Phishing & brand protection blog
How to Spot a Phishing Website: 10 Warning Signs
Learn 10 practical warning signs of a phishing website, from lookalike domains to fake login forms, so customers and staff stop before typing a password.
TakedownFound a Site Impersonating Your Brand? The First 24 Hours
A practical first-day playbook for brand and security teams: capture evidence, assess impact, get the site blocklisted, request takedown and protect customers.
TakedownHow to Take Down a Phishing Site Hidden Behind Cloudflare
Why phishing sites use Cloudflare, what its abuse process can and cannot do, and how to run parallel reports to the host, registrar and browser blocklists.
GuidesTyposquatting and Homoglyph Domains Explained
How attackers register lookalike domains such as examp1e.com and exarnple.com, why they work, and how brands can detect, prioritize and remove them effectively.
ScamsFake Parcel-Delivery SMS and Tracking Pages: How They Work
How fake delivery texts and tracking pages steal card details and one-time codes, why they work so well in Türkiye, and how consumers and brands should respond.
TakedownDMCA Notices Against Cloned Websites: When They Work
Copyright notices can remove cloned websites, but not in every case. Learn when a DMCA notice helps, when it fails, and how it fits with phishing abuse reports.
Email securitySPF, DKIM and DMARC: Stop Spoofed Email in Your Brand’s Name
A plain-language guide to SPF, DKIM and DMARC: what each one does, how to roll out DMARC enforcement safely, and what e-mail authentication cannot stop.
ScamsFake Ads and Deepfake Investment Scams Using Your Brand
How scammers use fake ads, cloned news pages and deepfake videos of executives to sell bogus investments, and how brands can detect, report and remove them.
ScamsFake Customer-Support Accounts on Social Media and Chat Apps
Impostor support accounts intercept unhappy customers on social media and messaging apps. Learn how the scam works and how brands can prevent and remove it.
TakedownThe Phishing Site Takedown Process, Step by Step
What happens after a phishing site is reported: detection, verification, blocklisting, host, registrar and CDN notices, follow-up and re-emergence checks.