Skip to content
Skip to main content
Websites, Domains & Internet Infrastructure Technical Explainer

What conclusions can I safely draw from website evidence?

The safest conclusion is the narrowest one that the evidence actually supports. A captured page may prove what a particular viewer was shown at a recorded time. It does not automatically prove who wrote it, who controlled the site or who committed an offence.

Start with the event you can describe

Record the URL, date and time, capture method, visible content and relevant viewing conditions. Dynamic pages can change according to location, account, device or previous activity, so avoid presenting one capture as the permanent or universal version of the site.

Precise wording might be:

At 14:22 UTC on 18 June 2026, the preserved page at this URL displayed the payment address and telephone number shown in the capture.

That conclusion is useful without claiming more than the capture proves. What a website can and cannot prove explains this boundary in more detail.

Responsibility normally develops through several independent records:

  • the registrar identifies the account used to obtain the domain;
  • the hosting or platform provider records publication and administration events;
  • a payment provider identifies where money was received;
  • communications connect the website activity to decisions or demands;
  • a device contains authenticated sessions, drafts or matching source files.

Each link answers a different question. A billing record may identify a customer, while an administration log may identify activity. Neither alone necessarily identifies the person at the keyboard.

Test the alternative explanations

Consider shared access, delegated administration, false customer details, account compromise, remote access and configuration changes. Record what those possibilities would require and which evidence supports or weakens them.

The final conclusion can then distinguish between what is established, what is supported, and what remains open. This is stronger than stretching one technical match beyond its proper meaning.

The point to remember

Website attribution is a chain of limited conclusions. State what each record proves, preserve its limitations and rely on corroboration to move towards personal responsibility.

Reference: WDH-097Websites, Domains & Internet Infrastructure