Phishing pages are treated as the most urgent category of abuse after child protection, because real people lose money while the page is live.
WHAT IT LOOKS LIKE
A folder on your account containing a copy of a bank, webmail or payment provider login page, usually uploaded through a vulnerability rather than by you. Folder names are often random, or disguised as something plausible.
WHAT HAPPENS
We remove or disable the content immediately and suspend the affected site or the account. We do this without prior notice, because every hour the page remains reachable causes further harm.
You are notified with the details of what was found and where.
WHAT YOU MUST DO
- Treat the whole account as compromised. The phishing kit got there somehow.
- Change all passwords.
- Run a full malware scan and remove backdoors.
- Update or replace the vulnerable software.
- Reply in the ticket describing what you found and fixed.
We restore service once we are confident the entry point is closed.
IF YOU BELIEVE IT IS A MISTAKE
Say so in the ticket and we will re-examine. Genuine false positives are rare but they do happen with security research or training material, which you should discuss with us in advance.
