Why a WHOIS screenshot is not evidence
Evidence integrity
SHA-256 evidence hash
The complete raw evidence bundle is serialised and hashed with SHA-256 at generation time. Any post-generation modification changes the hash — making tampering detectable.
ISO 8601 timestamps
Every data retrieval is timestamped in ISO 8601 UTC format. Timestamps are included in the signed hash, preventing backdating of findings.
Raw record preservation
DNS responses are stored verbatim. Independent verification against the original response is possible without relying solely on D3's parsed output.
PDF & JSON export
Export as a print-ready PDF for direct submission to auditors, regulators and legal teams — or as structured JSON for SIEM and workflow ingestion.
Report structure
How professionals use D3 reports
M&A transaction annex
Attach to the transaction disclosure schedule or legal annex. SHA-256 hash and timestamps make the evidence verifiable and tamper-evident.
UDRP & trademark filings
Typosquatting evidence, WHOIS data and risk scores as supporting documentation in UDRP proceedings or trademark infringement filings.
Regulatory submission
NIS2 and ISO 27001 sections are structured for direct submission to regulators, auditors and certification bodies.
ISO 27001 evidence folder
Every DNS finding mapped to specific ISO 27001:2022 Annex A controls — structured evidence for A.8.16 (monitoring activities) and related controls.
Regulatory & compliance mapping
Generate your first certified report
Free account. 3 trial credits. No credit card required.