WDH-070 Websites, Domains & Internet Infrastructure
What if the visible provider is only a reseller or intermediary?¶
Treat the visible provider as one layer, not a dead end. Use its records to identify the downstream reseller, account or customer.
What to do¶
The upstream provider may hold reseller assignment, billing and technical identifiers. The reseller may hold end-customer, payment, configuration, administration and support records. Timing matters because resources can be reassigned.
Key takeaway
Continue through the chain until you reach the account and activity relevant to the investigation.