Need Help Solving a 14-Year-Old Bitcoin Mystery Hidden on a Windows XP Laptop

I'm helping a friend recover information from an old Windows XP-era laptop and could use advice from anyone with experience in digital forensics, browser artifact recovery, or old internet history analysis.

Around 2011–2013, he used a website related to Bitcoin (either an exchange, online wallet, or similar service). The only thing he clearly remembers is that he had saved the website in Internet Explorer Favorites and used an email address to access the account. Unfortunately, the laptop was later reset/reinstalled due to software issues, and the original bookmarks appear to be gone.

Recently, we recovered the laptop and created a full forensic image of the drive before doing any analysis. We have already run several recovery tools and found traces of old Internet Explorer data, including cookies and browser-related files, but so far we have not been able to identify the actual website.

We have also searched the associated email account, but after many years and multiple cleanups, there are very few old messages remaining.

At this point, we're looking for technical guidance on:

• Recovering deleted Internet Explorer Favorites (.url files)
• Extracting useful information from old IE cache files or index.dat files
• Identifying websites from recovered cookies or browser artifacts
• Any forensic tools that work particularly well with Windows XP-era browser data
• Other investigative approaches we may be overlooking

We are not looking for account recovery services, paid recovery offers, or anyone asking for remote access to the computer. We're mainly hoping to learn from people who have experience recovering data from older systems.

Any suggestions, tools, or resources would be greatly appreciated.