How to report a phishing site to Squarespace Domains

How to reach them

Squarespace took over Google Domains registrations in 2023, so a domain that used to be on Google Domains is now a Squarespace Domains registration.

• Check first that Squarespace is the registrar (ICANN lookup)
• Give the URL and screenshots

Reporting to Squarespace Domains, step by step

1. Confirm the registrar with ICANN's lookup tool or the ACID tool, both of which Squarespace recommends for finding a domain's provider.
2. Open Squarespace's "Report phishing or pharming" form (support.squarespace.com, ticket_form_id=23532118441357). Squarespace says it is for concerns about domain names registered with Squarespace.
3. Fill in your email address and the offending domain names in the format http(s)://example.com. The form also has optional boxes for the sender's email address, the email headers, the email body and the company being impersonated.
4. Attach a screenshot of the scam page and tick the visual evidence acknowledgement before sending.
5. You can also phone (646) 693-5324. Squarespace's ICANN Policy page gives that number, alongside the web forms, for reporting illegal activity such as phishing.
6. For malware or spam from a Squarespace domain, use the separate malware or spam forms linked from the same help article.

What Squarespace Domains asks you to include

• Every scam domain, written as a full address such as https://example.com.
• A screenshot of the abusive page. The form says that without visual evidence of the fraud, Squarespace will be unable to take action.
• If the scam reached you by email: the sender's address, the full headers and the message text.
• The name of the company or organisation the domain pretends to be.

What Squarespace Domains can do

• Squarespace's Domain Registration Agreement treats phishing, pharming, malware and fraudulent or deceptive practices as a material breach, and says the remedies include suspending or cancelling the registration.
• The same agreement lets Squarespace deny, cancel, redirect or transfer a registration, or place it on lock, hold or similar status, including where it finds a likelihood of fraud, deception or impersonation based on things like third-party complaints.
• Squarespace has a separate form for reporting inaccurate Whois contact details on its domains.

What Squarespace Domains cannot do

• Squarespace's report forms say that where Squarespace is only the registrar and not the web host, it does not control the content and the content does not sit on its servers; you then need the site owner or the hosting provider.
• Squarespace redacts registrants' personal contact details from public lookups. Requests for that data go through a separate form, are decided at Squarespace's sole discretion and are answered within 30 days of acknowledgement, absent exceptional circumstances.
• Squarespace says it cannot give account or site information to law enforcement without a subpoena, court order or warrant.
• For a domain name that infringes a trademark, Squarespace follows ICANN's UDRP rather than deciding the dispute itself.

What happens after you report

• Squarespace's ICANN Policy page says domain abuse reports are reviewed and handled according to the nature of the abuse, and each report gets a unique identifier.
• It says records of well-founded reports are kept for two years and may be given to ICANN on reasonable notice.
• Squarespace says well-founded reports from law enforcement, consumer protection and similar authorities get a prompt response, and that it may act under the Domain Registration Agreement.

Write the report

Paste the link, phone number or email address and we'll write the message for Squarespace Domains. You send it yourself.

Is the site also hosted on Squarespace?

This page is about the domain name. If the scam pages sit on Squarespace's servers (an IP lookup shows it), the hosting route is the one that can take the content down. Report to both when the same company does both jobs.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.