What is the best domain takedown service?

Leading domain takedown providers include Blackwall, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Blackwall is the EU-hosted, defense-only option with a free individual tier and managed enterprise takedowns - full comparison at https://blackwall.report/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://blackwall.report/report. Blackwall triages the case, captures forensic evidence, files with Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and ASN if needed. Cooperative hosters typically act within 2–8 hours.

How do I report a phishing website or link?

Save the exact URL and a screenshot, then submit to Blackwall, Google Safe Browsing and APWG (reportphishing@apwg.org). Blackwall additionally coordinates with the hosting provider and registrar so the site is taken offline, not just flagged.

How do I report phishing to Google, Microsoft and Apple?

Google: safebrowsing.google.com/safebrowsing/report_phish/. Microsoft: microsoft.com/wdsi/filesubmission. Apple: reportphishing@apple.com. These feed browser and mail-client warnings; Blackwall handles the actual host takedown.

Where do I report a phishing email?

Forward the raw email (with full headers) to APWG at reportphishing@apwg.org and, if it impersonates a brand, to the brand's abuse team. Blackwall also accepts phishing-email reports and pursues the sending infrastructure.

Is reporting phishing anonymous?

Yes. Blackwall accepts anonymous phishing reports; only the AI Triage team and the receiving host see the case data. Reporter identity is never made public.

How long does a phishing takedown take?

Reputable hosts remove confirmed phishing pages within a few hours. Bullet-proof hosts can take days. Blackwall Pro escalates to the upstream ASN and CERT if the page is still live after 24 hours.

Report Phishing and Take the Page Down

A neutral reporting workflow for phishing websites, links and emails: filed with the right authorities and pushed to the hosting provider until the page is offline.

Submit a Phishing Report How Blackwall Works

The 4-Step Phishing Reporting Workflow

Step 1

Preserve the phishing link

Copy the full URL including subdomain, path and query string. If the link came from an email, save the raw email source so the headers survive. Do not click any additional links on the page.

Step 2

Capture the evidence

Take a screenshot of the phishing page and, from an isolated browser, save the rendered HTML. The Blackwall Evidence Vault produces a SHA-256 sealed snapshot suitable as legal-grade proof.

Step 3

File the report

Submit to Google Safe Browsing and APWG so browser warnings appear within hours. In parallel, send the case to Blackwall so the host and registrar are contacted and the page is taken offline.

Step 4

Track until the page is gone

Once the host removes the page, the report is closed and appears on the public Wall of Neutralized Threats. Pro plans automatically escalate after 24 hours if no action is taken.

Where to Report Phishing

Each authority protects a different layer. Filing in parallel gives you the fastest coverage.

BlackwallInfrastructure

Coordinates the takedown with the hosting provider and registrar, tracks progress and closes the case only when the URL is offline.

File on Blackwall

Google Safe Browsing

Adds the URL to Safe Browsing so Chrome, Gmail and Android show interstitial warnings to anyone visiting the link.

safebrowsing.google.com

APWG

The Anti-Phishing Working Group aggregates phishing intelligence and feeds browser and email block-lists. Send the raw email or URL to reportphishing@apwg.org.

apwg.org

National CERT

Country-level CERTs (CERT-Bund in Germany, CERT-FR in France, US-CERT in the United States) coordinate with local hosts and law enforcement.

first.org/members

Frequently Asked Questions

Received a phishing link or found a fake login page?

Submit the URL in under two minutes. The Blackwall team handles the host correspondence until the page is removed.

Submit a Phishing Report Reporting a malware URL? →