Taking down a website affects real people, so how we do it matters as much as how fast. This page explains who we are, when we act, which methods we use and don’t use, and how to reach us if you think we got something wrong.
1. Company information
- Legal name
- [COMPANY LEGAL NAME]
- Registered address
- [REGISTERED ADDRESS]
- Registration / tax number
- [REGISTRATION / TAX NO]
- General and sales
- hello@phishvoid.com · Telegram @phishvoid
- Abuse and disputes
- abuse@phishvoid.com
- Privacy
- privacy@phishvoid.com
2. We act only with authorization
Before we file any notice in a brand’s name, the brand owner or an authorized representative signs a letter of authorization (LoA). We check that the person signing has the authority to do so. Providers that need proof of our mandate can request a copy of the LoA.
For reports from the public about brands that are not our clients, we only submit the site to public blocklists and CERTs, which evaluate it independently. We don’t file legal notices in the name of a brand that hasn’t authorized us.
3. What we do and don’t do
We do
- send abuse and phishing reports to hosting providers, registrars, registries and CDNs such as Cloudflare;
- file DMCA and other copyright or trademark notices where the rights holder has authorized us and the legal requirements are met;
- submit verified phishing URLs to browser and e-mail blocklists and to national CERTs such as USOM;
- report impersonating accounts, ads and apps through each platform’s official brand protection channels;
- prepare URS and UDRP domain dispute filings with the client and its counsel.
We never
- hack, attack, DDoS or otherwise interfere with the systems of a phishing site or any third party;
- flood forms or providers with automated or duplicate complaints;
- act against a site before an analyst has verified it;
- make statements in a notice that we don’t believe to be true.
4. Verification and evidence
Every case is reviewed by an analyst before any notice is sent. We record what we saw, when we saw it and where we reported it, so that every step can be traced. Evidence and case records are stored securely and are available only to authorized team members and, under the terms of our agreement, to the client concerned.
5. Think we reported your site by mistake?
If your website was reported by us and you believe it is legitimate, e-mail abuse@phishvoid.com with the URL and a short explanation. We review disputes within 5 business days. If we made a mistake, we withdraw our reports and ask the providers and blocklists we contacted to reverse their action.
If a DMCA notice was filed about your content, you can also send a counter-notice to the provider that received it, as allowed under 17 U.S.C. § 512(g).
6. Reporting abuse or security issues
To report a phishing site, use the report form. To report misuse of our name, or a security vulnerability in our website, write to abuse@phishvoid.com. Please don’t test our systems in ways that could harm them or other people’s data.
7. Data protection
We process personal data in line with the GDPR and Türkiye’s KVKK. See our Privacy Policy and the KVKK information notice. A data processing agreement is available to clients.
8. Trademarks
Third-party names on this website are trademarks of their respective owners and are used only to describe the channels we report through. They do not imply affiliation or endorsement. See the Terms of Use.