One-Click Evidence Bundles - Screenshot, Source Code, and Timestamp in a Single ZIP

What Is an Evidence Bundle?

An evidence bundle is a single ZIP file that contains every piece of documentation you need to prove what a web page showed at a specific moment in time. Instead of gathering files from multiple sources and assembling them yourself, you get one download with everything inside - organized, labeled, and ready to attach to a legal filing.

When you capture a URL with Snapoena, the evidence bundle includes five files:

• screenshot.png- A full-page screenshot captured server-side, with a metadata bar at the top showing the URL, the exact UTC capture time, and the SHA-256 hash of the image. This is not a browser screenshot you took yourself - it is an independent capture from Snapoena's servers, which means no one can claim you edited the page with developer tools before capturing it.
• source.html - The complete HTML source code of the page at the moment of capture. This preserves hidden elements, meta tags, embedded links, code comments, and other details that a screenshot alone cannot show. If someone copied your CSS class names, your code comments, or your hidden metadata, the source file proves it.
• report.pdf - A professional PDF report with a cover page summarizing the capture. It includes the URL, capture timestamp, file hashes, and a visual preview of the screenshot. This is the document you hand to a lawyer, attach to an email, or submit as an exhibit. It reads like a professional forensic report, not a raw data dump.
• timestamp.tsr - An RFC 3161 trusted timestamp response from an independent Time Stamp Authority. This cryptographically certifies when the capture was made, using a third-party clock and signing key that neither you nor Snapoena can manipulate. Courts and arbitration panels recognize RFC 3161 timestamps as reliable proof of when digital evidence existed.
• evidence-summary.txt - A plain-text file containing verification instructions. It lists the SHA-256 hash of each file in the bundle and explains how anyone - your lawyer, the opposing party, a judge - can independently verify that the evidence has not been tampered with since capture.

How Anyone Can Verify Your Evidence

The evidence bundle is designed to be independently verifiable. Anyone who receives your ZIP file can confirm that the contents have not been altered since capture. Here is how:

Open the evidence-summary.txt file and find the SHA-256 hash listed for the screenshot. Then run a single command in any terminal:

shasum -a 256 screenshot.png

If the output matches the hash in the summary file, the screenshot is exactly the same file that Snapoena captured - not a single pixel has changed. The same check works for source.html and report.pdf. This gives any reviewer - technical or not - a concrete way to confirm authenticity without trusting anyone's word.

The RFC 3161 timestamp goes one step further. It proves not just that the file is unaltered, but that it existed at a specific point in time. The timestamp is signed by an independent authority whose clock you cannot control. Together, the hash and timestamp answer the two questions every legal proceeding asks about digital evidence: is this authentic, and when was it created?

Where to Use Your Evidence Bundle

The ZIP file is designed to attach directly to legal filings without any reformatting. Common use cases include:

• DMCA takedown notices - Attach the bundle to your notice to the hosting provider. The screenshot proves what the infringing page showed, the source code proves code-level copying, and the timestamp proves when you captured it.
• UDRP domain disputes - WIPO and other dispute resolution providers expect documented evidence of how a domain is being used. The evidence bundle provides exactly what panelists need to see.
• Cease and desist letters - Include the PDF report as an exhibit to your letter. It shows the opposing party exactly what you documented and when, making your position clear before litigation becomes necessary.
• Insurance claims - If you need to prove what a website displayed at a specific time - for example, pricing terms, coverage details, or policy language - the timestamped evidence bundle serves as documentation.

One Click, Complete Package

The point of the evidence bundle is that you do not need to think about what to collect. Paste a URL, click capture, and download the ZIP. Every file you might need is already inside - screenshot, source code, PDF report, cryptographic timestamp, and verification instructions. No assembly required.

Whether you are a lawyer documenting infringement for a client, a brand owner fighting counterfeiters, or an individual protecting your creative work, the evidence bundle gives you a complete, professional, verifiable package in seconds.