Your safety is our top priority

All domains with phishing content are capable of being taken down. Domains that are only typosquatting sites are usually not taken down by Registrars just because they are a "typosquat". We will submit the report  on your behalf, but we will work with you to get as much information as possible before submitting an incident.  This decision tree may be helpful in case you get stuck:

‍

Once the incident is identified, you can submit it through our dashboard. Once logged in, you can go to the left bar and select “Report Incident”.

First, you can add the infringing domain. There must be one domain per report.

💡 There’s no need to post each subdomain separately. For example, if you have a website in the form “[xxxxx].phishingdomain.com”, you just have to report “phishingdomain.com” and it will include all the related subdomains.

Then, you must choose the type of incident you are reporting. It can be domain (default), app:thirdparty, social or browser:extension.

app:thirdparty refers to those apps for Android or iOS that impersonate you and therefore not allowed by your organization.

social refers to all the infringing content posted on social networks.

browser:extension refers to infringing browser extensions (a.k.a. plugins)

Finally, you must decide if you want us to take down the domain or put it on Monitor.

💡 Monitor: is an unique feature that checks periodically for content modifications into the domain and immediately retrieves it back to our attention as soon any change is detected.

Additionally, you can check the “provide additional details” box to add any relevant information or attach any file that you think would help us approach the incident in the best way.

Once an incident is identified, you can submit it through our dashboard. After logging in, navigate to the left sidebar and select "Report Incident."

Firstly, input the infringing domain, ensuring there is only one domain per report. No need to list each subdomain separately. For example, if your website has subdomains like "[xxxxx].phishingdomain.com," simply report "phishingdomain.com," and it will cover all related subdomains.

Next, choose the type of incident you're reporting. Options include domain (default), app:thirdparty, social, or browser:extension.

• app:thirdparty is for apps on Android or iOS impersonating your organization, which is not allowed.
• social pertains to infringing content posted on social networks.
• browser:extension concerns infringing browser extensions (a.k.a. plugins).

Finally, decide if you want us to take down the domain or put it on Monitor.

• Monitor: This unique feature periodically checks for content modifications within the domain and immediately brings it back to our attention upon detecting any changes.

Additionally, you can check the "provide additional details" box to add any relevant information or attach files that you believe would assist us in addressing the incident effectively.

‍

Yes, we handle the UDRP process. Please be aware that UDRP specifically addresses domain name abuse and bad faith in the use of the domain name. This requires the presence of at least one of your brand's trademarked names in the reported domain name.

Furthermore, for pursuing a UDRP, consider the following:

1. Payments for UDRP complaints are non-refundable, and no decision from a Provider will include any monetary reward (e.g., damages, legal fees, etc.).
2. If you wish to contest the decision of the UDRP Provider, you must file a lawsuit within 10 days of receiving the Provider's decision. PhishFort cannot assist with this, and you will need to consult with a law firm or legal practitioner.
3. There's no guarantee that the Panel will decide in your favor.
4. If the Panel rules in your favor, ownership of the domain will be transferred to you.

There are two reasons the site may become available again:

1. The domain suspension can be reversed if the website owner demonstrates good faith in the use of the domain name or if the domain suspension reaches the ClientHold period. The duration of the ClientHold period varies for each Registrar. However, the domain usually remains suspended, preventing threat actors from reusing the domain.
2. If Registrars become unresponsive and recognizing the business-critical nature of the report, our Analysts may attempt the takedown through the Hosting Provider instead of the domain Registrar when the takedown was performed over the IP. This typically deters threat actors from persistently setting up new IPs to maintain the availability of phishing content. However, there is a chance that threat actors may use a new Hosting Provider and set up the website again.

In both cases, our Analysts will initiate the takedown again, and no additional charges will be applied.

Phishfort is brand reputation and phishing prevention platform.

Our cutting-edge detection engine powered by AI, combined with rotating teams of trained professionals working 24/7 across the world forms an impenetrable shield against digital threats.

Targeted attacks, scams, malware, via websites, social media or apps, we stop them all.

We offer fast and comprehensive takedowns, through a combination of automation with industry expertise. 

The entire process is managed through the platform where reports and summary are provided where you have a dedicated team working for you.