Report a suspicious domain

Spotted a phishing page, a fake shop or a link spreading malware? Send it to us. Every report is scored against 40+ threat feeds in seconds, then verified by a human analyst, and if it's malicious, we open a takedown case immediately. Free, no account required.

Median takedown < 12h Human-verified before enforcement GDPR-compliant & anonymous
Report abuse

Tell us what looks wrong

Paste the domain or URL and, if you can, a line about what you saw. The more context you give, the faster our analysts can triage it.

Please enter a valid domain, e.g. example.com
We'll email you the case outcome. Never shared.

By submitting you agree to our Terms. We action reports in good faith and verify before enforcement.

Report received

Thank you. Our analysts will verify this submission, usually within a few hours. If it's malicious, we'll open a takedown case immediately.

Case ID:
The process

What happens next

Every submission runs the same pipeline our SOC uses on live threats, from the moment you hit submit to the takedown notice.

Submit

Paste the domain or URL, no account, no signup. Optional context helps us triage faster.

Verify

Automated scoring across 40+ threat feeds, then a human analyst confirms the verdict, usually within hours.

Takedown

Abuse notices go to the registrar, host, CDN and relevant CERTs, escalated by analysts until it's offline.

You're notified

Leave an email and we send the case ID and outcome. Median confirmed takedown is under 12 hours.

Instant check

Prefer a one-click scan first?

Run a domain through our engine right now. It resolves DNS and WHOIS, cross-references 40+ threat feeds and inspects the TLS certificate and page content in seconds. Anything flagged is queued to our takedown team automatically, no form to fill in.

  • Real-time verdictLive scoring across DNS, certificate transparency and impersonation signals.
  • Auto-queued for reviewSuspicious results go straight to an analyst. You don't have to do anything else.
  • Kept under watchClean domains are logged to continuous monitoring for 90 days.
https://
Please enter a valid domain, e.g. example.com

Free instant check. Flagged domains are queued to our takedown team automatically.

Questions, answered

Before you report

A few things people ask most often. If you're still unsure, submit anyway, verifying is exactly what our analysts do.

What can I report?

Any domain or URL you believe is malicious, phishing and fake login pages, scam or fraudulent shops, investment and crypto fraud, brand impersonation and lookalike domains, and links that serve malware or command-and-control infrastructure. If you're not certain, report it anyway.

Is it anonymous?

Yes. No account is required and your email is optional. If you leave one, we use it solely to send you the case outcome, never to share or sell. Submissions are encrypted in transit and handled under GDPR.

How long does it take?

Automated scoring runs in seconds and an analyst usually verifies within a few hours. Once a domain is confirmed malicious, our median time to a confirmed takedown is under 12 hours.

What if I'm wrong?

No problem at all. We welcome good-faith reports and verify every submission before any enforcement, so a mistaken report never harms a legitimate site. There's no penalty for a false alarm. Reporting costs you nothing.

Reporting to CyberShield is safe and free

GDPR compliant Good-faith verification No account needed 24/7 SOC coverage

Protecting a brand or platform at scale?

If your organization needs continuous monitoring, bulk abuse handling or a managed takedown pipeline, our team can help. Talk to an analyst about protecting your customers before the next attack lands.