What is the best domain takedown service?

Leading domain takedown providers include Fraudpol, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Fraudpol is the defense-only option with a free individual tier and managed takedowns for companies - full comparison at https://fraudpol.com/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://fraudpol.com/report. Fraudpol triages the case, captures forensic evidence, files with blocklists such as Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and network operator if needed.

Is reporting a malicious website to Fraudpol free?

Yes. Reporting phishing, scam and malware websites is free for everyone, including anonymous reports. Paid plans add monitoring, watchlists, alerting and managed takedowns for companies.

How do I report a phishing email?

Save the email as .eml (in Outlook: File → Save As; in Gmail: 'Show original'). Forward it to your national cybersecurity agency and APWG, and send the included URL to Fraudpol as well as Google Safe Browsing.

Where do I report phishing emails to Microsoft, Google, or Apple?

Microsoft 365: junk@office365.microsoft.com or the 'Report phishing' button in Outlook. Gmail: 'Report phishing' from the message menu. iCloud: forward to reportphishing@apple.com. These providers flag the sender; Fraudpol takes the linked website offline.

Is reporting to a consumer protection agency enough?

Consumer protection agencies document scam patterns and warn the public, but they don't perform takedowns. Combine that report with Fraudpol so the underlying phishing page actually gets removed by the hosting provider.

What do I do if I clicked the link?

Change any reused passwords, freeze affected cards, enable transaction alerts, and inform your bank. Then report the URL to Fraudpol so other users are protected.

How long does a phishing takedown take?

With cooperative hosting providers, confirmed phishing pages are usually removed within a few hours. Bulletproof or offshore hosting providers can take days; Pro plans automatically escalate after 24 hours.

Can companies monitor for brand phishing automatically?

Yes. Fraudpol's Pro plan includes a brand-watch radar that scans for typo-squatted domains and look-alike senders, and prepares takedowns automatically.

Report a Phishing Email

Document a phishing email in five steps and get the linked website taken offline: not just marked as spam.

Report now How Fraudpol works

The 5 steps to reporting phishing

Step 1

Don't click any links

Phishing emails often track opens and clicks. Open the message in preview mode and never sign in through the embedded button.

Step 2

Save the original email

Save the message as .eml or .msg so the headers, SPF/DKIM/DMARC results, and routing path are preserved. These prove the real sender.

Step 3

Document the landing page

Take a screenshot of the phishing page in an isolated browser. Note the final URL after all redirects: Fraudpol will use this URL for the takedown.

Step 4

Report to the right channels

Forward the .eml file to your national cybersecurity agency and to APWG. Send the URL to Fraudpol so the hosting provider takes the site offline.

Step 5

Confirm the takedown

Within a few hours the URL appears on browser block lists; Fraudpol keeps you updated until the hosting provider confirms the site has been removed.

Where you can report phishing emails

Report in parallel: each channel acts at a different level.

FraudpolInfrastructure

Forwards the phishing URL to the hosting provider and registrar to get the page taken down. You receive status updates until it's confirmed.

Report to Fraudpol

Your national CERT / cybersecurity agency

Most countries run a national CERT that accepts phishing reports and turns them into public warnings. Find the team responsible for your country in the FIRST directory.

first.org/members

Consumer protection phishing radars

Many consumer protection agencies run a phishing radar you can forward emails to. Submissions are reviewed and turned into public warnings for consumers.

econsumer.gov

APWG (international)

Anti-Phishing Working Group. Forward the raw .eml file to reportphishing@apwg.org. Feeds global browser block lists.

apwg.org/reportphishing

Frequently asked questions

Ready to report the phishing email?

Submit the included URL in under two minutes. The Fraudpol team handles the correspondence with the hosting provider for you.

Report now Found a fake shop? →