Registrar, host or Cloudflare?
- Registrar: can suspend the domain itself, which takes the site down wherever it is hosted.
- Hosting provider: can remove the content from its servers. Use the IP owner’s abuse address.
- Cloudflare: if the site sits behind Cloudflare, report it at abuse.cloudflare.com. Cloudflare passes the report to the real host and can show a phishing warning in front of the site.
Send to all that apply, and submit the URL to Google Safe Browsing so browsers warn visitors while providers act. Our guide to reporting a scam website lists every channel.
Want this watched for you, every day?
We monitor new lookalike domains, verify them by hand and take down the ones that turn into phishing sites.