{"test":"Test 6: mapping where a fake gets reported","version":"Report Routes, test build 0.1","method":"Read from each route's own reporting pages; nothing was submitted and no account was created","routes":[{"Route":"NiRA abuse portal (.ng)","How a report is made":"Web form with evidence files, at most three of 3 MB each; a reference number is given","Who files it":"An analyst","Stated response time":"Investigated within one business day; active phishing usually escalated within 24 to 48 hours"},{"Route":"NiRA dispute policy","How a report is made":"Written complaint on paper and by email; expert fee ₦100,000 plus VAT","Who files it":"The brand owner","Stated response time":"No takedown time; the name holder has 20 days to answer"},{"Route":"Cloudflare","How a report is made":"Web form; an API for some accounts","Who files it":"An analyst","Stated response time":"Not stated"},{"Route":"Google browser blocklist","How a report is made":"Manual form; its reporting API is closed to new users","Who files it":"An analyst","Stated response time":"Not stated; no ticket"},{"Route":"Microsoft browser blocklist","How a report is made":"Web form with a CAPTCHA, up to 100 addresses at once","Who files it":"An analyst, because we never solve CAPTCHAs","Stated response time":"Not stated; no ticket"},{"Route":"Facebook and Instagram","How a report is made":"Impostor forms; a brand protection programme for trademark owners; an API for IP claims by application","Who files it":"An analyst, or the brand's own programme access","Stated response time":"IP reports usually within a day; impersonation not stated"},{"Route":"WhatsApp","How a report is made":"Scam reports inside the app; a web form for trademark claims","Who files it":"In the app","Stated response time":"Not stated"},{"Route":"Telegram","How a report is made":"Email to its abuse address with links; a form for EU illegal content; a scam report account in the app","Who files it":"An analyst, by email","Stated response time":"Not stated"}],"whoCarriedLivePhishing":{"livePhishingPages":88,"onFreeWebsiteAndAppBuilders":24,"onTheirOwnWebAddresses":64,"domainsWithNoRegistrationAnswer":18,"hostsPlatformsAndRegistrarsWhoseAbuseRoutesWeMapped":18},"reportingRoutesRead":8,"reportingRoutesThatStateAResponseTime":2,"notes":["Cloudflare usually shows a warning page rather than removing a site, and forwards the report to the host, which still has to remove it.","NiRA does not take a report without evidence files: at most three, of 3 MB each. Our capture of the fake Example Bank login is 185 KB.","WhatsApp and Telegram scam reports need an account inside the app.","Telegram may stop acting on a reporter who sends unfounded reports, which is one more reason our analysts approve every request."]}