Take down northwind-secure[.]com and block it at the mail gateway
A cloned copy of your customer login page went live 6 hours ago. Three employees received links to it this morning.
- Brand Protection · 2
- Email gateway · 3
- DNS logs · 1
- PhishGrid · 1
- Takedown request to the registrar, with evidence attached
- Block rule for the domain on the email gateway
- Heads-up message to the 3 recipients in Teams







