What is the best domain takedown service?

Leading domain takedown providers include Blackwall, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Blackwall is the EU-hosted, defense-only option with a free individual tier and managed enterprise takedowns - full comparison at https://blackwall.report/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://blackwall.report/report. Blackwall triages the case, captures forensic evidence, files with Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and ASN if needed. Cooperative hosters typically act within 2–8 hours.

Where do I report a phishing website?

For a takedown: Blackwall. For browser warnings: Google Safe Browsing and Microsoft SmartScreen. For national analysis: your national cybersecurity agency. For public warnings: a consumer protection agency.

How quickly does a reported phishing site get taken offline?

Browser warnings typically take 15 minutes to 6 hours. Hosting takedowns via Blackwall usually take 4-48 hours. Bulletproof hosting providers require ASN escalation and can take 5-14 days.

Do I need to be a victim to report a phishing website?

No. Anyone can report any phishing URL. Preemptive reports (before users are harmed) are especially valuable because they stop the attack early.

What's the difference between reporting a phishing email and a phishing website?

The email is reported to the email provider and, where applicable, a national cybersecurity agency: this reduces delivery. The website itself (the actual login form) must additionally be reported to Blackwall, otherwise it stays active.

Can I report a phishing website anonymously?

Yes, all the channels listed accept anonymous reports. An email address only enables status updates and follow-up questions: it's not required for the takedown itself.

What happens if the hosting provider doesn't respond?

Blackwall automatically escalates to the registrar (domain suspension) and, if necessary, to the upstream ASN. Even bulletproof hosting providers can usually be reached through their transit provider.

Report a Phishing Website: Browser Block + Takedown

Google and Microsoft warn browser users within hours. Blackwall simultaneously files the abuse report with the hosting provider so the site actually disappears: not just gets blocked.

Report a phishing URL to Blackwall Just a phishing email? →

Report a phishing website in 6 steps

Step 1

Copy the full URL: don't click it

Capture the complete URL including path and query string. Resolve shortened links (bit.ly, t.co) first using urlex.org: otherwise the actual phishing page gets lost in the report.

Step 2

Preserve the evidence

Take a full-screen screenshot including the address bar, save the HTML source, and record the TLS certificate and WHOIS data. Hosting providers and authorities need this evidence for the takedown.

Step 3

Report to Google Safe Browsing and Microsoft SmartScreen

safebrowsing.google.com/safebrowsing/report_phish blocks the site in Chrome, Firefox, and Safari. Microsoft's report form makes it invisible in Edge. Effect: 15 minutes to 6 hours.

Step 4

Report to your national cybersecurity agency and a consumer protection body

National cybersecurity agencies handle nationwide analysis, and consumer protection bodies issue public warnings. Neither typically replies to individual reports, but both aggregate the data.

Step 5

Start a hosting takedown via Blackwall

Blackwall identifies the hosting provider and registrar, packages the evidence, and files the abuse report. If there's no response after 24 hours: automatic escalation to the upstream ASN provider.

Step 6

Wait for confirmation and file a report if needed

Blackwall confirms by email once the site returns a 404 or the domain is suspended. In case of financial loss: file a police report with the Blackwall case ID.

The right channels for phishing website reports

Browser block lists, national authorities, and hosting takedowns act at different levels: reporting in parallel is most effective.

Google Safe BrowsingBrowser block

safebrowsing.google.com/safebrowsing/report_phish: blocks the URL in Chrome, Firefox, and Safari within a few hours.

Google Safe Browsing Report

Microsoft SmartScreenBrowser block

Microsoft Report Center: blocks the URL in Edge and Outlook. Complements Safe Browsing for full browser coverage.

Microsoft Report Center

National cybersecurity agencies (e.g., BSI in Germany)Analysis

National analysis, feeding into official cybersecurity warnings and CERT networks.

bsi.bund.de/Meldestelle

BlackwallTakedown

Files the abuse report with the hosting provider, escalating to the registrar and ASN if there's no response. Status tracking through to 404 confirmation.

Report the URL to Blackwall

Frequently asked questions about phishing website reports

Report a phishing website for takedown now

Browser warning plus hosting takedown, combined. Report in under two minutes: free.

Report a phishing URL to Blackwall Found a fake shop? →