Accuracy over volume
Filing thousands of reports is easy and useless. We file the right one, with proof, and never touch a legitimate site.
About
We pull the plug
on impersonation
Phish Plug exists because the people defending a brand were losing to automation. Clones go up in minutes; manual takedowns take days. We built the bot that closes that gap.
Why we built it
The defenders were outnumbered
A phishing clone of your brand can be registered, cloaked and live before lunch. It shows search engines a harmless page and your customers a login trap, harvests credentials, and disappears before a hand-written abuse report is even read.
We kept seeing the same losing fight: talented teams buried under lookalike domains, writing the same reports by hand, watching clones outlive them. So we built Phish Plug — detection, cloaking forensics, evidence and takedowns in one panel, fast enough to matter.
1,284
Clones taken down
37min
Median time to filing
99%
Evidence accepted
24+
Takedown desks
What we believe
Principles we build on
Human in the loop
Automation finds and prepares; a person approves every send. Fast should never mean reckless.
Evidence first
If a desk cannot act on it, it is not evidence. Every case is built for the reader on the other end.
Wherever the clone lives
Phishing infrastructure is global. We route to the right desk in the right country — not a generic inbox.
See the whole trick
Cloaking is the whole game. If you cannot see the mobile trap, you cannot prove it. We always do.
On the brand's side
We work for the brand being impersonated and the customers being targeted — not for noise or vanity metrics.
Built by WSD
A WSD product
Phish Plug is designed and operated by WSD, a team focused on brand protection and anti-abuse tooling. Strong evidence, the right relationships, and software that respects the person approving the send.
FAQ
About, answered
Who builds Phish Plug?
Phish Plug is built by WSD, a team focused on brand protection and anti-abuse tooling. We built it because the people defending a brand were losing to automation — attackers spin up clones in minutes, and manual takedowns simply could not keep pace.
What do you believe about takedowns?
Accuracy over volume. It is easy to file thousands of reports and look busy; it is hard to file the right report, with the right evidence, to the right desk, and never touch a legitimate site. We chose the hard version, and we gate every send behind a human.
Do you work with abuse desks directly?
Yes. Over time we have built relationships with registrars, hosts and safe-browsing desks, and Enterprise customers get dedicated channels. Good evidence plus a known sender is what turns a report into a removal.
Is Phish Plug only for large companies?
No. A single high-value brand is as much a target as a portfolio. Single-brand plans exist precisely so a smaller team can get the same detection, forensics and takedowns the big portfolios rely on.
Protect your brand with us
Start with a free clone check, or talk to the team about your portfolio.