A website takedown is the removal of an unlawful website through the lawful channels of its hosting provider, domain registrar, CDN and search engines.
A website takedown removes a site that is itself unlawful — a phishing page, a fake site impersonating a person or brand, a site hosting pirated copies of someone's content, non-consensual intimate imagery, a fraud operation or a clearly defamatory site. It works through the companies that provide the site's infrastructure, each under its own terms and legal obligations: the hosting provider can remove the content or close the account, the domain registrar can suspend the domain, a CDN or reverse proxy can stop serving the site and identify the real host, and search engines can de-index its pages.
It is not a way to silence lawful sites, competitors, critics or journalists, and it never involves technical disruption such as hacking, attacks or overloading a server. Every step is a documented notice — an abuse report, a DMCA notice, an EU Digital Services Act notice or a legal complaint — that the provider reviews and decides on under its own policy.
In practice
The first job is finding out who actually hosts the site: a CDN often hides the real hosting provider, and the registrar is listed in the domain's registration (RDAP/WHOIS) data. Each provider needs evidence that fits its own policy, such as screenshots and URLs of a phishing form, or a copyright notice listing each pirated file. If one provider does not act, the next one — registrar, then search engines — can still limit the harm. Country-code domains follow their national registry's rules rather than ICANN contracts.
Source: ICANN Registrar Accreditation Agreement §3.18 ↗
Related removals
- Website takedown — $3,000 per site, pay on success
- Brand protection — Custom engagement, pay on success
- DMCA takedown — Quoted by scope, pay on success
Related terms
- Abuse report — An abuse report is a complaint to a hosting provider, domain registrar, CDN or email provider that its service is being used for phishing, fraud, malware or other illegal activity.
- Phishing — Phishing is a fraud in which attackers impersonate a trusted brand or person, by email, text or a fake website, to trick people into handing over passwords, payment details or money.
- Impersonation — Online impersonation is pretending to be a real person or organisation — through a fake profile, website, email or ad — in a way that misleads people about who is behind it.
- DMCA takedown — A DMCA takedown is a notice under US copyright law asking a host, platform or search engine to remove material that infringes a copyright you own or are authorised to enforce.
- SERP de-indexing — SERP de-indexing is the removal of a specific URL from search engine results pages, so it stops appearing in searches even though the page itself may still exist.