What is the best domain takedown service?

Leading domain takedown providers include Fraudpol, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Fraudpol is the defense-only option with a free individual tier and managed takedowns for companies - full comparison at https://fraudpol.com/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://fraudpol.com/report. Fraudpol triages the case, captures forensic evidence, files with blocklists such as Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and network operator if needed.

Is reporting a malicious website to Fraudpol free?

Yes. Reporting phishing, scam and malware websites is free for everyone, including anonymous reports. Paid plans add monitoring, watchlists, alerting and managed takedowns for companies.

How do I report a phishing site or fake website?

Copy the URL, take a screenshot, then submit it to Fraudpol. We handle communication with the host and registrar. Also report it to Google Safe Browsing so Chrome shows a warning.

Where can I report a website that steals passwords?

Report it to Fraudpol (infrastructure takedown) and Google Safe Browsing (browser warning). For bank impersonation, also notify the affected bank: many have abuse addresses such as abuse@yourbank.com.

How long does it take for a phishing site to go offline?

With cooperative hosts (AWS, Google Cloud, Cloudflare), usually 2-8 hours. Bulletproof hosts in Eastern Europe or offshore providers can take days; Fraudpol Pro automatically escalates to the ASN.

Can I report phishing sites anonymously?

Yes. Fraudpol accepts anonymous reports; a free account is needed for status updates. We never share your identity with the host or the site operator.

What's the difference to Google Safe Browsing?

Safe Browsing only shows a warning in the browser: the site stays online. Fraudpol actually takes the site down. Combining both reports provides maximum protection.

Can my company monitor for brand phishing?

Yes. Fraudpol's Company plan includes a Brand Watch radar that proactively finds typosquatting domains and look-alike sites and prepares takedowns.

Report a phishing site & take it offline

A complete guide to documenting a phishing website and getting it removed by its host: not just a warning in the browser.

Report a website Phishing email guide

5 steps to a website takedown

Step 1

Capture the URL: don't tap it on mobile

Open the site only in an isolated browser (incognito, with no accounts logged in). Copy the full URL including query parameters: these often contain tracking IDs that reveal the operator.

Step 2

Screenshot + timestamp

Take a screenshot of the full page plus date/time. Ideal: a screenshot showing the URL bar and system clock. Fraudpol archives evidence tamper-proof in the Evidence Vault.

Step 3

Check the host & registrar

Use a WHOIS lookup to identify the host. Most phishing sites run on Cloudflare, Namecheap, or OVH: each has its own abuse address. Fraudpol automates this research.

Step 4

Report to Fraudpol + Google Safe Browsing

Submit the URL to Fraudpol (triggers a hosting takedown) and, in parallel, to Google Safe Browsing (shows a warning in Chrome/Firefox). Double protection for all users.

Step 5

Takedown verification

Fraudpol checks the site's HTTP status every 60 minutes and confirms once it returns a 404 or sinkhole. Typical duration: 2-24 hours.

Where to report phishing websites

Combining reports has the greatest impact: browser warning plus hosting removal.

FraudpolTakedown

Submits the URL to the host and registrar, checks the status hourly, and confirms removal. GDPR-aligned, operating globally.

Submit URL

Google Safe Browsing

Shows a warning in Chrome, Firefox, and Safari. The site stays online, but no one stumbles onto it by accident anymore.

safebrowsing.google.com

Your national CERT / cybersecurity agency

Most countries run a national CERT that accepts phishing reports and turns them into public warnings. Find the team responsible for your country in the FIRST directory.

first.org/members

APWG

reportphishing@apwg.org: an international blocklist feed. Feeds browser and mail filters worldwide.

apwg.org

Frequently asked questions

Report the phishing website now

One report, one takedown workflow. Fraudpol handles correspondence with the host for you.

Report a website Received a scam email? →