Skip to content

The directory

Every engagement type in this directory

Every kind of engagement described on this site, in one place: the forensic examinations that retrieve and preserve the domain record, and the litigation support that puts it in front of a forum. Both lists are grouped by discipline, and every card carries the answer-first field — documentary, analytical or procedural — so the whole reference can be scanned before anything is opened.

Forensic Analysis

11 entries

Attribution and Ownership

Registrant Attribution

How an expert connects a redacted registration to a real operator, and how strong or weak that inference actually is

Read the entry →

Attribution and Ownership

Domain Ownership Investigation

Reconstructing control of a domain name on a given date from registry events, transfer records and the registrar account file

Read the entry →

Hosting and Infrastructure

Redirect and Traffic Diversion Forensics

Capturing a redirect chain hop by hop before it is switched off: status codes, headers, destinations and the dates it was in place

Read the entry →

Registration and Historical Records

Registrar Record Production

The records a registrar keeps about an account, the retention floors that expire without warning, and how production is actually requested

Read the entry →

Registration and Historical Records

Evidence Preservation for Domain Disputes

Capturing registration data, DNS answers and page content before they move, in a form someone else can verify later

Read the entry →

Registration and Historical Records

Domain Evidence Chain of Custody

The log that answers a challenge to a domain exhibit with a record rather than a recollection

Read the entry →

Registration and Historical Records

WHOIS and RDAP History Analysis

Reconstructing who a domain was registered to and when that changed — and stating honestly what the public record no longer shows

Read the entry →

Registration and Historical Records

DNS Change History and Passive DNS

Passive DNS, zone files and provider records: what the resolution history shows, and why an empty result is a statement about sensors

Read the entry →

Registration and Historical Records

Website Archive Analysis

Dated captures of a website as evidence — and the crawl gaps, robots exclusions and rendering artifacts that decide how much weight one carries

Read the entry →

Registration and Historical Records

SSL Certificate Timeline Analysis

Public, append-only certificate logs give a hard timeline of demonstrated control — and say nothing at all about who demonstrated it

Read the entry →

Hosting and Infrastructure

Hosting and IP Infrastructure Analysis

IP registry records, routing archives and provider logs: the chain from a domain to the people operating it, and where that chain breaks

Read the entry →

Litigation Support

12 entries

Policy and Statutory Proceedings

ACPA Cybersquatting Litigation

The date-anchored technical record behind an ACPA claim: registration, resolution, content and transfer history, with its limits stated

Read the entry →

Policy and Statutory Proceedings

ACPA Bad Faith Intent Factors

A factor-by-factor map of what technical evidence bears on each of the nine ACPA bad faith factors, and where the expert stops

Read the entry →

Policy and Statutory Proceedings

In Rem Domain Name Jurisdiction

The records work behind a US in rem domain action: registrar and registry identification, the data actually on file, and evidenced notice

Read the entry →

Trademark and Confusion

Trademark and Domain Confusion Analysis

A character-level comparison of domain against mark, kept separate from the legal test, with an explicit statement of what it does not measure

Read the entry →

Trademark and Confusion

Typosquatting Evidence

Systematic variant enumeration, patterned-set analysis and the base-rate problem that any honest typosquatting exhibit has to confront

Read the entry →

Valuation and Damages

Domain Name Valuation for Litigation

How a domain is valued for a contested proceeding: approaches, comparable selection, adjustment, and why automated appraisals are not an opinion

Read the entry →

Valuation and Damages

Traffic Diversion Damages

What traffic evidence can and cannot show in a diversion claim, why correlation is not diversion, and where analytics attribution runs out

Read the entry →

Attribution and Ownership

Stolen Domain Litigation Support

The evidentiary role once a domain theft becomes a case: control timeline, preservation, chain of custody, and what counsel has to go get

Read the entry →

Policy and Statutory Proceedings

UDRP Complainant Support

The indexed annex set and technical declaration behind a UDRP complaint, and the capture window that closes the day notice goes out

Read the entry →

Policy and Statutory Proceedings

UDRP Respondent Defense

Documenting acquisition dates, prior use and the pre-notice state of a site, inside the twenty days a respondent actually gets

Read the entry →

Policy and Statutory Proceedings

URS Proceedings

What an expert produces for a Uniform Rapid Suspension filing, and why the remedy and the standard of proof differ from the UDRP

Read the entry →

Policy and Statutory Proceedings

Reverse Domain Name Hijacking Evidence

How the documentary record bearing on reverse domain name hijacking is assembled, tested and stated without characterizing anyone's motives

Read the entry →

Keep reading

Read by discipline instead

The same entries, grouped by where the record lives and who has to be asked for it.

Browse by discipline Every engagement type

A reference, not an intake page. This site describes what a domain name expert witness does and what the domain record can be made to show. It is not legal advice, nothing on it creates any relationship, and no engagement is taken through this website. The current record of credentials is at hartzer.com.