For each incident, Hunto AI auto-assembled screenshots, passive DNS history, WHOIS and hosting metadata, crawl timelines, and platform policy citations. Submissions were generated in platform-native formats for registrars, hosts, social platforms, app stores, and ad networks. Post-removal re-scans mapped mirrors and related infrastructure to suppress clusters, not just single URLs.