---
title: "How to Take Down a Phishing Website"
description: "A direct phishing takedown guide: what evidence to collect, who to report first, when to escalate, and where Fraudox fits."
question: "How do you take down a phishing website?"
canonical: "https://fraudox.com/answers/how-to-take-down-a-phishing-website"
keywords: ["how to take down a phishing website", "remove phishing site", "phishing site takedown service", "report phishing website to host"]
publisher: "Fraudox"
publisher_url: "https://fraudox.com"
license: "Free to quote with attribution to the canonical URL."
---

# How do you take down a phishing website?

> To take down a phishing website, preserve the exact URL and screenshots, identify the host, registrar and CDN, file an abuse report with the party that can remove the live content fastest, then escalate to the registrar or CDN if the page stays online.

## Best for

- Credential theft pages copying a login or support portal.
- Fake payment pages using a brand name or lookalike domain.
- Phishing kits hosted behind a CDN or redirect chain.

## Steps

1. Save the exact phishing URL, redirects, timestamp and visible page content before the attacker changes it.
2. Capture screenshots that show the copied brand, phishing form, payment prompt or credential collection flow.
3. Identify the host, registrar, nameservers and CDN or proxy layer from DNS, RDAP and HTTP headers.
4. Report first to the layer that can remove the live content fastest, usually the host or platform when content is reachable.
5. Escalate to the registrar, CDN or upstream provider if the host does not act or the site keeps moving.
6. Verify the removal from a clean browser and keep timestamped proof of the offline or suspended state.

## Evidence to collect

- Exact URL, not only the domain.
- Screenshots of the phishing page and the legitimate page being copied.
- Redirect chain, form endpoint and affected brand or service.
- Proof that you own or represent the copied brand.
- Any victim messages, scam emails or ads that send traffic to the URL.

## Mistakes to avoid

- Reporting only the homepage when the phishing form is on a deeper path.
- Sending emotional summaries without reproducible URLs and screenshots.
- Waiting too long to capture evidence from fast-moving kits.
- Repeating the same rejected report instead of changing route or evidence.

## Where Fraudox fits

Fraudox is a brand protection takedown service. For phishing cases, Fraudox collects the evidence, files with the host, registrar, CDN or platform, escalates stalled reports and confirms when the page is offline.

## Related pages

- [Phishing takedown service](https://fraudox.com/phishing-takedown)
- [How takedowns work](https://fraudox.com/how-it-works)
- [Free domain scan](https://fraudox.com/scan)

*Canonical version: https://fraudox.com/answers/how-to-take-down-a-phishing-website. Part of the [Fraudox direct takedown answers](https://fraudox.com/answers).*

---

Published by Fraudox (https://fraudox.com), a brand protection takedown service that
removes phishing sites, impersonating pages, fake social accounts, counterfeit apps,
scam domains and stolen content, and bills only for confirmed removals.