WDH-040 Websites, Domains & Internet Infrastructure
What evidence best links a person to a website?¶
The strongest attribution usually comes from several independent records pointing in the same direction.
Useful evidence may include:
- domain-registration accounts and payments;
- hosting or platform customer records;
- administrator logins and configuration changes;
- payment beneficiaries;
- emails, messages and support requests;
- device evidence, credentials, files and browser history;
- drafts and development material; and
- contact details or identifiers appearing in the content.
Look for cross-system corroboration¶
Stronger patterns include:
- the same recovery email across registrar and platform accounts;
- the same device accessing the platform and payment service;
- local drafts predating publication;
- support messages referring to operational details; and
- proceeds flowing to an account controlled by the suspect.
Each individual item has limits. A card may be stolen, an address shared, an account compromised and a device used by several people.
Key takeaway
Build attribution from several independent links across accounts, access, devices, payments, communications and content, tied to the relevant period.