AI Fraud Protect finds copies of your website, fake verification pages and phishing in your name, and carries every case through to removal. In three steps: Find, Prove and Remove.
AI Fraud Protect interface. All data is sample data.
15 minto set up, then reports and scans run continuously
4 channelsreported in parallel: host, registrar, DNS provider, Google
2 to 14 daysis how long a removal typically takes, in our experience
0reports that aren't reviewed and sent by a person
One process takes them down. Only the framing changes, and with it the channels and the grounds for every report.
AI Assessment
Imitates your login page with an almost identical layout and asks for credentials.
Copied elements
AI Assessment
Swapped letters (rn instead of m), registered three days ago, parked with your favicon. Stays on the watchlist and is reassessed with every scan.
Copied elements
AI Assessment
Copies your homepage with logo, text and images. Almost identical to your real site on desktop and mobile.
Copied elements
AI Assessment
Imitates your certificate check and, with the parameters from the QR code, confirms forged certificates as valid.
Copied elements
“A replacement domain costs a few euros and is registered the same day. That's why none of our cases ends with the find.”Our principle
A third-party domain costs a few euros. Your name goes first so the link looks genuine.
Logo, text and forms are copied, whether it's a login page, a website or a verification page.
Phishing emails, ads and channels lead people to the copy.
Customers enter their credentials. Employers accept forged certificates as real.
One tip through your report widget or one hit in a scan is enough. The AI assesses the page right away, and the case is carried through to removal.
You define once what needs protecting: your domains, with your real pages as references. From then on, reports and scans run continuously, and every case is carried through to the end.
Anyone who has a suspicious link in front of them reports it through the report widget on your website. The AI analyzes every report with a screenshot.
On a schedule, the domain scanner checks up to 20,000 variants of your domains, with typos, homoglyphs and add-ons like login.
The AI compares every find with your real page, on desktop and mobile. It rates the risk and names what was copied. Inconclusive cases are reviewed by a person.
Screenshots, WHOIS, DNS, hosting, SSL, the AI analysis report and your trademark evidence go into one evidence package per case, from the very first scan.
Host, registrar, DNS provider and Google Safe Browsing, in parallel and with grounds that fit the framing. Every message is reviewed and sent by a person.
The live status shows per channel what has been sent, acknowledged or is still open. If a response doesn't come, follow-ups and escalation are next. Every reply lands in the takedown inbox.
All views are AI Fraud Protect interfaces with sample data.
Fake verification pages and phishing links hide behind long subdomains and parameters that only appear in the QR code or the email. With the report widget, employers, authorities and customers report the link right on your website.
Anyone in doubt reports the link or uploads the certificate as a PDF. An image captcha and a limit per IP address keep spam out.
One line of code. You set position, color and language yourself, in English or German. All reports land in one place instead of scattered across inboxes.
[your-brand].results-check.[random].com/results?cid=K7Q2MX9AP4LW&n=Jane+Example&exp=2027-03&sig=9f2c71d0e4a8c3b9
No logo, no name, nothing pointing to you. Invisible to search and scans.
With your logo, copied from your results page. Confirms the forgery.
Depending on the framing, AI Fraud Protect suggests the right channels and gives grounds for every report.
The fastest lever. Depending on the framing, the notice relies on the Digital Services Act, the host's terms of service and, for exact copies, copyright. A notice that meets the requirements of the DSA must be processed.
DSA Art. 16The registrar can suspend the domain. Reports cite fraud or phishing, and for brand forgery also your trademark rights. If the registrar doesn't respond, an ICANN complaint follows.
ICANN RAA §3.18The DNS provider gets a report too, usually through its abuse form. It often forwards it to the host, which adds pressure.
Abuse formOnce Google lists the page, Chrome, Firefox and Safari block it. That protects visitors while the host is still reviewing.
Report formFor .de domains, the DENIC dispute procedure is available; for other extensions, the UDRP. AI Fraud Protect prepares the draft, and your law firm files it.
DENIC dispute · UDRPNotices to hosting providers are based on Regulation (EU) 2022/2065 (Digital Services Act), Art. 16. The exact link from the report is what a host needs for it.
Reporting on behalf of a brand comes with responsibility. That's why AI Fraud Protect follows fixed rules, the same in the product and in the contract.
Organizations whose name confirms something are hit hardest: certificates, degrees, logins.
Certificates at B1, B2 or C1 open doors to residence, study and work. That's why their verification pages get copied so often.
Whoever copies your register confirms every forgery as valid. We find the copy and take it offline.
Diploma mills live on pages that look real. Every copy of your confirmation page is found, assessed and reported through all channels.
Anyone forging your certificates needs a page that confirms them. We find it through reports and scans and take it offline.
Fake login pages steal credentials and damage your reputation. There is a dedicated framing for this, and hosts give phishing reports top priority.
Every brand gets its own organization with its own domains, scans and widget. AI Fraud Protect is multi-tenant and can run in your brand's look.
To request a free fraud scan, email contact@virtualbadge.io.
Answers on search, evidence, reporting and getting started. Your question isn't here? We'll answer it in the demo.
Request a demoYes. AI Fraud Protect finds lookalike domains, cloned websites, phishing pages and fake verification pages using your name. For every case you choose the framing: phishing, brand forgery or certificate forgery. That determines the channels and the grounds for every report. Hosts give phishing reports top priority.
A find on its own doesn't help much: a new domain costs a few euros and is registered the same day. AI Fraud Protect carries every case further. The AI assesses the find against your real page, the evidence package is compiled automatically, reports go out through several channels at once, and the live status shows where a response is missing, until the page is offline.
Many fake verification pages and phishing links sit under long subdomains that start with your name, and only show the forgery with certain parameters, for example from the QR code on a forged certificate. Without those parameters, the page shows nothing that points to you, and no variant of your domain leads there. That's why the report widget is one of the most important sources: whoever has the link in front of them reports it in full or uploads the PDF, and AI Fraud Protect analyzes the page right away.
Where verifiers and customers look: on your website, your login page and your results or verification page. It takes one line of code. You set position, color and language in AI Fraud Protect. An image captcha and a limit per IP address keep spam out. All reports land in one place instead of scattered across emails.
The domain scanner generates variants of your protected domains, with typos, homoglyphs and terms like login, certificate or exam, and checks the hits automatically on a schedule. Domains without content but with risk, such as parked, for sale or under construction with your favicon, stay on the watchlist and are rescanned. On top of that come reports through the report widget and manual scans by domain or CSV.
In our experience, between two and fourteen days. It mainly depends on the hosting provider, the registrar and the country the page is hosted in. That's why we report through several channels at once, and a browser warning via Google Safe Browsing protects people even before the page is gone.
No. We put the file together. Cease-and-desist letters, injunctions and criminal complaints are handled by your legal department or law firm. For that, you get the evidence package, the correspondence from the takedown inbox and, if you want, a UDRP draft.
A written mandate and power of attorney from the rights holder, your trademark evidence, the domains to be protected with your real pages as references, a person who sends the reports, and a list of your partners and resellers.
Your own domains and partners go on the ignore list and won't be reported. Inconclusive cases go to manual review. Detection runs automatically, sending never does: every message is reviewed and sent by a person.
Screenshots of the page, including archived ones from earlier scans, WHOIS data, DNS records, hosting and IP, the SSL certificate details, the AI analysis report and your trademark evidence. For reports through the widget, the full link is included. The package is compiled automatically from the analysis data, attached to every report when you send it and can be downloaded as a ZIP.
Closed cases keep being scanned. If a domain becomes reachable again or its risk rises, you see it in the history, in the Change column and on the watchlist. The evidence from the first case is already there, and the takedown can be initiated again right away.
No, AI Fraud Protect works without it too. Signed credentials make it easier: what is issued with a signature can be verified, and a copy stands out faster. Learn more at Virtualbadge.io.
Right now. AI Fraud Protect is live, and setup takes about 15 minutes.
In the demo, we show you the dashboard, the report widget and a complete case, and what we would look for on behalf of your brand.
Or write to us: contact@virtualbadge.io