When is a website line of enquiry worth pursuing?¶

A website line of enquiry is worth pursuing when it has a realistic prospect of answering a material question, preserving evidence, identifying further records, linking activity or preventing harm. The presence of a website does not mean every technical avenue is proportionate.

Identify the decision it could change¶

Begin with the investigative purpose. For example:

• identify who published or administered particular content;
• establish what victims were shown at the relevant time;
• locate accounts, payments or communications;
• connect several reported incidents;
• preserve records before deletion;
• inform safeguarding, disruption or search decisions.

If the likely result would not affect any decision or evidential issue, record that before committing substantial time.

Assess prospects and urgency¶

Consider whether the address, time period and activity are sufficiently defined for a provider to locate records. Account identifiers, transaction references and precise URLs often improve the prospect of a useful return.

Urgency may increase where the page is changing, a provider has short retention periods, victims remain exposed or the operator is moving services. A short preservation step may be justified even while the wider value is still being assessed.

Compare alternative routes¶

The website may be only one path to the answer. A witness, payment provider, recovered device or messaging account might provide stronger evidence more quickly. Conversely, registrar or platform records may reveal connections that are unavailable elsewhere.

Balance likely value, intrusion, cost, delay and available alternatives. Avoid repeating enquiries that would only reproduce the same weak subscriber detail.

Reassess as results arrive¶

A proportionate line of enquiry can be stopped. Record what was obtained, what remains open and why further work is unlikely to justify the effort. Equally, a single provider return may expose a new account, payment route or urgent risk that makes the website work more valuable.