Skip to content

Evidence-based. Authorisation-bound. No guaranteed removal, no fabricated urgency.

Sample report

The exact structure you receive

This is a complete Guardian report structure populated with constructed data, so you can judge the format before you buy. Every section here appears in a real report.

Illustrative dataIllustrative data — this is not a real customer engagement. The organisation, findings and identifiers below are constructed to demonstrate report structure.

Section 1

Scope and authorised assets

Every report opens by stating what was examined and what was not, so a reader can tell the difference between “nothing was found” and “nothing was looked for”.

Report reference
IAG-DEMO-2026-0148
Customer
Northbank Studio (illustrative)
Offer
Evidence Assessment
Observation period
12 days
Dimensions in scope
Domain, Brand, Impersonation, Commerce
Dimensions out of scope
Logo, Product, Reputation, Institution
Assets declared
1 brand name, 2 domains, 3 public profiles
Operator review
Completed
Report issued
Day 5 of 5

Section 2

Methodology

The report states the method in enough detail that a technically literate reader could challenge it.

  1. 01Declared assets recorded as the official registry and used as the authorisation scope.
  2. 02Public-source observation across the source families for the four dimensions in scope.
  3. 03Registry exclusion pass to remove the customer's own legitimate properties.
  4. 04Similarity qualification for look-alike names, with scores retained.
  5. 05Liveness and reach assessment for each candidate asset.
  6. 06Correlation of independent observations sharing infrastructure or presentation.
  7. 07Evidence capture: source URL, observation timestamp, retrieval method, snapshot where lawful.
  8. 08Operator review against the stated verified-incident criteria.
  9. 09Risk scoring on exposure, plausibility and reach, with rationale recorded per finding.

Sections 3–4

Findings

Each finding carries a stable identifier, its epistemic state, its source and provenance, a confidence band and a recommended action. Findings that could not be established remain visible as hypotheses.

IAG-DEMO-0001Verified incidentElevatedObserved 2026-08-11

A public profile reproduces the declared founder's name, photograph and biography verbatim, and directs contacts to a messaging address on an unrelated domain.

Dimension
Impersonation Watch
Asset
Public founder profile
Source
Public professional network profile
Provenance
Retrieved 2026-08-11, snapshot captured, profile URL recorded
Confidence
High
Verification
Operator reviewed

Recommended action

Report through the platform's impersonation channel using the prepared dossier, attaching proof that the genuine profile is yours.

IAG-DEMO-0002EvidenceModerateObserved 2026-08-12

A character-substitution variant of the declared primary domain was registered 14 days ago and holds a recently issued certificate. It currently serves a placeholder page.

Dimension
Domain Watch
Asset
northbank-studio.example
Source
Domain registration and certificate transparency records
Provenance
Registration record retrieved 2026-08-12; certificate log entry recorded
Confidence
Moderate
Verification
Operator reviewed

Recommended action

Record and re-observe in 30 days. A certificate on an imitative name usually precedes content, so a change here is likely.

IAG-DEMO-0003Verified incidentCriticalObserved 2026-08-13

A live storefront reproduces the declared brand's product photography and checkout presentation on a domain the customer does not own, and presents an active payment surface.

Dimension
Commerce Watch
Asset
Storefront and checkout presentation
Source
Public storefront on an unrelated domain
Provenance
Retrieved 2026-08-13, snapshot captured, hosting fingerprint recorded
Confidence
High
Verification
Operator reviewed

Recommended action

Priority action: submit an abuse report to the hosting provider and registrar with the captured evidence, and publish a customer-facing official-channels notice.

IAG-DEMO-0004HypothesisElevatedObserved 2026-08-13

A parked domain shares a hosting fingerprint with IAG-DEMO-0003 but serves no content. Shared infrastructure is consistent with common control, but does not establish it.

Dimension
Domain Watch
Asset
Correlated parked domain
Source
Domain registration records; shared hosting fingerprint
Provenance
Retrieved 2026-08-13; no content served at time of observation
Confidence
Low
Verification
Not verified

Recommended action

Deliberately not promoted to a verified incident: it does not meet the criteria. Re-observe in 30 days.

IAG-DEMO-0005SignalInformationalObserved 2026-08-14

Three indexed pages reference the declared brand name in a directory-listing context. No affiliation is claimed and no imitation of presentation was observed.

Dimension
Brand Watch
Asset
Declared brand name
Source
Indexed web pages
Provenance
Retrieved 2026-08-14; three pages recorded with URLs
Confidence
Low
Verification
Not verified

Recommended action

No action warranted. Recorded so that a later change can be compared against it.

The findings shown on this page are constructed for demonstration. They are not a real customer engagement, and no organisation named here is a customer.

Section 5

Limitations

Stated in every report, in the report itself rather than in a footer.

  • Observation covered public sources only over the stated period; sources not in the listed families were not examined.
  • Absence of a finding in a given dimension is not proof that nothing exists there.
  • Registration records were incomplete for two candidate domains using privacy services.
  • Visual similarity scores are measurements, not determinations of infringement.
  • No conclusion is drawn about the legal identity of any party behind an observed asset.
  • Platform response to any report prepared from these findings is outside our control.

Section 7

Recommended next steps

Prioritised, specific, and honest about which are urgent and which are hygiene.

  1. Priority 1 — Prepare and submit an abuse report for the live cloned checkout (IAG-DEMO-0003) to its hosting provider and registrar.
  2. Priority 2 — Report the impersonating support profile (IAG-DEMO-0001) through the platform's impersonation channel using the prepared dossier.
  3. Priority 3 — Publish an official-channels page listing your legitimate domains and profiles, and link it from support correspondence.
  4. Priority 4 — Consider defensive registration of the two highest-similarity dormant domains.
  5. Priority 5 — Re-observe in 30 days; two findings are at a stage where change is likely.
Start an assessmentDemonstration case