Report abuse
Kleap hosts websites its users build. If one of them is impersonating a brand, harvesting passwords, or otherwise breaking the law, tell us here and we will act on it.
What happens to your report
It is processed immediately, by machine, with nobody in the queue ahead of you. We read the project’s own source files and score them against the signature of the phishing campaigns we have seen. If they match, the page is taken offline within seconds — both its published address and its preview link. One limitation worth stating: we read the files a site is built from, not the page as a browser finally renders it, so content assembled at runtime or carried only inside an image is not something this check can see.
Because the decision comes from reading the page rather than from the report itself, filing one against a site that turns out to be legitimate does nothing to it. A page is removed automatically only when it impersonates a named provider, tells the reader to verify or update an account, and sends them to a form hosted on a free site builder — all three, together. That is deliberate, so that reporting cannot be used to knock a competitor offline. Anything short of all three is recorded and nothing happens to the site — if you believe we have missed something, say so in the message below and it will be read.
If we took your page down and we were wrong
There is no queue to join and no address to write to: open the project, remove whatever triggered the match, and publish again. Every publish is re-scanned by the same checker, and a page that passes is restored immediately. If it still does not pass, the editor tells you which signals matched so you can see what to change.
What this form does not cover
It decides one question — is this page impersonating a brand to collect credentials. Copyright and trademark disputes, and requests from law enforcement, are not something an automated check can judge; send those to [email protected] with the full address of the page.