A phishing site is impersonating your business

A fake login or payment page using your name is stealing from your customers right now. Takedowns work best when you hit every lever at once: the host, the registrar, the browsers and the authorities.

Difficulty
medium
Time
about 30 minutes
Last reviewed
2026-10-26

Is this urgent?

Now.

Easy fix, no technical skills

  1. Do not visit the site from a work computer. Take a screenshot from the alert's evidence instead.

  2. Report it to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish), to Netcraft (report.netcraft.com) and to your national reporting service.

  3. Email the hosting provider's and the registrar's abuse addresses (the takedown helper fills them in from RDAP).

  4. Post a short notice on your website and social accounts: the only real address is yours, and you never ask for passwords by email.

  5. If customers may have entered card details, tell them to contact their bank.

Hand it to your IT person

Copy this into an email or chat. Replace the brackets with the details from your alert.

A phishing site at (url) impersonates example.com, hosted at (host IP, provider) under registrar (registrar). Please file abuse reports with evidence to (abuse addresses), report to Safe Browsing and Netcraft, and monitor for related domains.
Technical fix (commands)

  1. Find the host and registrar abuse contacts.

    dig +short A phishing-example.com
curl -s https://rdap.org/ip/IP_ADDRESS | jq '.entities[] | select(.roles[]=="abuse") | .vcardArray'
curl -s https://rdap.org/domain/phishing-example.com | jq '.entities[] | select(.roles[]=="abuse") | .vcardArray'

Check it worked

  • The site no longer resolves or shows a browser warning; Brand Guard resolves the alert.

Check for lookalike domains with the free tool. All free tools.

Prevent it next time

  • Brand Guard watches certificate logs and phishing feeds daily.
  • DMARC at reject.

Common questions

Is this urgent?

Now.

Can I fix this without technical skills?

Yes. The easy fix below needs no technical skills; the commands are only for your IT person.

How long does it take?

About 30 minutes once you know who runs the website.

Hear about this before your customers do

Add your website and we check uptime, certificates, domains and email security for you, free.

Add my websiteScan it first