How to report a phishing site to Netlify

How to reach them

Netlify owns the parent domain of these addresses, so it can remove a page on any of them directly:

• *.netlify.app

• Include the site URL and why you are reporting it

Reporting to Netlify, step by step

1. Go to https://www.netlify.com/support/ and scroll to 'Contact the Support team'.
2. Under 'What kind of help do you need?' choose 'Report abuse or phishing'.
3. In 'Abusive URL' paste the full address of the scam page, for example the netlify.app link. Set 'Type of abuse' to phishing, or malware if the page pushes a download.
4. Describe the scam in 'Report details' and submit.
5. The form's email box is labelled 'The email associated with your Netlify account'. If you have no Netlify account, email [email protected] instead. Netlify's Terms of Use say misuse of its services or website can be reported to that address.

What Netlify asks you to include

• Netlify's abuse form requires the abusive URL, a type of abuse (phishing, malware, piracy, csam, spam or other) and report details.
• Netlify's hint for the details box asks you to say what is happening, who is affected, the dates, and anything else that helps it act quickly.
• Netlify says it will ask you to attach a screenshot when it follows up, so capture the page before it changes.
• The 'Abuse' link in Netlify's site footer opens an email to [email protected] that asks you to include the site URL and the reason for your report.

What Netlify can do

• Netlify's Terms of Use say a breach of its terms can lead to termination of the account and removal of the website project without notice.
• Netlify's Terms also say it can terminate an account immediately if Netlify deems this necessary, instead of waiting out the usual grace period.

What Netlify cannot do

• Netlify acts on projects hosted on Netlify. If a netlify.app page only forwards visitors to a scam hosted somewhere else, Netlify can stop the forwarding page, but the destination site needs a separate report to its own host.

What happens after you report

• Netlify says it will follow up on an abuse report and ask for a screenshot at that point.
• Netlify's Terms of Use say that when banned content is posted, the account holder is sent a notice at their email on file and is normally given 48 hours to correct it, though Netlify may terminate at once.
• The prefilled abuse email says Netlify will 'reply promptly'. Netlify does not give a number of hours or days.

Write the report

Paste the link, phone number or email address and we'll write the message for Netlify. You send it yourself.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.