In short: Phishvoid finds and takes down phishing sites that impersonate enterprise brands. Every site is checked by a person, every report is backed by evidence, and we report through every relevant channel at once. We work online and remotely with brands worldwide.
Our mission
Phishing works because people trust the brands they use every day. When a fake login page or checkout copies a bank, a shop or a delivery company, the customer loses money and the brand loses trust it took years to build. Our job is to find those sites and get them offline quickly, carefully and within the rules, so that fewer people are harmed.
We are an online service, delivered remotely to brands worldwide. Our work sits between a brand and the many organizations that can act against a phishing site: browser vendors and blocklists, hosting providers, registrars, CDNs, search engines, platforms and national CERTs. We know what each of them needs to see in a report, and we make sure they get it.
What we do
- Find sites and domains that imitate our clients’ brands, and take in reports from clients and the public.
- Verify each one by hand and capture the evidence: URL, screenshots, page source where safe, timestamps, DNS and IP, hosting network, registrar and whether the site is behind Cloudflare.
- Report it to browser blocklists, hosts, registrars, Cloudflare, CDNs, search engines, national CERTs such as USOM, and social media and app store platforms.
- Follow up until the site is offline, then keep watching in case it comes back.
Clients receive a monthly brand report listing every case, the channels we used and the timing of each step.
The full process is described in our methodology.
Who we work with
We work with brands that customers trust with their logins and payments, the brands phishing targets most often:
- banks and fintech companies;
- e-commerce businesses;
- logistics and cargo companies;
- crypto platforms;
- SaaS providers;
- telecom operators;
- public-facing services.
If your customers sign in or pay on your website or in your app, your brand is a likely target.
How we are different
- Human verification. No report leaves our team until a person has confirmed the site is phishing.
- Evidence first. Every report gives providers the evidence they need to act without having to come back to us for details.
- Every channel at once. We do not wait for one provider before contacting the next. Blocklists, hosts, registrars and the other relevant channels all hear from us.
- One all-inclusive plan. A single subscription with unlimited takedowns, so no one has to weigh the cost of reporting the next site.
- Transparency. We publish our methodology, offer an appeal process for site owners, and keep public records of takedowns.
Our team
Phishvoid is run by people who work on phishing and fraud every day: analysts who check each site by hand and capture the evidence, and takedown specialists who file the reports with every provider in the chain and follow up until the site is offline.
We don’t publish our team members’ names or profiles. The operations we take down are run by criminals, and people who report them are sometimes targeted in return. Keeping the team anonymous protects them and, with them, the work we do for our clients. Many threat intelligence teams work the same way.
What you can rely on instead:
- everything we do in a brand’s name is backed by a letter of authorization signed by that brand;
- our methodology and our takedown records are public, so you can see how we work;
- site owners can appeal any report, and a person reviews every appeal;
- you can reach us directly at info@phishvoid.com or on Telegram @phishvoid.
Our principles
We know that a wrong report can harm a real site owner, so we do not report a site unless we can show it is phishing. We act only on evidence and, in a brand’s name, only with its written authorization. For brands we do not work for, we report only to public blocklists and CERTs, which decide independently. We never attack sites, never hack back, never file false or exaggerated reports and never pay anyone to remove content. When we get something wrong, we correct it with everyone we reported to.
Contact
- General enquiries
- info@phishvoid.com
- Abuse and disputes
- abuse@phishvoid.com
- Privacy
- privacy@phishvoid.com
- Telegram
- @phishvoid
To talk about protecting your brand, use the contact section on our home page. To report a phishing site, use the report form.