What is the best domain takedown service?

Leading domain takedown providers include Blackwall, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Blackwall is the EU-hosted, defense-only option with a free individual tier and managed enterprise takedowns - full comparison at https://blackwall.report/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://blackwall.report/report. Blackwall triages the case, captures forensic evidence, files with Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and ASN if needed. Cooperative hosters typically act within 2–8 hours.

How do I report a phishing site or fake website?

Copy the URL, take a screenshot, then submit it to Blackwall. We handle communication with the host and registrar. Also report it to Google Safe Browsing so Chrome shows a warning.

Where can I report a website that steals passwords?

Report it to Blackwall (infrastructure takedown) and Google Safe Browsing (browser warning). For bank impersonation, also notify the affected bank: many have abuse addresses such as abuse@yourbank.com.

How long does it take for a phishing site to go offline?

With cooperative hosts (AWS, Google Cloud, Cloudflare), usually 2-8 hours. Bulletproof hosts in Eastern Europe or offshore providers can take days; Blackwall Pro automatically escalates to the ASN.

Can I report phishing sites anonymously?

Yes. Blackwall accepts anonymous reports; a free account is needed for status updates. We never share your identity with the host or the site operator.

What's the difference to Google Safe Browsing?

Safe Browsing only shows a warning in the browser: the site stays online. Blackwall actually takes the site down. Combining both reports provides maximum protection.

Can my company monitor for brand phishing?

Yes. Blackwall's Company plan includes a Brand Watch radar that proactively finds typosquatting domains and look-alike sites and prepares takedowns.

Report a phishing site & take it offline

A complete guide to documenting a phishing website and getting it removed by its host: not just a warning in the browser.

Report a website Phishing email guide

5 steps to a website takedown

Step 1

Capture the URL: don't tap it on mobile

Open the site only in an isolated browser (incognito, with no accounts logged in). Copy the full URL including query parameters: these often contain tracking IDs that reveal the operator.

Step 2

Screenshot + timestamp

Take a screenshot of the full page plus date/time. Ideal: a screenshot showing the URL bar and system clock. Blackwall archives evidence tamper-proof in the Evidence Vault.

Step 3

Check the host & registrar

Use a WHOIS lookup to identify the host. Most phishing sites run on Cloudflare, Namecheap, or OVH: each has its own abuse address. Blackwall automates this research.

Step 4

Report to Blackwall + Google Safe Browsing

Submit the URL to Blackwall (triggers a hosting takedown) and, in parallel, to Google Safe Browsing (shows a warning in Chrome/Firefox). Double protection for all users.

Step 5

Takedown verification

Blackwall checks the site's HTTP status every 60 minutes and confirms once it returns a 404 or sinkhole. Typical duration: 2-24 hours.

Where to report phishing websites

Combining reports has the greatest impact: browser warning plus hosting removal.

BlackwallTakedown

Submits the URL to the host and registrar, checks the status hourly, and confirms removal. EU-hosted, GDPR-compliant.

Submit URL

Google Safe Browsing

Shows a warning in Chrome, Firefox, and Safari. The site stays online, but no one stumbles onto it by accident anymore.

safebrowsing.google.com

BSI Bürger-CERT

phishing@bsi.bund.de: Germany's federal cybersecurity agency, for analysis and national warnings. Combining this with Blackwall is recommended.

bsi.bund.de

APWG

reportphishing@apwg.org: an international blocklist feed. Feeds browser and mail filters worldwide.

apwg.org

Frequently asked questions

Report the phishing website now

One report, one takedown workflow. Blackwall handles correspondence with the host for you.

Report a website Received a scam email? →