What is the best domain takedown service?

Fraudpol provides defense-only abuse reporting, evidence preservation and managed takedown coordination for individuals and organizations.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://fraudpol.com/report. Fraudpol triages the case, captures forensic evidence, files with blocklists such as Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and network operator if needed.

Is reporting a malicious website to Fraudpol free?

Yes. Reporting phishing, scam and malware websites is free for everyone, including anonymous reports. Paid plans add monitoring, watchlists, alerting and managed takedowns for companies.

How can I tell whether a Dropbox email is real?

Check the complete sender address and inspect the registered domain behind every link. Open Dropbox from a saved bookmark or its official app instead of using the email button, then check whether the shared item or alert exists there.

What does a Dropbox phishing email try to steal?

Common campaigns use a fake shared document or account alert to collect Microsoft, Google or Dropbox credentials. Others deliver malware or request payment.

I entered my password on a fake Dropbox page. What should I do?

Change the password immediately from the legitimate service, revoke other sessions, enable multi-factor authentication and change any reused password. Notify your workplace security team if it was a company account.

Is Fraudpol affiliated with Dropbox?

No. Fraudpol is an independent private abuse-reporting platform. Dropbox is the impersonated service in this reporting guide.

Report Dropbox phishing and fake share links

A complete, neutral workflow for suspicious Dropbox document invitations, fake sign-in pages and account-alert emails.

Report the phishing website What is phishing?

How to report Dropbox phishing

Step 1

Inspect the sender and shared-file link

Expand the sender address and read the registered domain behind the button without opening it. A Dropbox logo or the word 'dropbox' in a subdomain does not make the destination legitimate.

Step 2

Preserve the original message

Save the email as .eml or .msg so its headers remain intact. Take a screenshot of the message and any page you already opened, with the address bar visible.

Step 3

Report the message to Dropbox and your mail provider

Use your mail provider's phishing command and Dropbox's official abuse channel. If this is a work account, notify your security team before deleting the message.

Step 4

Report the linked website

Submit the complete URL to Fraudpol so the hosting provider or registrar can receive an evidence-based infrastructure report after review.

Step 5

Secure any affected account

If you entered a password, change it from the real service, end other sessions and enable multi-factor authentication. Contact your security team immediately if the account belongs to an organization.

Where to send each part of the report

The email provider, the impersonated service and the website infrastructure each handle a different layer.

FraudpolInfrastructure

Reviews the linked website and coordinates evidence-based reports with the responsible host or registrar.

Report the website

Dropbox

Dropbox maintains official guidance and reporting channels for suspicious emails, links and abuse of its services.

Dropbox security guidance

Your email provider

Use the built-in Report phishing command so the original message and routing signals can improve filtering.

Your organization's security team

For a work account, preserve the original message and follow the internal incident process before deleting it.

Dropbox phishing questions

Report the linked website

Preserve the URL and original message, then submit the site for infrastructure review. Do not include passwords or payment details.

Report the phishing website Read the phishing guide →