Report Abuse
6 November 2026
Every application hosted on Erawan is served under a subdomain of erawan.app or a custom domain. Any deceptive, fraudulent, or harmful activity compromises the security and reputation of the entire platform. We take abuse reports seriously and act swiftly to mitigate threats.
Where to Report
hello@erawan.cloud — Reviewed directly by our engineering and security team. Reports concerning active phishing, malware distribution, or in-progress attacks are investigated within the same day.
What to Include
You do not need an Erawan account to report abuse, nor do you need to be the direct victim. To facilitate a prompt investigation, please provide:
- The full URL of the offending application, including any subdomain under erawan.app or custom domain
- A clear description of the violation (e.g., impersonation of a financial institution, malware payload distribution, spam, a proxy or VPN server, online gambling, or fraud)
- Relevant evidence, such as screenshots, full email headers, or deceptive messages received
- Your contact information, if you wish to receive status updates regarding the report
Enforcement Procedures
Applications actively engaged in severe harm — including phishing, credential harvesting, malware distribution, or system attacks — will be taken offline immediately to protect users and the public, followed by notification to the account owner.
For non-emergency violations, we review the complaint, notify the account holder, and provide a reasonable timeframe for remediation before taking formal enforcement action.
Full platform standards and prohibited activities are detailed in our Terms of Service.
Reporting Security Vulnerabilities in Erawan
If you identify a security vulnerability in Erawan's core infrastructure, console, API, or isolation boundaries, please report it to hello@erawan.cloud with the subject "Security Vulnerability Report". We prioritize vulnerability disclosures and work diligently to address confirmed issues.