Domain name evidence, forensics and litigation support
EntityMap v1.0

DomainNameExpertWitness.com Entity Map

This is the machine-readable knowledge map for DomainNameExpertWitness.com, published to the EntityMap v1.0 specification. It describes the site's key entities — the kinds of forensic analysis and litigation support documented here, plus the protocols, policies, archives and evidentiary frameworks they depend on — with evidence passages and links to the open knowledge graph.

View the EntityMap JSON →

45 entities · EntityMap v1.0 · generated 2026-08-11.

Concept

ACPA Cybersquatting Litigation

The date-anchored technical record behind an ACPA claim: registration, resolution, content and transfer history, with its limits stated

Same as: https://en.wikipedia.org/wiki/Anticybersquatting_Consumer_Protection_Act

Relations:

  • PART_OF → Policy and Statutory Proceedings
  • RELATES_TO → Anticybersquatting Consumer Protection Act
  • RELATES_TO → Cybersquatting

The Anticybersquatting Consumer Protection Act is United States federal law and only that. It is codified at 15 U.S.C. 1125(d) and was enacted on 29 November 1999. It is not the UDRP, and it does not reach a dispute governed by another country's law. A name registered through a registrar outside the United States, held by a registrant outside the United States, in a country-code extension operated outside the United States, may sit entirely outside its reach. Whether it does is a jurisdictional question for counsel, and this page does not answer it.

ACPA Cybersquatting Litigation Evidence — published by DomainNameExpertWitness.com
Concept

ACPA Bad Faith Intent Factors

A factor-by-factor map of what technical evidence bears on each of the nine ACPA bad faith factors, and where the expert stops

Relations:

  • PART_OF → Policy and Statutory Proceedings
  • RELATES_TO → Anticybersquatting Consumer Protection Act
  • RELATES_TO → Trademark

US-specific. The nine factors live in United States federal law, at 15 U.S.C. 1125(d)(1)(B)(i) . They have no application outside it. The statute says a court may consider factors such as, but not limited to, the nine. The list is non-exclusive. There is no scoring, no threshold number and no weighting in the text. And bad faith intent to profit is a legal conclusion reserved to the court. So the sentence that governs this page: a domain name expert does not decide whether a factor is met and does not opine on bad faith.

ACPA Bad Faith Intent Factors: Evidence — published by DomainNameExpertWitness.com
Concept

In Rem Domain Name Jurisdiction

The records work behind a US in rem domain action: registrar and registry identification, the data actually on file, and evidenced notice

Same as: https://en.wikipedia.org/wiki/In_rem_jurisdiction

Relations:

  • PART_OF → Policy and Statutory Proceedings
  • RELATES_TO → Anticybersquatting Consumer Protection Act

US-specific. The in rem provision at 15 U.S.C. 1125(d)(2) is United States federal law. In rem means a case brought against a thing — here the domain name — rather than against a person. Nothing outside US federal practice works this way, and whether a given registrar, registry or country-code extension falls within the provision is a legal question for counsel that this page does not answer. What makes the provision unusual, and the reason a domain name expert is involved at all, is that its conditions are to an unusual degree records questions .

In Rem Domain Name Jurisdiction | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Trademark and Domain Confusion Analysis

A character-level comparison of domain against mark, kept separate from the legal test, with an explicit statement of what it does not measure

Relations:

  • PART_OF → Trademark and Confusion
  • RELATES_TO → Trademark
  • RELATES_TO → Uniform Domain-Name Dispute-Resolution Policy

Before anything else on this page: the UDRP first element and trademark infringement's likelihood-of-confusion inquiry are different tests, with different inputs, decided by different bodies. An analysis written for one does not answer the other, and an opinion that blurs them will be read as wrong by the attorney who commissioned it. The UDRP first element is a threshold standing test resolved largely by comparing strings.

Trademark and Domain Confusion Analysis — published by DomainNameExpertWitness.com
Concept

Typosquatting Evidence

Systematic variant enumeration, patterned-set analysis and the base-rate problem that any honest typosquatting exhibit has to confront

Same as: https://en.wikipedia.org/wiki/Typosquatting

Relations:

  • PART_OF → Trademark and Confusion
  • RELATES_TO → Typosquatting
  • RELATES_TO → Trademark

Resemblance is easy to assert and nearly worthless on its own. The evidentiary question in a typosquatting matter is narrower and harder: is this name a deliberate variant of a target string, or a coincidence? Typosquatting is the registration of names a user reaches through an input error. What makes it tractable as evidence is that the error classes are finite, enumerable and machine-generable .

Typosquatting Evidence and Variant Sets — published by DomainNameExpertWitness.com
Concept

Domain Name Valuation for Litigation

How a domain is valued for a contested proceeding: approaches, comparable selection, adjustment, and why automated appraisals are not an opinion

Relations:

  • PART_OF → Valuation and Damages
  • RELATES_TO → Expert witness

Two questions come before any number, and getting either wrong makes the rest of the work irrelevant. What is the asset? A domain name on its own is not a developed website, not a business, and not a trademark. A valuation of the string, a valuation of the string plus the traffic it carries, and a valuation of an operating site sitting on it are three different exercises with three different data requirements. The report says which one it is doing.

Domain Name Valuation for Litigation — published by DomainNameExpertWitness.com
Concept

Traffic Diversion Damages

What traffic evidence can and cannot show in a diversion claim, why correlation is not diversion, and where analytics attribution runs out

Relations:

  • PART_OF → Valuation and Damages
  • RELATES_TO → Expert witness
  • RELATES_TO → Domain Name System

This distinction is the spine of the page, and reports collapse it constantly. Lost traffic is a claim about sessions. It is proved, if at all, from server logs and analytics on both sides, plus the mechanism linking them — a redirect chain, a surviving referrer, shared infrastructure or shared account identifiers. Note what that requires: the disputed domain's own logs . Which usually means discovery against the other side, not analysis of the claimant's data. Lost revenue is a claim about money.

Traffic Diversion Damages Evidence | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Stolen Domain Litigation Support

The evidentiary role once a domain theft becomes a case: control timeline, preservation, chain of custody, and what counsel has to go get

Relations:

  • PART_OF → Attribution and Ownership
  • RELATES_TO → ICANN
  • RELATES_TO → Chain of custody

This page covers one thing: the evidentiary and litigation-support role once a hijacked or misappropriated domain has stopped being a recovery problem and become a case. It deliberately does not cover how a hijack happens, what a registry lock does, or what a victim's recovery options are. Those are mechanism questions, they are covered thoroughly elsewhere, and repeating them here would put the wrong material in front of the wrong reader.

Stolen Domain Litigation Support | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Registrant Attribution

How an expert connects a redacted registration to a real operator, and how strong or weak that inference actually is

Relations:

  • PART_OF → Attribution and Ownership
  • RELATES_TO → WHOIS
  • RELATES_TO → Registration Data Access Protocol

Attribution is the most consequential thing an expert does in a domain matter, and the honest description of it is this: it is an inference built from converging records, not a fact read off a register. No public database will tell you who stood behind a domain name. Since 2018 most public registration records do not even purport to.

Registrant Attribution Analysis | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Domain Ownership Investigation

Reconstructing control of a domain name on a given date from registry events, transfer records and the registrar account file

Relations:

  • PART_OF → Attribution and Ownership
  • RELATES_TO → ICANN
  • RELATES_TO → Registration Data Access Protocol

"Who owns this domain" is not an answerable question, and an expert who answers it as asked has already conceded ground. Ownership of a domain name is not recorded anywhere as a property interest; what exists is a registration, sponsored by a registrar, managed through an account, with a record of who the registrant of record was said to be at particular moments. "Who controlled this name on March 14, 2022" is answerable from records. Every step that follows is anchored to that date. It is worth being equally plain about what the answer is.

Domain Ownership Investigation | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Redirect and Traffic Diversion Forensics

Capturing a redirect chain hop by hop before it is switched off: status codes, headers, destinations and the dates it was in place

Relations:

  • PART_OF → Hosting and Infrastructure
  • RELATES_TO → Domain Name System

A diversion looks like one thing to a visitor and is four different things technically, each of which leaves a different record. Establishing which layer was used is the first step, because it determines which custodian holds the proof and how long they hold it. DNS. The address record or the CNAME — a DNS record making one name an alias for another — points at different infrastructure. Proved by dated DNS observations and by passive DNS , a historical database of observed DNS answers built from sensors rather than queried live. HTTP.

Redirect and Traffic Diversion Forensics — published by DomainNameExpertWitness.com
Concept

Registrar Record Production

The records a registrar keeps about an account, the retention floors that expire without warning, and how production is actually requested

Relations:

  • PART_OF → Registration and Historical Records
  • RELATES_TO → ICANN
  • RELATES_TO → Registration Data Access Protocol

An accredited registrar is a company under contract with ICANN to sell and manage registrations in generic top-level domains. Resellers are not accredited, and that distinction decides who a request should be directed to. The contract is the Registrar Accreditation Agreement , and its record-keeping section is the baseline for everything below.

Registrar Record Production | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Evidence Preservation for Domain Disputes

Capturing registration data, DNS answers and page content before they move, in a form someone else can verify later

Relations:

  • PART_OF → Registration and Historical Records
  • RELATES_TO → Federal Rules of Evidence
  • RELATES_TO → Chain of custody

Preservation is not tied to one layer of the domain name system. It is tied to a single uncomfortable fact: almost every domain record is either changeable in seconds by whoever controls it, or sitting on a retention clock that is already running. The order of volatility in a domain matter is consistent. DNS answers and live page content come first — a name server record or a homepage can change in minutes, at the discretion of the party whose conduct is in dispute, with no notice and no residue.

Evidence Preservation for Domain Disputes — published by DomainNameExpertWitness.com
Concept

Domain Evidence Chain of Custody

The log that answers a challenge to a domain exhibit with a record rather than a recollection

Same as: https://en.wikipedia.org/wiki/Chain_of_custody

Relations:

  • PART_OF → Registration and Historical Records
  • RELATES_TO → Chain of custody
  • RELATES_TO → Federal Rules of Evidence

Chain of custody is the documented history of who held a piece of evidence and what they did with it. It attaches to records from every layer of a domain matter — registry, registrar, DNS, hosting, third-party archive — and it belongs to none of them, because its subject is not the domain. Its subject is the examiner's own conduct. That is what makes it the section of a report most directly exposed to challenge. Everything else in a domain report describes something a third party did.

Domain Evidence Chain of Custody | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

UDRP Complainant Support

The indexed annex set and technical declaration behind a UDRP complaint, and the capture window that closes the day notice goes out

Same as: https://en.wikipedia.org/wiki/Uniform_Domain-Name_Dispute-Resolution_Policy

Relations:

  • PART_OF → Policy and Statutory Proceedings
  • RELATES_TO → Uniform Domain-Name Dispute-Resolution Policy
  • RELATES_TO → Cybersquatting

The deliverable in a UDRP matter is not an argument. It is a set of exhibits and a written declaration that explains where each exhibit came from, how it was captured, on what date, with what tool, and what it does and does not show. The provider — the ICANN-approved dispute resolution service that administers the case, such as WIPO or FORUM, which is not a court — does not authenticate anything. The panel , the one or three neutrals who decide the case, weighs what it is given. Two rules define the shape of that deliverable.

UDRP Complainant Support | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

UDRP Respondent Defense

Documenting acquisition dates, prior use and the pre-notice state of a site, inside the twenty days a respondent actually gets

Relations:

  • PART_OF → Policy and Statutory Proceedings
  • RELATES_TO → Uniform Domain-Name Dispute-Resolution Policy

Paragraph 4(c) of the Policy lists circumstances that demonstrate rights or legitimate interests in a domain name, and the list is open-ended. Read them closely and something becomes obvious: each one is a question about dates and documents, not about characterization. Use of the name, or demonstrable preparations to use it, in connection with a bona fide offering of goods or services before any notice of the dispute . Being commonly known by the name, even without any trademark rights.

UDRP Respondent Defense | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

URS Proceedings

What an expert produces for a Uniform Rapid Suspension filing, and why the remedy and the standard of proof differ from the UDRP

Relations:

  • PART_OF → Policy and Statutory Proceedings
  • RELATES_TO → Uniform Domain-Name Dispute-Resolution Policy
  • RELATES_TO → ICANN

Start here, because a reader who does not know this difference is choosing the wrong proceeding. Uniform Rapid Suspension is a fast, deliberately narrow companion to the UDRP. Where it succeeds, the registry operator redirects the nameservers to an informational web page, and the domain cannot be transferred, deleted or modified for the life of the registration. A successful complainant has the option to extend the registration period by one additional year at commercial rates (URS Procedure 10.2 and 10.3, URS Procedure ). Ownership does not change.

URS Proceedings | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Reverse Domain Name Hijacking Evidence

How the documentary record bearing on reverse domain name hijacking is assembled, tested and stated without characterizing anyone's motives

Same as: https://en.wikipedia.org/wiki/Reverse_domain_hijacking

Relations:

  • PART_OF → Policy and Statutory Proceedings
  • RELATES_TO → Uniform Domain-Name Dispute-Resolution Policy

Reverse domain name hijacking is defined in paragraph 1 of the UDRP Rules as using the Policy in bad faith to attempt to deprive a registered domain-name holder of a domain name. Rule 15(e) makes the declaration mandatory once the finding is made: if after considering the submissions the panel finds that the complaint was brought in bad faith, for example in an attempt at reverse domain name hijacking or primarily to harass the domain-name holder, the panel shall declare in its decision that the complaint was brought in bad faith ( UDRP Rules ).

Reverse Domain Name Hijacking Evidence — published by DomainNameExpertWitness.com
Concept

WHOIS and RDAP History Analysis

Reconstructing who a domain was registered to and when that changed — and stating honestly what the public record no longer shows

Same as: https://en.wikipedia.org/wiki/WHOIS

Relations:

  • PART_OF → Registration and Historical Records
  • RELATES_TO → WHOIS
  • RELATES_TO → Registration Data Access Protocol
  • RELATES_TO → ICANN

A historical registration record is a dated observation of what a registration database said about a domain name at one moment. That is the whole of it, and it is frequently enough to decide a question. Stacked in order, those observations show when a name was created, when the sponsoring registrar changed, when the nameservers moved, when the record was updated in the days around a disputed transfer, and when a status flag went on or came off. What such a record does not do is identify a person.

WHOIS and RDAP History Analysis | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

DNS Change History and Passive DNS

Passive DNS, zone files and provider records: what the resolution history shows, and why an empty result is a statement about sensors

Same as: https://en.wikipedia.org/wiki/Domain_Name_System

Relations:

  • PART_OF → Registration and Historical Records
  • RELATES_TO → Domain Name System

Registration records say who a name was assigned to. DNS records say what the name actually did — which servers it pointed at, which machines received its mail, and when any of that changed. In matters involving traffic diversion, impersonation, an interrupted business or a transfer that happened quietly, the resolution history is frequently more probative than the registration record, because it describes operation rather than paperwork. The evidence splits across two layers, and they have different custodians.

DNS Change History and Passive DNS | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Website Archive Analysis

Dated captures of a website as evidence — and the crawl gaps, robots exclusions and rendering artifacts that decide how much weight one carries

Same as: https://en.wikipedia.org/wiki/Wayback_Machine

Relations:

  • PART_OF → Registration and Historical Records
  • RELATES_TO → Wayback Machine
  • RELATES_TO → Federal Rules of Evidence

An archived capture proves that a crawler retrieved specified content from a URL at a stated time. That is a narrower proposition than it first appears, and it is the whole of what the artifact supports. It does not establish when the content was first published, how long it stayed up, who authored it, or that any human visitor ever saw it. Understood that way, archive evidence carries real weight.

Website Archive Analysis for Domain Disputes — published by DomainNameExpertWitness.com
Concept

SSL Certificate Timeline Analysis

Public, append-only certificate logs give a hard timeline of demonstrated control — and say nothing at all about who demonstrated it

Same as: https://en.wikipedia.org/wiki/Certificate_Transparency

Relations:

  • PART_OF → Registration and Historical Records
  • RELATES_TO → Certificate Transparency

A Certificate Transparency entry — an entry in a public, append-only log of issued TLS certificates — proves that a publicly trusted certificate covering a particular hostname was issued by a particular certificate authority and logged at a particular time. Read precisely, it is evidence that somebody demonstrated control of that name to a CA on that date. It does not say who. That narrow fact is often exactly the fact in issue. Control is what changes in a hijacking. Control is what a respondent claims to have had, and when.

SSL Certificate Timeline Analysis | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Hosting and IP Infrastructure Analysis

IP registry records, routing archives and provider logs: the chain from a domain to the people operating it, and where that chain breaks

Relations:

  • PART_OF → Hosting and Infrastructure
  • RELATES_TO → Domain Name System

Registration records stop at the delegation. They say which nameservers a domain pointed at; they say nothing about where the site actually ran, who paid for the server, or who logged into it. Hosting and infrastructure analysis picks the trail up there and follows it down through IP address registrations, routing data and provider-held records. The value of that work in a dispute is specific. It establishes which company was in a position to serve the content at a given time, and therefore whose records would identify the operator.

Hosting and IP Infrastructure Analysis — published by DomainNameExpertWitness.com
Concept

Expert witness

A witness whose specialized knowledge is offered to help a tribunal understand technical material, and who is expected to disclose the method and the limits of any opinion given.

Same as: https://en.wikipedia.org/wiki/Expert_witness

A witness whose specialized knowledge is offered to help a tribunal understand technical material, and who is expected to disclose the method and the limits of any opinion given.

What a Domain Name Expert Witness Does — published by DomainNameExpertWitness.com
Concept

Uniform Domain-Name Dispute-Resolution Policy

The administrative proceeding, written into the registration agreement, under which a complainant may seek transfer or cancellation of a domain name registration on the grounds the policy sets out.

Same as: https://en.wikipedia.org/wiki/Uniform_Domain-Name_Dispute-Resolution_Policy

The administrative proceeding, written into the registration agreement, under which a complainant may seek transfer or cancellation of a domain name registration on the grounds the policy sets out.

What Happens in a UDRP Proceeding | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Anticybersquatting Consumer Protection Act

United States legislation providing a judicial route in disputes over domain names registered, trafficked in or used with a bad-faith intent to profit from a mark, alongside the administrative proceedings.

Same as: https://en.wikipedia.org/wiki/Anticybersquatting_Consumer_Protection_Act

United States legislation providing a judicial route in disputes over domain names registered, trafficked in or used with a bad-faith intent to profit from a mark, alongside the administrative proceedings.

ACPA Cybersquatting Litigation | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

WHOIS

The query protocol and flat-text record through which domain registration data was historically published, and the source most historical registration archives were built from.

Same as: https://en.wikipedia.org/wiki/WHOIS

The query protocol and flat-text record through which domain registration data was historically published, and the source most historical registration archives were built from.

WHOIS and RDAP History Analysis | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Registration Data Access Protocol

The successor protocol for querying domain registration data, with structured responses and differentiated access in place of the flat public record.

Same as: https://en.wikipedia.org/wiki/Registration_Data_Access_Protocol

The successor protocol for querying domain registration data, with structured responses and differentiated access in place of the flat public record.

Registrar Record Production | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Domain Name System

The distributed naming system that resolves domain names to addresses and other records, and the layer whose observed history shows what a name answered with at a given time.

Same as: https://en.wikipedia.org/wiki/Domain_Name_System

The distributed naming system that resolves domain names to addresses and other records, and the layer whose observed history shows what a name answered with at a given time.

DNS Change History and Passive DNS | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Certificate Transparency

The append-only public logging framework for issued TLS certificates, which makes certificate issuance for a domain name observable after the fact.

Same as: https://en.wikipedia.org/wiki/Certificate_Transparency

The append-only public logging framework for issued TLS certificates, which makes certificate issuance for a domain name observable after the fact.

SSL Certificate Timeline Analysis | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Wayback Machine

The web archive whose timestamped captures are the most widely used record of what a website displayed on a past date.

Same as: https://en.wikipedia.org/wiki/Wayback_Machine

The web archive whose timestamped captures are the most widely used record of what a website displayed on a past date.

Website Archive Analysis | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

ICANN

The organization that coordinates the domain name system's identifiers and publishes the consensus policies registrars and registries are contractually bound to follow, including the policies governing registration data and transfers.

Same as: https://en.wikipedia.org/wiki/ICANN

The organization that coordinates the domain name system's identifiers and publishes the consensus policies registrars and registries are contractually bound to follow, including the policies governing registration data and transfers.

Registrar Record Production | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Federal Rules of Evidence

The United States federal evidentiary framework, including the authentication and expert-testimony provisions that govern how technical records and opinions are received in a federal proceeding.

Same as: https://en.wikipedia.org/wiki/Federal_Rules_of_Evidence

The United States federal evidentiary framework, including the authentication and expert-testimony provisions that govern how technical records and opinions are received in a federal proceeding.

How Domain Records Are Authenticated — published by DomainNameExpertWitness.com
Concept

Chain of custody

The contemporaneous record of who collected an item of evidence, when, and every transfer of it since — the document that makes a later challenge to handling answerable rather than fatal.

Same as: https://en.wikipedia.org/wiki/Chain_of_custody

The contemporaneous record of who collected an item of evidence, when, and every transfer of it since — the document that makes a later challenge to handling answerable rather than fatal.

Domain Evidence Chain of Custody | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Cybersquatting

Registering or using a domain name corresponding to another party's mark in order to profit from it, the conduct both the administrative policies and the United States statute were written to address.

Same as: https://en.wikipedia.org/wiki/Cybersquatting

Registering or using a domain name corresponding to another party's mark in order to profit from it, the conduct both the administrative policies and the United States statute were written to address.

ACPA Bad Faith Intent Factors | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Typosquatting

Registering variants of a name that a user is likely to type by mistake, which is examined by enumerating the variant space and then showing which variants were registered and how they were used.

Same as: https://en.wikipedia.org/wiki/Typosquatting

Registering variants of a name that a user is likely to type by mistake, which is examined by enumerating the variant space and then showing which variants were registered and how they were used.

Typosquatting Evidence | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Concept

Trademark

The sign that distinguishes goods or services of one undertaking from another, and the reference point a domain string is compared against in a confusion analysis.

Same as: https://en.wikipedia.org/wiki/Trademark

The sign that distinguishes goods or services of one undertaking from another, and the reference point a domain string is compared against in a confusion analysis.

Trademark and Domain Confusion Analysis — published by DomainNameExpertWitness.com
Taxonomy

Registration and Historical Records

What the registration and resolution record shows, where it is held, and what survives once it has been redacted or aged out.

Relations:

  • INCLUDES → Registrar Record Production
  • INCLUDES → Evidence Preservation for Domain Disputes
  • INCLUDES → Domain Evidence Chain of Custody
  • INCLUDES → WHOIS and RDAP History Analysis
  • INCLUDES → DNS Change History and Passive DNS
  • INCLUDES → Website Archive Analysis
  • INCLUDES → SSL Certificate Timeline Analysis

What the registration and resolution record shows, where it is held, and what survives once it has been redacted or aged out.

Disciplines of Domain Evidence | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Taxonomy

Hosting and Infrastructure

What a domain resolved to, where it was hosted, and where its traffic went.

Relations:

  • INCLUDES → Redirect and Traffic Diversion Forensics
  • INCLUDES → Hosting and IP Infrastructure Analysis

What a domain resolved to, where it was hosted, and where its traffic went.

Disciplines of Domain Evidence | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Taxonomy

Attribution and Ownership

Establishing who controlled a domain, and at what point — an inference from converging records, never a lookup.

Relations:

  • INCLUDES → Stolen Domain Litigation Support
  • INCLUDES → Registrant Attribution
  • INCLUDES → Domain Ownership Investigation

Establishing who controlled a domain, and at what point — an inference from converging records, never a lookup.

Disciplines of Domain Evidence | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Taxonomy

Policy and Statutory Proceedings

UDRP, URS and the ACPA: what each proceeding requires, and what an expert supplies to it.

Relations:

  • INCLUDES → ACPA Cybersquatting Litigation
  • INCLUDES → ACPA Bad Faith Intent Factors
  • INCLUDES → In Rem Domain Name Jurisdiction
  • INCLUDES → UDRP Complainant Support
  • INCLUDES → UDRP Respondent Defense
  • INCLUDES → URS Proceedings
  • INCLUDES → Reverse Domain Name Hijacking Evidence

UDRP, URS and the ACPA: what each proceeding requires, and what an expert supplies to it.

Disciplines of Domain Evidence | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Taxonomy

Trademark and Confusion

Whether a domain is confusingly similar to a mark, and whether a variant was deliberate.

Relations:

  • INCLUDES → Trademark and Domain Confusion Analysis
  • INCLUDES → Typosquatting Evidence

Whether a domain is confusingly similar to a mark, and whether a variant was deliberate.

Disciplines of Domain Evidence | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Taxonomy

Valuation and Damages

What a domain was worth and what a diversion cost — stated as methodology, not as a number.

Relations:

  • INCLUDES → Domain Name Valuation for Litigation
  • INCLUDES → Traffic Diversion Damages

What a domain was worth and what a diversion cost — stated as methodology, not as a number.

Disciplines of Domain Evidence | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Taxonomy

Forensic Analysis

Examination of the record a domain name leaves behind — registration and resolution history, archived pages, certificate issuance, hosting and redirect history — together with the preservation and custody work that keeps what has been collected intact.

Relations:

  • INCLUDES → Registrant Attribution
  • INCLUDES → Domain Ownership Investigation
  • INCLUDES → Redirect and Traffic Diversion Forensics
  • INCLUDES → Registrar Record Production
  • INCLUDES → Evidence Preservation for Domain Disputes
  • INCLUDES → Domain Evidence Chain of Custody
  • INCLUDES → WHOIS and RDAP History Analysis
  • INCLUDES → DNS Change History and Passive DNS
  • INCLUDES → Website Archive Analysis
  • INCLUDES → SSL Certificate Timeline Analysis
  • INCLUDES → Hosting and IP Infrastructure Analysis

Examination of the record a domain name leaves behind — registration and resolution history, archived pages, certificate issuance, hosting and redirect history — together with the preservation and custody work that keeps what has been collected intact.

Forensic Analysis | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com
Taxonomy

Litigation Support

Work defined by a forum: the annex sets and declarations an administrative proceeding requires, the factor analyses a statute enumerates, and the confusion, valuation and damages questions that run alongside them.

Relations:

  • INCLUDES → ACPA Cybersquatting Litigation
  • INCLUDES → ACPA Bad Faith Intent Factors
  • INCLUDES → In Rem Domain Name Jurisdiction
  • INCLUDES → Trademark and Domain Confusion Analysis
  • INCLUDES → Typosquatting Evidence
  • INCLUDES → Domain Name Valuation for Litigation
  • INCLUDES → Traffic Diversion Damages
  • INCLUDES → Stolen Domain Litigation Support
  • INCLUDES → UDRP Complainant Support
  • INCLUDES → UDRP Respondent Defense
  • INCLUDES → URS Proceedings
  • INCLUDES → Reverse Domain Name Hijacking Evidence

Work defined by a forum: the annex sets and declarations an administrative proceeding requires, the factor analyses a statute enumerates, and the confusion, valuation and damages questions that run alongside them.

Litigation Support | DomainNameExpertWitness.com — published by DomainNameExpertWitness.com

A reference, not an intake page. This site describes what a domain name expert witness does and what the domain record can be made to show. It is not legal advice, nothing on it creates any relationship, and no engagement is taken through this website. The current record of credentials is at hartzer.com.

Top