Why a screenshot is not enough
When a domain or brand name is at stake in a transaction, a trademark filing or a legal dispute, professionals have historically relied on manual lookups — screenshots of WHOIS records, informal DNS checks, printouts from registrar websites. These are not evidence. They cannot be verified, they can be altered, and they do not capture the full picture.
For evidence to be useful in a transaction, a regulatory filing or a legal proceeding, it must be verifiable (the data matches a known source), timestamped (provably collected before a specific date) and tamper-evident (any alteration is detectable). A D3 Certified Report satisfies all three: the SHA-256 hash of the complete evidence bundle is stored at generation time, and any subsequent modification of the underlying data changes the hash. The ISO 8601 UTC timestamps in the report prevent backdating of findings. The raw DNS responses are preserved verbatim, allowing independent verification.
What makes a D3 report certified
SHA-256 evidence hash
The complete raw evidence bundle is serialised and hashed with SHA-256 at generation time. Any post-generation modification of the underlying data changes the hash — making tampering detectable.
ISO 8601 timestamps
Every data retrieval is timestamped in ISO 8601 UTC format. Timestamps are included in the signed hash, preventing backdating of findings.
Raw record preservation
DNS responses are stored in raw format. Independent verification of reported values against the original response is possible without relying solely on D3's parsed output.
PDF & JSON export
Export as a paginated, print-ready PDF suitable for direct submission to auditors, regulators and legal teams — or as structured JSON for SIEM ingestion.
The D3 grading scale
Every report carries an overall score (0–100) converted to a letter grade displayed on a gold-accented shield at the top of the report. The grade reflects the weighted average of all connector scores.
Report structure
How professionals use D3 Certified Reports
M&A transaction annex
Attach the D3 Certified Report to the transaction disclosure schedule or legal annex. The SHA-256 hash and ISO 8601 timestamps make the evidence verifiable and tamper-evident.
UDRP & trademark filings
Use typosquatting evidence, WHOIS registration data and risk scores as supporting documentation in UDRP proceedings or trademark infringement filings.
Regulatory submission
The NIS2 and ISO 27001 compliance mapping sections are structured for direct submission to regulators, auditors and certification bodies as evidence of continuous domain security monitoring.
ISO 27001 evidence folder
The security audit report maps every DNS finding to specific ISO 27001:2022 Annex A controls, providing structured evidence for A.8.16 (monitoring activities) and related controls.
Regulatory & compliance mapping
Every D3 report automatically maps findings to the controls and articles your auditor or regulator expects to see. You do not need to manually cross-reference findings against framework requirements — the mapping is done at generation time and included in the PDF.
Since October 2024, NIS2 (EU Directive 2022/2555) requires essential and important entities to implement risk analysis and domain security controls under Article 21. Failure to comply carries fines of up to €10 million or 2% of annual global turnover, with personal liability for board members.
A D3 Security Audit or Due Diligence report provides structured, timestamped evidence of your domain security posture — mapped directly to the Article 21 controls your regulator will check. Running quarterly D3 reports creates an auditable trail of continuous monitoring, which is what NIS2 requires.
Generate your first D3 Certified Report
Free account. 3 trial credits. Results in minutes.