Vatra Sentinel Joins the Warning.com Family to Fight Brand Impersonation

Warning.com acquires the real-time phishing detector and its custom model. Built by VAKYN, the model assessed over 1.3 million suspicious domains in two weeks.

BETTEMBOURG, LUXEMBOURG, November 10, 2026 /EINPresswire.com/ -- Warning.com has acquired Vatra Sentinel, including its custom decision model, built by VAKYN. Terms were not disclosed. VAKYN remains an independent company and is not part of the acquisition.

Vatra joins the Warning.com family to fight brand impersonation. In just over two weeks online, it read more than 6.6 billion certificate log entries, and its model assessed more than 1.3 million suspicious domains.

Public Certificate Transparency logs record the certificates that secure HTTPS websites. Vatra Sentinel watches these logs for early signs of brand impersonation and checks each hostname it sees against a list of watched brands. When it started, it also processed historical certificate records for domains and subdomains. For suspicious names it looks up the domain's age, registrar and hosting, and sends the riskiest to its decision model.

VAKYN built the model for this one job. For each risky domain it answers the questions an analyst would ask. What is the site for? Who is it aimed at? Which brand does it copy? Is there an innocent explanation for the name? It picks every answer from a fixed list, says how sure it is, and always gives the same answer to the same input. It makes about 60 decisions a second on one graphics card, so it can keep assessing new suspicious domains as they appear.

Vatra's numbers from 26 October to 10 November 2026:
- more than 6.6 billion certificate log entries read
- more than 1.3 billion hostnames scored, including domains and subdomains from historical certificate records (not 1.3 billion newly registered domains)
- more than 1.3 million suspicious domains assessed by the model, hosted in more than 90 countries and territories
- more than 1 million of them classified by the model as credential phishing, with Facebook and Instagram the brands it found copied most often
- 1,624 flagged domains later observed as suspended or deleted (an observed change of status, which does not show that Vatra or Warning.com caused the removal)

Warning.com finds and removes brand abuse online: look-alike domains, fake shops, counterfeit sellers and phishing pages. Brands can request a takedown there. With Vatra, Warning.com can spot suspected brand impersonation early, in the public Certificate Transparency logs.

"Certificate Transparency logs can provide early signs of brand impersonation. Vatra helps Warning.com identify suspicious domains sooner and investigate the risks they pose," said Xavier Buck, founder of Warning.com.

"We built Vatra's model for one job: telling what a suspicious site is after. A million judgments later, it works where brands are protected. Intelligence thinks. Intuition decides," said Vali Malinoiu, founder of VAKYN.

About Warning.com
Warning.com protects brands, and the people who trust them, from impersonation online. It monitors domains, marketplaces and social media for look-alikes, fake shops and counterfeit sellers, reviews the evidence and requests takedowns. Anyone can report a suspicious link at https://warning.com.

About VAKYN
VAKYN builds decision models: AI that answers fixed questions about a document with yes or no, one option from a list, or a score, and says how sure it is of each answer. VAKYN trains them on a company's own cases and runs them on the company's servers or on VAKYN Cloud. More than 10 paying companies run VAKYN in production, with more than 10,000 decisions a day. More at https://vakyn.com.

Malinoiu Vali
VAKYN
vali@vakyn.com
Visit us on social media:
LinkedIn
X