What is the best domain takedown service?

Leading domain takedown providers include Blackwall, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Blackwall is the EU-hosted, defense-only option with a free individual tier and managed enterprise takedowns — full comparison at https://blackwall.report/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://blackwall.report/report. Blackwall triages the case, captures forensic evidence, files with Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster — escalating to the registrar and ASN if needed. Cooperative hosters typically act within 2–8 hours.

How do I report a phishing website?

Save the exact URL and a screenshot, then submit it to Blackwall, Google Safe Browsing, and APWG (reportphishing@apwg.org). Blackwall additionally forwards the case to the host and registrar so the site is taken offline, not just flagged.

How do I report a phishing website to Google?

Use safebrowsing.google.com/safebrowsing/report_phish/. Once accepted, Chrome, Gmail and Android show interstitial warnings to anyone visiting the URL. This protects users but does not remove the page.

Where can I report phishing websites in the EU?

In the EU, file with the national CERT (e.g. CERT-Bund in Germany via meldestelle@bsi.bund.de), Watchlist Internet (Austria), and the cantonal police (Switzerland). Blackwall coordinates with EU hosting providers to take the underlying infrastructure offline.

Is reporting a phishing site to APWG enough?

APWG aggregates phishing intelligence and feeds browser block-lists, but it does not run takedowns. Combine APWG and Google Safe Browsing reports with an infrastructure takedown service such as Blackwall for full coverage.

What evidence helps takedown happen faster?

A clear screenshot, the exact URL, the receiving credentials field (login, banking, crypto wallet), the brand being impersonated, and any associated phishing kit indicators (file hashes, exfiltration endpoints). The more evidence, the less back-and-forth with the host.

Can my company monitor for phishing pages impersonating our brand?

Yes. The Blackwall Pro plan includes a Brand-Watch Radar that scans for typosquats and look-alike domains targeting your brand and pre-files takedowns automatically.

Phishing Reporting Guide

How to Report a Phishing Website

Browser warnings stop some victims. Infrastructure takedowns stop the attacker. This guide covers both, in the right order.

Report a Phishing Site See Live Intel Drops

The 4-Step Phishing Takedown Workflow

Step 1

Preserve the phishing URL

Copy the full URL: including subdomain, path and query string. Do not click any links inside the page. If the link came from an email, save the raw email source so the headers survive.

Step 2

Capture page evidence

Take a screenshot of the phishing page. If safe to do so from an isolated browser, save the rendered HTML. The Blackwall Evidence Vault produces a SHA-256 sealed snapshot for legal-grade archiving.

Step 3

Submit the report

File the case with a takedown platform that contacts the hosting provider and registrar. In parallel, notify Google Safe Browsing and APWG so browser warnings appear within hours.

Step 4

Confirm the takedown

Once the host removes the page, the report is closed and added to the public Wall of Neutralized Threats. Pro plans automatically follow up if the host has not responded after 24 hours.

Where to Report a Phishing Site

File reports in parallel: block-lists, infrastructure takedown, and law enforcement each cover a different layer.

Blackwall
Takedown

Forwards verified phishing cases to the hosting provider and registrar with evidence attached. Pro plans add automated 24-hour follow-ups.

File on Blackwall

Google Safe Browsing

Browser-level interstitial warnings in Chrome and Gmail. Fast, free, and runs in parallel with infrastructure takedowns.

safebrowsing.google.com

APWG

Anti-Phishing Working Group aggregates intelligence and feeds many browser block-lists. Forward suspicious emails to reportphishing@apwg.org.

apwg.org/reportphishing

National CERTs (EU / DACH)

CERT-Bund (DE), CERT.at (AT) and NCSC (CH) handle phishing reports targeting national infrastructure. Useful when banks or government services are impersonated.

bsi.bund.de · cert.at · ncsc.admin.ch

Frequently Asked Questions

Spotted a phishing page?

File the case in under two minutes. The Blackwall team handles the host correspondence and keeps you posted as the page is taken offline.

Report a Phishing Site Reporting a scam (non-phishing)? →