard’s text is very different from the text the Russian Ministry of Defense claimed was on the billboard.

MH17’s Significant Course Change

The Russian Ministry of Defense presented the following image during the press conference, claiming that MH17 had significantly diverted from its course:

18

The Russian Ministry of Defense stated that:

On the scheme you can see the international airway. The Boeing-777 was supposed to fly on this airway. Draw your attention to the fact that the aircraft followed inside the specified air-corridor to Donetsk, then it deviated from the route to north. Meanwhile the maximum distance from the left border of the air-corridor was 14 kilometers. Then we can see that the Boeing-777 turned back to the borders of the specified air-corridor. Nevertheless Malaysian aircrew didn’t succeed the maneuver. At 17.20 we entered the event of the aircraft rate reduction, at 17.23 the aircraft’s point blinked off on the radar. Why did the aircraft cross the border of the air-corridor? Was it the navigation mistake, or the aircrew followed the Dnepropetrovsk ground control orders? We will find the answers after “black boxes” and communication decoding

The preliminary Dutch Safety Board report[47] answered the questions that the Russian Ministry of Defense asked, showing that MH17 had been on an entirely different course than that which was claimed by the Russian Ministry of Defense and had not changed course in the way described in the Russian Ministry of Defense’s imagery.

19

Russia’s Radar Data

The Russian Ministry of Defense also presented radar data showing MH17 and claimed “Russian system of air control detected the Ukrainian Air Force aircraft, purposed Su-25, moving upwards toward to the Malaysian Boeing-777. The distance between aircrafts was 3-5 kilometers.” Chief of Staff of the Air Force Lieutenant-General Igor Makushev was then invited to comment on the radar data.

At 17.20 P.M. at the distance of 51 kilometers from the Russian Federation state boundary and the azimuth of 300 degrees the aircraft started to lose its speed obstructively which is quite distinctively to be seen on the table of the aircraft characteristics. At 17.21 35 seconds P.M. with the aircraft speed of 200 km/h at the point of the Boeing crash there is a new mark of the aircraft to be seen. The aircraft was steadily monitored by radar stations of Ust-Donetsk and Butirinskoe during 4 minutes period. Air control officer having enquired the characteristics of newly appeared aircraft couldn’t possibly get them because it is in all likelihood that the aircraft had no secondary deduction system amounted on it, which is put typically for military aircraft. The early detection of this aircraft appeared to be quite impossible because the air situation control is usually performed by radars working in a standby mode which detection possibilities at the given distance are over 5000 m altitude.

The detection of the aircraft turned out to be possible as the aircraft ascend it.

However, radar experts were interviewed by a number of news organizations who gave a different opinion, with Dutch NOS news asking four experts to give their opinions.[48] Comments included, “it is really impossible for [it to be] a fighter,” “no aircraft was in the vicinity of flight MH17,″ “it seems likely that the signals are the wreckage of MH17,″ and “falling debris are the most likely explanation.”

Russian Satellite Imagery

Russia also presented sets of satellite imagery showing three different locations, including two military bases and a field outside the town of Zaroshchens’ke. At one military base, the 1428, it was claimed that images from July 14 and July 17 showed that a Buk missile launcher had moved from the base on July 17.

20

However, comparisons of an image from the satellite company Digital Globe of the same location on July 17[49] show a number of clear discrepancies. For example, large areas of vegetation visible in the July 14 Ministry of Defense images were absent from the July 17 Digital Globe image.

21

Historical satellite imagery of the same location from July 2 and 21 of the same area on Google Earth confirms that the vegetation had been cleared weeks before July 17.

22

Patches of worn-away grass visible in the Russian Ministry of Defense imagery were also absent in the Digital Globe July 17 imagery.

23

But, as with some of the other discrepancies between the images, the patches of missing grass were visible in earlier historical imagery on Google Earth, clearly showing the Russian Ministry of Defense images were from weeks before MH17 was shot down.

24

After publishing these images, it was discovered that the same satellite imagery had been published by the SBU in July 2014. The Russian Ministry of Defense responded by claiming that the SBU was presenting falsified images.[50] However, it is clear that the SBU images are genuine (although with the RGB color channels inverted to BGR for an unknown reason), and that the Russian Ministry of Defense presented and defended images that are purposefully dated incorrectly.

Alternative Theories – The Almaz-Antey Press Conference

On June 2, 2015 Russian arms manufacturer Almaz-Antey presented evidence claiming to show the specific type of missile used to shoot down MH17 in Ukraine. They were quoted as stating:[51]

If a surface-to-air missile system was used [to hit the plane], it could only have been a 9M38M1 missile of the BUK-M1 system.

They went on to add:

Production of BUK-M1 missiles was discontinued in 1999, at the same time Russia passed all such missiles that were left to international clients.

The clear implication was that the Buk missile used to shoot down MH17 could have not come from Russia. The most obvious visual difference between the 9M38M1 missile, and the newer 9M317 is the length of the fins, with the 9M38M1 having longer fins, as visible below.

25

Despite these longer fins being visible on Buk missiles loaded onto launchers at Russia’s Victory Day Parade in Chita,[52] the Almaz-Antey’s head, Yan Novikov claimed “that only the newer BUK-M2 systems with 9M317 missiles take part in modern parades,” adding, “even an untrained eye can tell the two apart.” Despite this claim, internet users came across numerous images of what seemed to be 9M38M1 missiles in military service.[53]

Reuters’ photographs[54] taken on a road near Kamensk-Shakhtinsky, dated August 16, 2014, shows Russian military vehicles heading toward the town, close to the Ukrainian border. Trucks in the photographs are carrying a number of missile crates, and their markings give a clear indication of their likely contents.

26

These crates are marked 9M38M1, and it was also possible to identity two vehicles in the Reuters’ photographs as being part of the June 23 – 25 53rd Brigade convoy transporting Buk 3×2 to Millerovo.[55] It is also possible to identify missiles in videos of the 53rd Brigade convoy as having the long tail fins associated with the 9M38M1 missile.[56]

Almaz-Antey also claimed that, based on their research, the launch site of the missile that shot down Flight MH17 was near the town of Zaroshchens’ke, 20 km west of the proposed launch site near Snizhe. Interestingly, the area highlighted as the possible launch area by Almaz-Antey includes an area the Russian Ministry of Defense included in their debunked satellite imagery, highlighted in red below.

27

Analysis of satellite imagery and battlefield reports indicates this area was under the control of separatist forces on July 17, 2014,[57] and Novaya Gazeta[58] and Correctiv[59] also interviewed locals who stated that they saw no signs of missile launches or Buk missile launchers on July 17, 2014. Unlike the social media activity related to the Snizhne launch site, the Bellingcat investigation team has been unable to find any social media activity related to missile launches from the Zaroshchens’ke area.

Summary

Based on the information above, it can be concluded that on July 17, 2014 a Buk missile launcher, originating from the 53rd Brigade near Kursk, Russia, travelled from Donetsk to Snizhne. It was then unloaded and drove under its own power to a field south of Snizhne, where at approximately 4:20 pm it launched a surface-to-air missile that hit Malaysia Airlines Flight 17 as it flew over Ukraine. On the morning of July 18, the Buk missile launcher was driven from Luhansk, Ukraine, across the border to Russia.

Alternative scenarios presented by the Russian Ministry of Defense and Almaz-Antey are at best deeply flawed, and at worst show a deliberate attempt to mislead using fabricated evidence.

 

[1] https://www.youtube.com/watch?v=MVAOTWPmMM4&t=4m16s

[2] https://www.youtube.com/watch?v=MVAOTWPmMM4&t=3m5s

[3] http://www.parismatch.com/Actu/International/EXCLU-MATCH-Un-camion-vole-pour-transporter-le-systeme-lance-missiles-577289

[4] https://www.bellingcat.com/news/uk-and-europe/2015/01/17/new-images-of-the-mh17-buk-missile-launcher-in-ukraine-and-russia/

[5] https://plus.google.com/+IainMartin/posts/MWyx9pgG4tN

[6] http://ukraineatwar.blogspot.nl/2015/09/suncalcing-buk-and-vostok-transport-to.html

[7] https://www.youtube.com/watch?v=xK3tXzqais0

[8] http://www1.wdr.de/mediathek/video/sendungen/die_story/videotodesflugmhwarummusstenmenschensterben100.html

[9] https://mh17.correctiv.org/english/

[10] http://www.9jumpin.com.au/show/60minutes/stories/2015/may/mh17/

[11] https://www.bellingcat.com/news/uk-and-europe/2015/07/16/in-their-own-words/

[12] https://www.bellingcat.com/news/uk-and-europe/2014/07/18/buk-transporter-filmed-heading-to-russia-sighted-in-an-earlier-photograph/

[13] http://www.theguardian.com/world/2014/jul/22/ukraine-sightings-missile-launcher-mh17

[14] http://www.buzzfeed.com/maxseddon/locals-say-rebels-moved-missile-launcher-shortly-before-mala

[15] http://bigstory.ap.org/article/russia-dismisses-us-sanctions-bullying

[16] https://www.bellingcat.com/resources/case-studies/2014/07/17/geolocating-the-missile-launcher-linked-to-the-downing-of-mh17/

[17] http://twitter.com/wowihay/status/489807649509478400

[18] http://www.rtlnieuws.nl/nieuws/binnenland/hoe-onderzocht-rtl-nieuws-de-nieuwe-mh17-fotos

[19] https://www.bellingcat.com/news/uk-and-europe/2015/01/27/is-this-the-launch-site-of-the-missile-that-shot-down-flight-mh17/

[20] https://twitter.com/DavidClinchNews/status/490962257744904193

[21] http://www.telegraph.co.uk/news/worldnews/europe/ukraine/10984530/MH17-the-clues-which-may-lead-to-missile-launch-site.html

[22] http://mashable.com/2015/07/15/mh17-missile-launch-site/

[23] http://ukraineatwar.blogspot.nl/2014/07/exact-location-pinpointed-of-mh17.html

[24] Digital Globe catalog ID 10300100342F0300

[25] http://www.theguardian.com/world/2014/jul/22/mh17-us-intelligence-russia-separatists-report

[26] https://www.bellingcat.com/news/uk-and-europe/2015/07/16/in-their-own-words/

[27] https://www.youtube.com/watch?v=SkCcCmYlMZc

[28] http://mashable.com/2015/07/15/mh17-missile-launch-site/

[29] http://www1.wdr.de/themen/politik/investigativ/mhsiebzehn/faktencheck-100.html

[30] http://www1.wdr.de/mediathek/video/sendungen/die_story/videotodesflugmhwarummusstenmenschensterben100.html

[31] http://www.volkskrant.nl/buitenland/heeft-u-hier-een-buk-raket-gezien~a4024652/?hash=9af4fbf3417b22dd154bcf8fe3b40654632ec8e3

[32] https://www.youtube.com/watch?v=L4HJmev5xg0

[33] https://www.facebook.com/arsen.avakov.1/posts/670837696339673?comment_id=672844756138967&offset=0&total_comments=45&comment_tracking=%7B%22tn%22%3A%22R5%22%7D

[34] https://www.bellingcat.com/news/uk-and-europe/2015/05/29/whos-lying-an-in-depth-analysis-of-the-luhansk-buk-video/

[35] http://www.alfa.lt/straipsnis/472203/alfa-lt-isskirtinis-interviu-su-raketas-buk-kuriomis-buvo-numustas-malaizijos-avialiniju-lektuvas-gabenusio-vilkiko-savininku#.U-Ac4vmSx8F

[36] http://www.news.com.au/travel/travel-updates/mh17-breakthrough-owner-of-volvo-truck-that-transported-missile-fears-for-his-life/story-fnizu68q-1227014149633

[37] https://www.bellingcat.com/news/uk-and-europe/2015/06/30/low-loader/

[38] http://www.jitmh17.com/

[39] https://www.youtube.com/watch?v=olQNpTxSnTo

[40] https://www.bellingcat.com/news/uk-and-europe/2014/11/08/origin-of-the-separatists-buk-a-bellingcat-investigation/

[41] https://www.bellingcat.com/news/uk-and-europe/2015/05/13/tracking-the-trailers-investigation-of-mh17-buks-russian-convoy/

[42] https://www.bellingcat.com/news/uk-and-europe/2014/11/08/origin-of-the-separatists-buk-a-bellingcat-investigation/

[43] http://archive.mid.ru/brp_4.nsf/0/ECD62987D4816CA344257D1D00251C76

[44] https://youtu.be/4bNPInuSqfs

[45] https://www.youtube.com/watch?v=4bNPInuSqfs#t=1567

[46] https://www.bellingcat.com/news/uk-and-europe/2015/05/29/whos-lying-an-in-depth-analysis-of-the-luhansk-buk-video/

[47] http://www.onderzoeksraad.nl/en/onderzoek/2049/investigation-crash-mh17-17-july-2014/preliminary-report/1562/preliminary-report-points-towards-external-cause-of-mh17-crash

[48] http://nos.nl/nieuwsuur/artikel/2030649-geen-straaljager-te-zien-op-russische-radarbeelden-mh17.html

[49] https://www.bellingcat.com/news/uk-and-europe/2015/06/12/july-17-imagery-mod-comparison/

[50] http://mil.ru/analytics.htm

[51] http://rt.com/news/264421-buk-missile-manufacturer-investigation/

[52] https://www.youtube.com/watch?v=yymGgn2cfG0

[53] https://www.bellingcat.com/news/uk-and-europe/2015/06/03/evidence-the-russian-military-supplied-the-type-of-missile-used-to-shoot-down-mh17/

[54] http://uk.reuters.com/news/picture/west-faces-tough-choices-if-russia-ukrai?articleId=UKKBN0GG06M20140816&slideId=964530682

[55] https://www.bellingcat.com/news/uk-and-europe/2015/06/03/evidence-the-russian-military-supplied-the-type-of-missile-used-to-shoot-down-mh17/

[56] https://youtu.be/OJPxt7XrG6Q?t=77

[57] https://www.bellingcat.com/news/uk-and-europe/2015/07/13/zaroshchenske-launch-site-claims-and-reality-a-bellingcat-investigation/

[58] http://www.novayagazeta.ru/inquests/68846.html

[59] https://mh17.correctiv.org/english/

Eliot Higgins

Eliot Higgins is the founder of Bellingcat and the Brown Moses Blog. Eliot focuses on the weapons used in the conflict in Syria, and open source investigation tools and techniques.

Join the Bellingcat Mailing List:

Enter your email address to receive a weekly digest of Bellingcat posts, links to open source research articles, and more.

265 Comments

  1. Andrew

    If you want know the truth – answer on one question -and I ask before. Why this investigation didnt search ukranian BUK and AA system in this area? Where is fact of location Ukranian AA system at tgis day. By the way – watch this video. There are BUK on 4:48
    https://youtu.be/Q3MomxNHnUA

    Reply
  2. Randy Dread

    The DSB report confirmed that a missile with a 9N314M warhead was used.

    This warhead is the old type and has not been issued to Russian forces since 1995.

    Many reports are describing the missile as a ‘Russian missile’. It’s likely that the missile and warhead are in fact Soviet vintage, and thus never left Ukraine since they were originally issued.

    Reply
  3. Mike Nobbers

    Randy, if you paid attention, you’d know that the 9N314M warhead is extra confirmation of what Bellingcat reports here. The Dutch Safety Board did indeed write:

    “Of the investigated warheads only the 9N314M contains the unique bowtie shaped fragments found in the wreckage.”

    And – that’s where you should have paid attention – follows that statement with:
    “…is consistent with the damage caused by the 9N314M warhead used in the 9M38 and 9M38M1 BUK surface-to-air missile.”

    The 9M38M1s being the BUKs being reported here.

    In conclusion: Randy, do keep up! 🙂

    Reply
    • Randy Dread

      the warhead is a unit attached to the missile.

      this particular warhead, the 9N314M, has not been issued in Russia since 1995.

      Reply
      • Salazar

        Hi Randy,

        May I ask what do you do for a living? Or better still can you please assure me that you are in no way shape or form in a position of responsibility whereby your complete lack of logic, reason and powers of deduction could, in no way harm the general public?

        Thanks

        Other than that, date of issue means very little randy. Date of decommission and evidence of decommission does. For example, the Russian Air Force still uses bombers issued in the 50’s.

        So supply evidence that Russia has in fact destroyed all of these warheads or we are perfectly entitled to think Russia still has them…not even almaz wanted to tackle that question today randy, so good luck.

        Oh and if you could also provide any evidence whatsoever of the Ukrainian army having fired any ground to air missiles throughout the course of the conflict in the east of Ukraine that would also be just peachy. You’d also be doing a great deal more than Russia have managed to so far.

        No blogs, no tweets, as I know how you hate those.

        Reply
        • Randy Dread

          supply evidence of anyone else firing any ground to air missiles.

          there is none.

          however the rebels are due to make a statement tomorrow.

          could it be they will own up to doing it and clear this whole mess up?

          i would honesrtly be happy in a sense if that happened, just to get some closure.

          Reply
          • Randy Dread

            sorry of course i was wrong to say no missiles were fired, of course they were, i mistakenly assumed you meant just Buk type missiles.

          • Salazar

            I think there is evidence of someone having fired one randy.
            Read the report, they dug the evidence out of the plane and the crew.

            You yourself are posting about the warhead used. How can you state that a warhead was used and then say that there is no evidence of a missile being fired?

            No missile. No warhead.

            It’s really not difficult randy.

            Re the statement, do you think zacharchenko might stick with his story that he saw two SU25’s downing MH17?

            Nah me neither. Given that the report has categorically proven there was no other planes closer than 30 plus km away.

            That said, you being a stickler for raw data…why do you think the Russians withheld the raw data from their radar? Hmm, guess we’ll never know.

            So any evidence that Russia has in fact decommissioned these warheads randy and thus have none whatsoever in use by their army?

          • Salazar

            sorry of course i was wrong to say no missiles were fired, of course they were, i mistakenly assumed you meant just Buk type missiles.

            It’s ok to be wrong randy. But you aren’t supplying evidence to support your inference that only the Ukrainians have the weapons used, or that they used them.

            If you can’t prove it. You probably shouldn’t infer it.

          • Officer Bauer

            Randy, let me guess, you are a college professor and you voted for president Obama.

            This is an investigation not a thesis. An investigation requires evidence, witnesseses, confessions. Not your thesis.

            Obviously they were using the older missile, then they can claim their innocence. There glove didn’t fit lol… Or just like thug wanna be gang bangers that use a firearm in a crime. It’ll be defaced our stolen.

            You think Russia would get rid of a weapon? They wouldn’t even retire an ak47

      • boggled

        Pretty definitive statement Randy, I assume you have at least two non Kremlin sponsored media sources from before 2014 to back that up?

        So what? They are attaching newer 9m317 warheads to old 9m38 missiles is what your stating?
        You do know the bolt patterns doesn’t match up don’t you?

        Did you know a Russian general stated back in 2007 that they will not begin to phase out the BUKM1 until 2009 when the M3 comes available?

        Fare thee well

        Reply
    • Deus Abscondis

      It’s not quite true that it’s the only warhead to have bowtie fragments. Maybe in service yes.

      Reply
  4. Buck

    Reminiscent of KAL007 over Sakhalinsk (supposedly) mistaken for AC135. Yeah right. Little coincident that MH370 goes missing shortly after occupation of Ukraine and then Putin is implicated in shooting down exactly the same type and flag carrier over Ukraine. We live in the most dangerous of times. Great work Eliot, wish you could do the same on MH370, it would explain a lot of this sabre rattling.

    Reply
  5. Mad Dog

    Waiting for Randy to give us some evidence about the non-use of that warhead, now that we know it was not gunfire or an AAM that hit the aircraft. I also thought this whole nonsense about the older Buks being out of service was already disproved.

    Reply
  6. karnant

    First, you can’t see on this photo what type of vehicle is in the trailer and the photo is vague.

    Second, it’s impossible to understand a geographical position of place where this pictures were taken.
    https://wp4553-flywheel.netdna-ssl.com/wp-content/uploads/2015/10/13.jpg
    https://wp4553-flywheel.netdna-ssl.com/wp-content/uploads/2015/10/41.jpg

    Third, is it possible to make any investigation using to vague photos without any geographic binding and information from social networks?

    Reply
    • Buck

      The number of excuses made by the accused, in this case Russia, is usually directly proportional to their guilt. Russia have multiple non-corroborating excuses and theories. Methinks Mother Russia dost protest too loudly (Apologies to the Bard). Most disturbingly, it appears that MH17 was the intended target and substantial planning went into this.

      Reply
    • Randy Dread

      The first thing the defence would ask in court is to see the original files.

      Of course none of this social media stuff as peddled by Bellingcat for the Ukrainian SBU will ever appear in court, because it would be exposed as bogus.

      Reply
      • boggled

        You missed the statements from DSB that they received the original files and the evidence stood up to their opinion and validated them?

        Sure a judge is different opinion, but I have no doubts of its veracity, that it will be presented, and that it will be used in court.

        You sure like to make a lot of opinions Randy and present them as facts, which they are not.

        Fare thee well

        Reply
  7. Randy Dread

    according to ukraine, its primary radar was down for maintenance at the time of the shootdown.

    maybe this explains why a ukrainian crew might have panicked.

    Reply
  8. SeaCat

    One more fake propaganda from West team. Congratuations. You show report, that Russian Ministry of Defense’s July 21 press conference lie, and show video with “BUK” carried by Truck, and after you see 1 missle absent… Great! Now you do all Job for Russians, because here “Bellingcat” “superexpert” see 1 missle is absent, and he sure this “BUK” shootdown MH-17, nice dude… but you be surprised, this “BUK” is Ukrainian, LoL… http://www.youtube.com/channel/UCVPYbobPRzz0SjinWekjUBw.

    And one more, mr. Expert, about your 3X2 “BUK” system and what based all your reports. Try to explain this video, mr. Expert – https://www.youtube.com/watch?v=xOo-VWKezmo 01:08, right side “BUK” – 332. Magic? This Ukrainian Army in ATO… 05.07.2014.

    Reply
    • bellingcatadmin

      You don’t seem to realise both Russia and Ukraine uses the same numbering system for their Buks, and the numbers are only unique at Brigade level, so there would be multiple Buk 332’s in Russia and Ukraine. What we’ve been able to show is damage, markings, and other indications show the Buk from July 17th is the same Buk seen in June in Russia.

      Reply
        • boggled

          Randy, you have seen what is in the DSB report and what was presented at Bellingcat.
          Although they did not work together technically.
          They did come up with many of the same statements.
          When you come up with the truth, multiple come to the same solution or conclusion.

          I imagine JIT’s conclusion is going to be very similar to BC’s, and that is a good feather in Bellingcat’s hat because they showed how they came to their conclusions and each and every person in the world can do the same investigation and get similar results.

          Randy, the credibility of the Kremlin just keeps going lower and lower with every lie they and the BS their Kremlin defenders produce.

          So keep up the good work Randy and SeaCat, you’re digging a hole deeper for Russia than the one the Kremlin is digging.

          Fare thee well

          Reply
          • Randy Dread

            a Buk hit the plane.

            That’s the statement the DSB and Bellingcat have in common.

            not much of a revelation.

        • karnant

          Probably that on the Bellingcat the best experts in the weapon and the analysis of photos in the world. Such method of the analysis as the analysis of the judicial photo is unfamiliar to them. It would be interesting to learn, what scientific methods of the analysis were used in this article? It would be desirable to receive references to these methods in scientific magazines. What it the method “fingerprint”? There are articles in scientific magazines about this method? And all the rest – doesn’t maintain any criticism.

          Reply
          • boggled

            karnant, there is a little thing called a ‘search box’ on the upper right of your screen.
            Your welcome to look through the methods.
            Many are clearly stated and you can replicate them and use them yourself.
            The button at the top of the page called ‘Guides’ is a good one to browse through also.

            Bellingcat is not creating new tools to use for open source investigation, but they are teaching others how to uses them and show examples of their use.

            They are using available tools that anyone, even you can use.

            Feel free to browse around.
            The reality versus your comment just shows how little you know about Bellingcat.
            You demonstrate all your comment’s purpose is to falsely attempt to discredit BC, and it fails on a massive scale.

            You have little knowledge, and you show your probably a Kremlin sponsored TROLLop and not to be paid attention to due to your lack of intelligence.

            Fare thee well

          • Deus Abscondis

            The cynics 10 easy steps guide to open source social media independent investigation and analysis.
            Step 1. Get onside with an intelligence agency to create data for your/their story-this is the best form of “open sourcing” because it’s easy.
            Step 2. Create accounts to deliver the information to your assets and then delete the account. This is much easier and faster than developing an asset to give the impression of provenance or putting the effort into developing phantom accounts.
            Step 3. Ensure any metadata is unverifiable.
            Step 4. Use the “can’t reveal source due to endangering their life” game.
            Step 5. Before doing any of the above make sure you have enough material to fill any gaps in the story or to take the story off on a new tangent.
            Step 6. Have a list of assets to feed lines/data to, such as to give the impression that there’s lots of people out there taking video’s and photo’s of things that support your story. The world really is full of nerds.
            Step 6.1 Create lot’s of phantom accounts and have coversations with yourself. Skeptics can be turned/or drowned out through “group” pressure.
            Step 7. In planning, work back from your conclusion and gather data to fit. Always add bit from time to time to make it interesting but not so much as to kill of intrique.
            Step 8. Never provide too much data as this runs the risk of getting caught with contradictions. Use one photo rather than two. Blurry photo’s are better than high resolution ones – hint: use vaseline on a lens filter. Apply jpeg compression over and over againt to get that blocky effect. Or buy cameras that are over ten years old – the are very cheap and have a lot less metadata tags.
            Step 9. Be rightous, don’t ever admit errors.
            Step 10. If you run a web site: ensure you have a pool of supporters to staff comments sections. Ensure that replies can be halted through turning off the reply button on a comment. Don’t include comments in your serach engine. Use a clunky comments inteface that makes it difficult to follow long threads.

          • Aric Toler

            you are the only actual human on this site, and are not a solipsist.

          • boggled

            So Dues, that is the method of Kremlin sponsored media?
            Or is it just the Kremlin defender TROLLops training manual?

            Sounds a lot like the second one.

            Aric, I have heard people called special before, but not in such an artful and polite way as you do.
            Keep up the great work!

            Fare thee well.

      • connoisseur

        You have shown your ‘expertise’ again.
        Listen to the operator of that BUK that you’re chasing for months. He will also explain the numbering system for you.

        Reply
        • boggled

          Randy oh Randy, you will shout from the hills when, soon to be defunct, ConsortiumNews, uses an anonymous intelligence source, but you decry sites that utilize actual investigative techniques that you can recreate yourself and duplicate.

          Do you understand why people consider you asinine and insane?

          Fare thee well

          Reply
          • Randy Dread

            the source here isnt anonymous.

            we know who invented the method.

            the point is it has no validity. quoting blogs doesnt make it valid.

  9. Sito

    Let them talk Randy, once the truth will come out, they will wake up. I’m from Holland, also very into this crime. You would not believe how the government tries to keep things under cover. Thank you Randy!

    Sad thing is…, mainstream media is really pointing out this ‘amateur-journalism-blog’ as to be a valid and reliable source.

    Reply

Leave a Reply

  • (will not be published)