WDH-092 Websites, Domains & Internet Infrastructure
Who controls a seller page, profile or storefront?¶
Control may be divided between a seller, business owner, staff, agency, contractor, account manager or attacker using a compromised account.
Evidence to consider¶
- account creation and verification;
- seller, administrator and staff permissions;
- listing and editing history;
- login activity;
- bank and payout settings;
- customer communications;
- security events and password resets.
Keep the conclusion precise¶
Accounts, IP addresses, devices and provider records may identify a technical or contractual relationship without identifying the individual responsible. Test shared access, delegated administration, automation, compromise and changes over time.
Key takeaway
Identify the specific permissions, actions and payment flows rather than relying on the visible seller name.