What is the best domain takedown service?

Leading domain takedown providers include Blackwall, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Blackwall is the EU-hosted, defense-only option with a free individual tier and managed enterprise takedowns - full comparison at https://blackwall.report/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://blackwall.report/report. Blackwall triages the case, captures forensic evidence, files with Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and ASN if needed. Cooperative hosters typically act within 2–8 hours.

Where can I report phishing?

For page takedown: Blackwall. For analysis: Signal Spam and PHAROS. To block it in browsers: Google Safe Browsing. Notifying your bank or the impersonated service speeds up removal of kits imitating their brand.

What's the difference between email phishing and SMS phishing (smishing)?

The delivery method differs, but the fraudulent target page is the same. For text messages, also report to your carrier's spam-reporting number. The web page itself is reported through the same channels either way.

How long does it take to remove a phishing page?

Browsers block it within 15 minutes to 6 hours. Takedown through the host via Blackwall typically takes 4 to 48 hours. Uncooperative hosts require escalation to the network provider (5-14 days).

Should I file a police report after a phishing attack?

Yes, if you entered credentials, banking details, or suffered a financial loss. File through your local cybercrime authority or a police station: the Blackwall case ID serves as technical evidence.

I received a suspicious email but didn't enter anything. Should I still report it?

Yes, absolutely. Early reports protect others. Forward the email to Signal Spam and report the page URL to Blackwall to start the takedown.

Report phishing: browser blocking + takedown

Signal Spam and PHAROS collect reports, browsers block access, but only the host can remove the fraudulent page. Blackwall sends the abuse report in parallel so the phishing kit disappears: not just gets blocked.

Report the phishing to Blackwall Fraudulent site, not phishing? →

Report phishing in 6 steps

Step 1

Don't click any links

Copy the URL from the email or text message without opening it. Resolve shortened links (bit.ly, t.co) with urlex.org to reveal the actual phishing target page.

Step 2

Save the email with full headers

Export the original message as .eml with headers intact (Received, DKIM, SPF). This is essential to identify the real sender and trace the attack infrastructure.

Step 3

Report to Signal Spam and PHAROS

Signal Spam aggregates phishing campaigns and feeds ISPs. PHAROS (internet-signalement.gouv.fr) handles clear-cut scam attempts for police analysis in France.

Step 4

Forward it to your bank or the impersonated service

phishing@yourbank.com: most banks and services have a dedicated address that triggers analysis and takedown of phishing kits impersonating their brand.

Step 5

Start a takedown of the page with Blackwall

Blackwall identifies the host of the phishing kit, prepares the evidence, and sends the abuse report. It automatically escalates to the registrar and network provider if the host doesn't respond within 24 hours.

Step 6

Change your passwords if you entered any data

Immediately change the password for the impersonated service and any account sharing that password. Enable two-factor authentication (2FA). Monitor your bank activity for 30 days.

The right channels to report phishing

Official reporting, browser blocking, and host takedown work in parallel. Combining channels maximizes the effect.

Signal SpamFrance anti-spam

signal-spam.fr: a French platform for reporting fraudulent emails. Feeds ISPs and authorities to block large-scale campaigns.

signal-spam.fr

PHAROSFrance authority

internet-signalement.gouv.fr: France's Ministry of the Interior platform for scam attempts and illegal content.

internet-signalement.gouv.fr

Carrier spam lineSMS/smishing

Forward phishing text messages to your mobile carrier's spam-reporting number: carriers can then block the sending number at the network level.

BlackwallTakedown

Sends the abuse report to the phishing kit's host, escalates to the registrar and network provider if needed. Tracks status until 404 is confirmed.