How to report a phishing site to Netcraft

How to reach them

• Forward phishing emails to [email protected]

Reporting to Netcraft, step by step

1. Paste the URL into the Report a suspicious site form at report.netcraft.com. Netcraft accepts phishing, malware, cryptocurrency scam, support scam, fake shop, web shell and phishing kit URLs.
2. To report a suspicious email, forward it to [email protected]. Netcraft says these are treated the same as web reports, and only the first 1000 URLs in an email are processed.
3. You can add an email address to get results. No account is needed. Netcraft says anonymous reports are not eligible for reporter credit.
4. Netcraft accepts defanged URLs (hxxp:// and [.] in place of dots).

What Netcraft asks you to include

• The URL of the site, or the suspicious email itself.
• Optional further details and your email address.

What happens after you report

• Netcraft says the report is analysed by its classification system.
• Each URL is marked processing, then malicious, no threats found, unavailable or rejected. Unavailable means Netcraft could not fetch the page when you reported it.
• Netcraft says it blocks sites that steal credentials, scam visitors, impersonate known brands, host malware or sell fake goods or medication.
• If Netcraft runs a takedown, the submission shows a takedown status of not started, in progress or resolved, with an incident report link.
• Netcraft emails you the results if you gave an email address. With a free email provider such as Gmail or Yahoo, you may not get result emails until you have made more than one submission.
• Netcraft says its feed is used by many browsers but it does not control what they block or how quickly.
• If you disagree with a classification, you can raise an issue from the submission page. Submissions are archived after 30 days.

Write the report

Paste the link, phone number or email address and we'll write the message for Netcraft. You send it yourself.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.