# Phishing Abuse Evidence Pack Template
Brand Proof HQ · Brand Abuse Desk

## Case header
- Reporter name / role / company:
- Reply-to email (stable identity):
- Case ID:
- Date (UTC):
- Brand protected:
- Official apex domain(s):
- Target URL(s):
- Target apex domain:
- Requested action: [ ] registrar suspend  [ ] host disable  [ ] both

## One-screen summary (5–8 lines)
1.
2.
3.
4.
5.

## Visual & page evidence
- [ ] Full-page screenshot(s) with URL bar + timestamp
- [ ] Close-ups (logo / form / payment instructions)
- [ ] Page title / meta
- [ ] HTML excerpt or DOM hash
- [ ] Cloaking notes (bot vs human), if any
- [ ] Optional pHash / SSIM vs official homepage

## Infrastructure
- RDAP / WHOIS snapshot:
- DNS (A/AAAA/CNAME/MX):
- Hosting / ASN / CDN:
- TLS certificate (subject / issuer / not-before):

## Discovery context
- How found:
- First seen (UTC):
- Last checked (UTC):
- Blocklist status (e.g. GSB):

## Legal framing
Preferred category: phishing / fraud / trademark impersonation  
(Do not lead with DMCA unless it is truly a copyright hosting case.)  
Authorization: [ ] attached  [ ] stated in email

## Attachments index
1.
2.
3.

## Subject line
`[Phishing] {Brand} impersonation on {fqdn} — live {credential|payment} harvest`