How to Archive Web Pages and Social Media Posts So They Hold Up as Evidence
Web pages and social media posts can be edited, deleted, restricted, mislabeled, or removed without warning. A screenshot may preserve what appeared on a screen, but it rarely preserves enough information to establish who published the content, when it appeared, whether it was complete, or whether the image was later altered. EpsteinWiki contributors should capture digital material through a documented process that preserves content, context, provenance, metadata, and chain of custody.
Snapshot
| Element | Minimum Standard |
|---|---|
| Evidence identifier | Assign a unique internal evidence number |
| Original address | Record the complete public URL |
| Account identity | Record the display name, handle, and stable account identifier when available |
| Capture time | Record the date, time, and time zone |
| Content | Preserve the complete text, images, video, audio, and visible attachments |
| Context | Capture the surrounding thread, page title, profile, captions, and relevant replies |
| Native file | Preserve the original downloaded file when lawfully available |
| Screenshot | Capture the full screen with the address and identifying information visible |
| Page archive | Create an independent archive link when the service can capture the page |
| Web archive file | Preserve a WARC or WACZ capture when appropriate |
| Integrity record | Generate and record a SHA 256 hash for important files |
| Custody log | Record who captured, transferred, reviewed, copied, or modified the evidence |
| Working copies | Keep annotations, redactions, and conversions separate from the original |
| Privacy review | Protect survivors, minors, witnesses, and private people |
| Publication | Publish only the material required to support the claim |
| Legal status | Do not claim that a capture is automatically admissible in court |
What “Hold Up as Evidence” Means
No capture method guarantees that a court, government agency, journalist, or editor will accept an archived page as authentic or admissible.
In the United States, Federal Rule of Evidence 901 generally requires enough evidence to support a finding that an item is what the person offering it claims it is. Authentication may involve witness knowledge, distinctive characteristics, public records, or evidence explaining an accurate process or system.
Federal Rule of Evidence 902 describes certain records that may be authenticated through certification, including records generated by an electronic process and data copied from an electronic device, storage medium, or file.
Authentication does not resolve every legal issue. Evidence may still face questions involving hearsay, relevance, privacy, privilege, completeness, prejudice, or the method used to obtain it.
For EpsteinWiki, a strong digital archive should allow another researcher to answer:
- What was captured?
- Where did it appear?
- Who appeared to publish it?
- When was it captured?
- How was it captured?
- What surrounding context was visible?
- Was the original file preserved?
- Has the archived file changed?
- Who handled it after capture?
- What limitations remain?
Why Screenshots Alone Are Weak Evidence
A screenshot can be useful, but it usually captures only pixels.
A screenshot may omit:
- The complete URL
- The account’s stable identifier
- The date and time
- The time zone
- Earlier messages
- Later replies
- Edit history
- Deleted portions
- Attached files
- Video or audio
- Interactive content
- Page source information
- File metadata
- Redirects
- The method used to produce the image
Screenshots can also be cropped, rearranged, edited, fabricated, or generated through a replica interface.
A screenshot should normally be one component of a larger evidence package. Preserve the original page address, independent archive, full context, capture notes, native media, and integrity information whenever possible.
The Evidence Package
A complete digital evidence package may contain:
- An evidence intake record
- The original URL
- A full page screenshot
- Detail screenshots
- A saved PDF
- A screen recording
- A WARC or WACZ capture
- An independent archive link
- Original media files
- Available metadata
- A text transcription
- A SHA 256 hash for each important file
- A custody log
- A research note explaining context and limitations
- A separate public copy with necessary redactions
Not every page requires every format. Material involving a serious allegation, likely deletion, disputed identity, or potential legal use requires stronger preservation than a routine public reference.
Before Capturing Anything
Determine whether the material can be lawfully and ethically preserved.
Ask:
- Is the page publicly accessible?
- Does access require an account?
- Does it belong to a private group?
- Was the contributor authorized to view it?
- Does it contain survivor information?
- Does it identify a minor?
- Does it contain medical or financial information?
- Does it contain intimate imagery?
- Is the material sealed or protected?
- Could downloading it expose a source?
- Could the page contain malicious files?
- Is there an immediate deletion risk?
- Is legal or security review required?
Do not bypass passwords, access controls, paywalls, private group restrictions, or account permissions. Do not impersonate another person to obtain access.
Authorization to view a private page does not automatically create authorization to publish it.
Step by Step Archiving Process
Step 1: Assign an Evidence Identifier
Create a unique identifier before processing the material.
A consistent format may include:
- Project abbreviation
- Year
- Evidence type
- Sequential number
Example:
EW 2026 WEB 00427
Use the same identifier for the intake record, original files, hashes, working copies, and custody log.
Step 2: Record the Original URL
Copy the complete URL from the browser address bar.
Record:
- Original URL
- Redirected URL
- Shortened URL
- Platform
- Domain
- Page title
- Post identifier
- Account handle
- Stable account identifier when available
Do not rely on a hyperlink label. The visible words may point to a different address.
Step 3: Record the Capture Time
Record the date and time immediately.
Include:
- Local date
- Local time
- Local time zone
- Coordinated Universal Time
- Time displayed by the platform
- Whether the platform uses a relative label such as “2 hours ago”
A relative time label becomes less useful after the capture. Record the corresponding exact time when it can be determined reliably.
Step 4: Identify the Capturer
Record:
- Name or authorized contributor identifier
- Role
- Device type
- Operating system
- Browser
- Browser version when available
- Capture tool
- Capture tool version
- Network circumstances when relevant
This information helps another person explain how the capture was created.
Step 5: Capture the Full Screen
Take an initial screenshot showing:
- Browser address bar
- Page title
- Account name
- Account handle
- Post date
- Post text
- Visible media
- Relevant platform controls
- Current date and time when practical
Do not crop the original screenshot.
Create cropped or enlarged copies later and label them as working copies.
Step 6: Capture the Complete Page or Thread
Scroll through the material and preserve:
- Full post
- Captions
- Attached media
- Quoted posts
- Parent posts
- Relevant replies
- Thread sequence
- Edit labels
- Community notes
- Visible engagement counts
- Link previews
- Publication date
- Account profile information relevant to authentication
A screen recording can document scrolling, opening attachments, expanding text, and moving through a thread.
Step 7: Save the Page in Additional Formats
When possible, preserve more than one representation:
- Full page screenshot
- Browser generated PDF
- Web archive file
- Independent archive link
- Original HTML or page resources
- Screen recording
- Text transcription
Different formats preserve different information. A PDF may preserve readable text but omit interactive content. A screenshot may preserve appearance but not underlying data. A WARC file may preserve page resources but still miss content loaded through protected scripts.
Step 8: Preserve Original Media
When lawfully available, preserve original photographs, video, audio, documents, and other attachments separately.
Record:
- Media URL
- File name
- File format
- File size
- Resolution
- Duration
- Available metadata
- Date downloaded
- Relationship to the post
Do not use a screen recording as the only copy of an important video when the original file can be preserved lawfully.
Step 9: Create an Independent Archive
Submit the public URL to a reputable web archiving service when the page can be captured.
Possible services include:
- Internet Archive Wayback Machine Save Page Now
- Perma.cc
- An approved institutional web archive
- An approved WARC capture system
Record the resulting archive URL and capture date.
An archive failure should also be noted. Social platforms may block crawlers, require login, load content dynamically, or prevent media capture.
Step 10: Generate Integrity Hashes
Generate a SHA 256 hash for significant original files.
Record:
- Evidence identifier
- File name
- File size
- Hash method
- Complete hash value
- Date generated
- Person or system generating it
Generate a new hash after a meaningful transfer when chain of custody verification is required.
A matching hash can show that two files are identical at the byte level. It does not prove that the file was authentic when first captured.
Step 11: Preserve the Original
Mark the first preserved files as originals and restrict editing.
Do not:
- Add arrows
- Change brightness
- Crop
- Resize
- Compress
- Remove metadata
- Convert formats
- Add watermarks
- Rename the only copy
- Reconstruct missing content
Create separate working copies for analysis and public copies for publication.
Step 12: Begin the Custody Log
Record every meaningful event involving the evidence.
The log should state:
- Date and time
- Person
- Action
- File involved
- Source location
- Destination
- Reason
- Hash verification
- Changes made
- Result
Continue the log throughout review, transfer, redaction, publication, correction, and archival storage.
Required Capture Record
Use a consistent record for every important web item.
| Field | Required Information |
|---|---|
| Evidence ID | Unique EpsteinWiki evidence identifier |
| Captured by | Contributor name or approved identifier |
| Capture date | Month, day, and year |
| Capture time | Exact time and time zone |
| Coordinated Universal Time | Normalized capture time |
| Platform | Website or social media service |
| Original URL | Complete source address |
| Final URL | Address after redirects |
| Page title | Exact visible title |
| Account name | Display name shown |
| Account handle | Username or handle |
| Account ID | Stable platform identifier when available |
| Post ID | Unique post or content identifier |
| Claimed publication time | Time displayed by the platform |
| Content type | Page, post, image, video, audio, comment, or thread |
| Capture methods | Screenshot, PDF, WARC, WACZ, video, or other method |
| Archive URL | Independent archived copy |
| Original file names | Names of preserved files |
| Hash values | SHA 256 values |
| Context captured | Replies, thread, profile, quoted material, and attachments |
| Privacy status | Public, restricted, redacted, or protected |
| Limitations | Missing elements, crawler failure, login requirement, or uncertainty |
| Custody location | Approved storage location |
Web Archive Formats
WARC
The Library of Congress WARC format description explains that the Web ARChive format combines multiple digital resources and related information into an archival file.
A WARC may preserve:
- Page responses
- Images
- Style files
- Scripts
- Metadata
- Request information
- Capture information
- Related resources
WARC is widely used for institutional web archiving and is standardized as ISO 28500.
WACZ
A WACZ file packages web archive content and related indexes into a ZIP based format. The Library of Congress WACZ description identifies it as a packaged format for web archive content and metadata.
WACZ files can make captured content easier to move and replay while retaining the underlying web archive records.
A PDF is useful for reading, citation, and printing. It may not preserve embedded media, page behavior, complete metadata, or dynamically loaded content.
Screenshots
Screenshots preserve visible appearance at a particular moment. They should be retained at their original resolution and accompanied by capture records.
Screen Recordings
A screen recording can show navigation, scrolling, timestamps, expanded sections, and video playback. It should begin with the complete URL and show the steps taken to reach the content.
Using Independent Archive Services
Internet Archive Wayback Machine
The Wayback Machine Save Page Now service allows users to request preservation of many publicly accessible pages.
Record:
- Original URL
- Archive URL
- Archive timestamp
- Whether media loaded
- Whether the page was complete
- Whether the capture can be replayed
A Wayback Machine capture is valuable independent corroboration, but it may not preserve every script, image, video, comment, or protected page.
Perma.cc
Perma.cc creates preservation records intended to reduce link loss. It is operated by the Library Innovation Lab at Harvard Law School.
Perma records may be especially useful when preserving sources cited in legal, academic, and institutional work. Access and account features may differ according to user or sponsoring organization.
Limits of External Archives
External archives may:
- Exclude private pages
- Miss dynamically loaded material
- Fail to capture video
- Save only the login screen
- Respect exclusion requests
- Experience delays
- Preserve a page after it changed
- Become temporarily unavailable
- Capture a regional version
- Omit comments or replies
Always inspect the resulting archive. Do not assume success merely because an archive URL was generated.
Capturing Social Media Posts
A social media evidence record should preserve more than the post text.
Capture:
- Platform
- Display name
- Handle
- Stable account identifier
- Profile URL
- Post URL
- Post identifier
- Publication date
- Publication time
- Time zone
- Exact text
- Images
- Video
- Audio
- Captions
- Alt text when available
- Quoted posts
- Parent post
- Relevant replies
- Edit indicator
- Visible engagement counts
- Community labels or notes
- Archive date
- Capture method
Engagement counts change. Record them as observations at the capture time, not permanent facts.
Capture the Account Context
When authorship or identity matters, preserve relevant portions of the account profile.
This may include:
- Display name
- Handle
- Platform identifier
- Biography
- Profile image
- Header image
- Account creation date
- Verification status
- Linked website
- Relevant historical posts
- Public location claim
- Name changes when documented
- Platform labels
A profile page does not prove who operated the account. Authentication may require prior posts, linked websites, direct confirmation, distinctive knowledge, platform records, or testimony from someone familiar with the account.
Do not collect unrelated personal information.
Threads, Replies, and Quoted Posts
A post can become misleading when removed from its conversation.
Preserve:
- The first post in the thread
- The post immediately before the relevant statement
- The relevant statement
- The next post when it clarifies meaning
- Quoted or reposted material
- Visible corrections
- Relevant replies
- Deleted post notices
- Publication order
Number the items in the order they appeared.
Do not combine separate posts into one quotation without clearly indicating the separation.
Edited and Deleted Posts
Edited Posts
If a platform marks a post as edited:
- Capture the current version
- Capture available edit history
- Record the edit label
- Record the capture time
- Search for earlier archives
- Compare quoted or embedded copies
- Preserve each verified version separately
Do not claim what changed unless an earlier version has been located.
Deleted Posts
If a post has been deleted:
- Preserve the original archive
- Record when deletion was first observed
- Capture the deletion notice or unavailable page
- Search reputable archives
- Check quoted reposts
- Check lawful cached copies
- Preserve related responses
- Avoid presenting an unverified screenshot as conclusive
Deletion does not prove that the original content was false, true, regretted, or removed by the author. State only that the content was no longer publicly available when checked.
Video and Live Streams
For video evidence, preserve:
- Original page URL
- Channel or account
- Video title
- Description
- Publication date
- Duration
- Complete recording when lawfully available
- Relevant timestamps
- Captions
- Transcript
- Thumbnail
- Comments when relevant
- Archive link
- Technical metadata
- File hash
For a live stream, record:
- Start time
- End time
- Time zone
- Platform
- Account
- Whether the recording began after the stream started
- Interruptions
- Missing portions
- Whether the platform later replaced the recording
Do not rely only on a short clip when the complete recording is available. Review what occurred before and after the excerpt.
Images and Photographs
Preserve the highest quality lawfully available version.
Record:
- Source page
- Direct media URL
- File name
- Dimensions
- File size
- Format
- Available metadata
- Caption
- Upload date
- Capture date
- Associated account
- Hash value
Do not alter the original image.
Create separate copies for:
- Cropping
- Enlargement
- Annotation
- Color adjustment
- Redaction
- Publication compression
Every altered copy should identify what was changed.
A photograph appearing on an account does not prove that the account owner created it or that the caption is accurate.
Metadata
Metadata may help establish:
- File creation time
- Modification time
- Device model
- Software
- Dimensions
- Duration
- Geographic coordinates
- Author
- File history
- Encoding
- Platform processing
Social platforms often remove or replace original metadata. The absence of metadata does not prove manipulation.
Metadata can also expose:
- Survivor identities
- Home locations
- Device information
- Usernames
- Organization names
- Internal file paths
- Editing history
Preserve original metadata in restricted evidence records. Remove sensitive metadata only from a separate publication copy.
Follow the Metadata Extracts guide.
Cryptographic Hashes
A cryptographic hash is a value calculated from a file’s exact contents.
EpsteinWiki should use SHA 256 for significant digital evidence unless a technical or legal requirement specifies another method.
If one byte changes, the resulting hash will normally change.
Hashes can help demonstrate:
- The original file remained unchanged
- A transfer produced an identical copy
- A working copy differs from the original
- Two researchers possess the same file
- A published copy matches an archived version
Hashes do not prove:
- Who created the file
- Whether the content is true
- Whether the file was manipulated before capture
- Whether the account belonged to the claimed person
- Whether the capture was lawful
- Whether the evidence is admissible
Record the hash with the evidence, not only inside the file being hashed.
Chain of Custody
A chain of custody is the chronological history of the evidence after capture.
A custody log should identify:
| Date and Time | Person | Action | Source | Destination | Hash Result | Notes |
|---|---|---|---|---|---|---|
| September 6, 2026, 2:15 p.m. Eastern Time | Contributor ID | Original capture | Public URL | Restricted evidence folder | SHA 256 recorded | Full page captured |
| September 6, 2026, 2:32 p.m. Eastern Time | Contributor ID | Working copy created | Original file | Review folder | Different hash expected | Personal information redacted |
| September 6, 2026, 4:10 p.m. Eastern Time | Editor ID | Verification | Review folder | No transfer | Hash matched | Compared with archive copy |
Do not leave unexplained gaps. If a file was received from another person, record what that person said about its origin and what remains unverified.
See the Chain of Custody Evidence guide.
Original, Working, and Public Copies
Original Copy
The original copy should remain unchanged and access restricted.
Working Copy
The working copy may contain:
- Notes
- Highlights
- Transcriptions
- Enlargements
- Translations
- Annotations
- Analytical labels
Label it clearly as a working copy.
Public Copy
The public copy may contain necessary:
- Redactions
- Cropping
- Compression
- Watermarks
- Captions
- Explanatory labels
The public copy should remain traceable to the preserved original through its evidence identifier and custody record.
Authentication Factors
A strong authentication record may include several independent factors.
| Factor | Example |
|---|---|
| Direct observation | The contributor personally opened and captured the public page |
| Original URL | The capture records the complete platform address |
| Account history | Older posts, linked websites, and public records connect the account to the claimed person |
| Distinctive content | The post contains information consistent with authenticated records |
| Independent archive | A preservation service captured the same content |
| Witness confirmation | A person with knowledge confirms the page or post |
| Platform records | Data supplied by the platform identifies the account or post |
| Native file | The original media file is preserved |
| Metadata | Technical information supports the capture history |
| Hash | The preserved file has remained unchanged |
| Documented process | The capturer can explain the tools and steps used |
| Corroboration | Other records support the content or timing |
The strength comes from the combined record, not a single technical feature.
Best Evidence and Duplicates
Federal Rule of Evidence 1002 addresses circumstances in which an original writing, recording, or photograph is required to prove its contents.
Federal Rule of Evidence 1003 states that a duplicate is generally admissible to the same extent as an original unless a genuine question is raised about authenticity or admitting the duplicate would be unfair.
How these rules apply to a specific web capture depends on the facts, jurisdiction, purpose, and available evidence.
Preserving the most original form available, documenting the capture process, and maintaining a clear custody history gives later reviewers more information to evaluate the record.
Corroborating an Archived Page
An archived page proves that certain content appeared in the capture. It does not necessarily prove that every statement on the page is true.
Seek corroboration through:
- Other archive services
- Independent screenshots
- Original media
- Platform embeds
- Replies quoting the post
- News reports created before deletion
- Court filings
- Government records
- EFTA documents
- Witnesses
- Email notifications
- Public statements
- Related account activity
- Platform data requests obtained through lawful processes
Several reposts based on the same screenshot are not independent corroboration.
Common Capture Failures
Missing Address Bar
Without the URL, the screenshot may be difficult to connect to a source page.
Cropped Identity
A capture may show text but omit the account handle or publication date.
Missing Context
A reply may appear to say something different when the parent post is absent.
Relative Time Only
“Yesterday” or “3 hours ago” becomes ambiguous later.
No Original File
A compressed screenshot may be the only surviving copy.
Archive Not Checked
The archive may contain a login page, error message, or incomplete content.
Media Not Preserved
The archived page may omit the photograph, video, or audio central to the claim.
Original Modified
Annotations or redactions may be applied directly to the only preserved file.
No Custody Record
Later reviewers may not know who created or changed the file.
No Privacy Review
The archive may expose a survivor, minor, address, telephone number, or account recovery information.
Dynamic and Personalized Pages
Websites may display different content according to:
- Account
- Location
- Language
- Device
- Browser
- Subscription
- Prior activity
- Personalization
- Test group
- Time
- Login status
Record relevant circumstances.
When practical:
- Capture the page while logged out
- Record whether an account was used
- Record the displayed language
- Record the apparent region
- Note personalization
- Compare another browser or device
- Capture the mobile and desktop versions when materially different
Do not claim that every user saw the same page.
Private Groups and Restricted Content
Private group content requires heightened caution.
Before capture, confirm:
- The contributor was authorized to access the group
- The capture does not violate a legal restriction
- Publication serves a legitimate public interest
- Survivor and member identities are protected
- Group rules and expectations have been considered
- Legal review has occurred when necessary
Do not join a private group under false pretenses or use another person’s account.
A member’s lawful access does not automatically authorize mass collection, republication, or exposure of other members.
Survivors, Witnesses, and Minors
Do not preserve more sensitive information than necessary.
Before sharing or publishing a capture, review for:
- Survivor names
- Minor identities
- Usernames
- Profile photographs
- Home addresses
- School names
- Family relationships
- Medical information
- Sexual history
- Telephone numbers
- Email addresses
- Account identifiers
- Geographic metadata
- Private messages
- Faces in the background
- Reflections
- Notifications visible on screen
- Browser tabs
- Download folder names
Preserve the restricted original when lawful and necessary. Create a separately redacted public copy.
Do not attempt to identify a redacted survivor or minor through other pages.
Illegal Exploitation Material
If a page appears to contain child sexual abuse material, do not download, screenshot, copy, forward, upload, or circulate it.
Stop the ordinary archiving process.
Preserve only noncontent location information when it is safe and lawful to do so, such as:
- Platform
- Public URL
- Account identifier
- Date and time observed
Report the material through the appropriate platform and authorized reporting channel.
Do not place suspected illegal material in EpsteinWiki storage or send it to other contributors for confirmation.
Security Risks During Capture
A page may contain malicious downloads, tracking systems, credential prompts, or attempts to identify visitors.
Before visiting a suspicious source:
- Conduct a risk assessment
- Use an updated device and browser
- Avoid administrator accounts
- Do not open unexpected downloads
- Do not enter credentials after following an unfamiliar link
- Verify the domain
- Avoid installing software
- Record redirects
- Use an approved isolated research environment when necessary
- Ask a security reviewer for assistance
Do not sacrifice contributor safety to preserve a page.
File Naming
Use descriptive names without exposing protected identities.
A useful structure is:
EW2026_WEB00427_original_20260906T181500Z.png
A working copy might be:
EW2026_WEB00427_working_redacted_v01.png
A public copy might be:
EW2026_WEB00427_public_v01.png
Do not include a survivor’s name, a protected minor’s name, a confidential source, or sensitive allegations in a public file name.
Storage and Backup
Store evidence in an approved location with:
- Individual user accounts
- Restricted permissions
- Multifactor authentication
- Encryption
- Version history
- Backup
- Audit information
- Retention rules
- Recovery procedures
Do not rely on:
- One volunteer’s personal device
- A public folder
- An unencrypted portable drive
- A temporary message attachment
- A social media draft
- A single external archive
- A link that may expire
At least one protected backup should be stored separately from the primary evidence collection.
Publishing Archived Evidence
Publication should include only what readers need to verify the relevant claim.
A citation should identify:
- Author or account
- Page or post title
- Platform
- Publication date
- Original URL
- Archive URL
- Access date
- Evidence identifier when appropriate
- Relevant timestamp for video or audio
If the original is gone, say so:
The original post was no longer publicly available when checked on September 6, 2026. EpsteinWiki reviewed an archived capture created on August 22, 2026.
Do not imply why a post disappeared unless the reason is documented.
Corrections and Updated Captures
Web content can change after publication.
When a material change is found:
- Capture the new version.
- Assign or connect the correct evidence identifier.
- Record the new capture date.
- Compare the versions.
- Preserve both versions.
- Update the custody log.
- Correct the EpsteinWiki article when necessary.
- Explain any material change in the editorial record.
Do not replace the earlier capture and destroy the evidence of change.
Final Archiving Checklist
Before relying on an archived page or social media post, confirm that:
- A unique evidence identifier was assigned
- The complete original URL was recorded
- Redirects were recorded
- The account display name was captured
- The account handle was captured
- A stable account identifier was recorded when available
- The post identifier was recorded
- The page title was preserved
- The capture date was recorded
- The capture time and time zone were recorded
- Coordinated Universal Time was recorded
- The full screen was captured
- The address bar is visible in at least one original screenshot
- The complete post or page was preserved
- Relevant thread context was captured
- Quoted posts were preserved
- Replies affecting meaning were preserved
- Edit labels were recorded
- Engagement counts were treated as time specific observations
- Original media was preserved when lawful
- A PDF was created when useful
- A screen recording was created when necessary
- A WARC or WACZ capture was considered
- An independent archive was created
- The archive result was opened and checked
- Original files remain unchanged
- Working copies are clearly labeled
- Public copies are separately redacted
- SHA 256 hashes were recorded for significant files
- The custody log is current
- Authentication factors were documented
- Important claims were independently corroborated
- Private access controls were not bypassed
- Survivor and witness information was reviewed
- Minor identities remain protected
- Sensitive metadata was removed only from public copies
- Illegal content was not downloaded or circulated
- The publication explains relevant limitations
- The capture is not described as automatically admissible
Questions
Is a screenshot enough to prove that someone published a post?
Usually not by itself. Preserve the URL, account information, time, context, independent archive, original media, and capture process.
Does an archive link prove that the content is true?
No. It may help prove that particular content appeared in an archived capture. The underlying claim still requires verification.
Can a screenshot be edited without obvious signs?
Yes. Text, dates, account names, engagement counts, and images can be changed convincingly.
Should the browser address bar appear in the screenshot?
Yes, in at least one original capture. Additional screenshots may focus on content details.
What if the complete URL contains tracking information?
Preserve the original complete URL in the restricted evidence record. A cleaned canonical URL may be used in the public citation when it leads to the same content.
What if the post displays only “yesterday”?
Record the capture time and determine the exact publication time through the platform, page data, archive, or other reliable evidence when possible.
Should engagement counts be included?
They may be captured when relevant, but they should be described as the counts visible at a particular time.
Does deleting a post prove guilt?
No. A post may be removed by the author, platform, administrator, account compromise, legal request, or automated moderation. Do not speculate about the reason.
Can an archive service capture private posts?
Many cannot. Do not bypass privacy controls to force a capture.
Is a PDF better than a screenshot?
It preserves different information. A strong evidence package may contain both.
What is a WARC file?
A WARC is a standardized web archive format that can store captured web resources and related metadata.
What does a SHA 256 hash prove?
It can show that a file has not changed since the recorded hash was generated. It does not prove the original content was authentic or true.
Should the original image be redacted?
No. Preserve the lawful original in restricted storage and make a separate redacted public copy.
Can EpsteinWiki publish content from a private group?
Only after authorization, public interest, privacy, safety, and legal concerns have been reviewed.
Can a contributor use another person’s login to capture a page?
No. Do not use credentials or access that were not personally authorized.
What if the page contains a protected minor’s identity?
Restrict the original, do not republish the identity, and create a carefully redacted public copy only when publication is necessary.
What if the archive service fails?
Record the failure and use other lawful methods such as screenshots, PDF, screen recording, native media preservation, and an approved web archive capture tool.
Can artificial intelligence authenticate a social media post?
No. Artificial intelligence may help compare text or images, but authentication requires the original record, context, provenance, and corroboration.
What should happen when two captures show different versions?
Preserve both, document the capture times, compare the changes, and avoid assuming why the page changed.
What evidence would be needed for a social media capture to support a serious allegation?
The strongest record would include the original URL, complete contextual capture, account authentication, capture testimony, independent archives, preserved native files, hashes, chain of custody, and corroborating evidence.
Related EpsteinWiki Guides
- EpsteinWiki Investigative Standards
- Epstein Files: Evidence Framework
- Metadata Extracts
- Chain of Custody Evidence
- Disinformation and Manipulated Media Guide
- Fact Checking and AI Detection Tools
- Handling Contradictory Evidence
- How to Vet Tips, Sources, and Whistleblowers
- Contributor Safety Guide
- Privacy Safeguards for Minors
- Upload Instructions
- Version Control
- Style Guide
Sources
- Federal Rule of Evidence 901: Authenticating or Identifying Evidence
- Federal Rule of Evidence 902: Evidence That Is Self Authenticating
- Federal Rule of Evidence 1002: Requirement of the Original
- Federal Rule of Evidence 1003: Admissibility of Duplicates
- Library of Congress: WARC Web Archive File Format
- Library of Congress: WACZ Web Archive File Format
- Library of Congress: Recommended Formats for Web Archives
- Internet Archive Wayback Machine Save Page Now
- Perma.cc
- Bellingcat Online Investigation Toolkit
- Mnemonic Archiving Methods
- Berkeley Protocol on Digital Open Source Investigations
- National Archives Metadata in Electronic Records Management
- National Archives Digital Preservation Fixity Guidance