Website takedown service for phishing, scam and pirate sites
Our website takedown service removes sites that are themselves unlawful: phishing pages, fake sites impersonating your brand, pirated copies of your content, non-consensual imagery, fraud and clearly defamatory sites. Every takedown goes through the site's host, registrar, CDN, the search engines or a formal legal notice. From $3,000 per site, quoted after assessment, and you pay only when it's removed.
Phishing pages that copy your login, checkout or payment screens
Fake websites impersonating your business, brand or staff to deceive customers
Sites built from pirated copies of your content, courses, software or streams
Sites publishing intimate images of you without your consent
Fraud and scam sites taking money in your name, including fake shops and investment schemes
Sites that exist to spread clearly defamatory claims about you or your business
Lookalike domains registered to deceive, such as typosquats of your brand
We won’t remove
Lawful websites of any kind, including competitors, however much they hurt your business
Critics, review sites, forums and journalism, including harsh but lawful criticism of you
Technical disruption of any kind: no attacks, no hacking, no traffic floods. Only providers and legal notices.
Sites with no clear legal ground. If one would need a court order, we tell you up front.
How it works
How we get it removed
01
Assess the site and its legal ground
Send us the address. Our website takedown service starts by confirming the site is unlawful, not just unwelcome, and naming the ground: phishing, impersonation, copyright, intimate imagery, fraud or defamation. If there isn't one, we decline the case and tell you why.
02
Map the providers behind it
We identify the host, the CDN in front of it, the domain registrar and any payment or ad partners, using public records such as WHOIS and IP data. Many unlawful sites sit behind a CDN, which can disclose the real host.
03
File with each provider
Each provider gets a report under its own abuse policy or the law that binds it: abuse reports for phishing and fraud, DMCA notices for piracy, DSA notices for EU providers, and legal notices for defamation. Phishing pages also go to the browser safety lists that warn visitors.
04
Remove it from search
While the takedown proceeds, we ask Google and Bing to remove the site's pages from their results under their policies, so fewer people find it. If the site moves to a new host or domain, the same evidence supports fresh reports.
05
Pay on takedown
The price is tier-based on where the site is hosted and which laws apply, from $3,000 per site, confirmed after assessment. You pay only when it's removed. If we can't remove it, you don't pay — any deposit is refunded in full.
Legal grounds
The routes we file under
Host & registrar abuse
Infrastructure abuse policies
Hosting providers, CDNs and domain registrars enforce abuse policies covering phishing, fraud, malware and illegal content; ICANN-accredited registrars must investigate abuse reports they receive.
US hosts and platforms keep their safe harbour only if they expeditiously remove material identified in a valid notice from the copyright owner or an authorised agent.
Hosting services operating in the EU must offer a way to report illegal content, process each notice diligently and explain their decision — including when they refuse.
Google removes certain results from Search on request: doxxing content and personal contact details, non-consensual intimate imagery, results from sites with exploitative removal practices, and content subject to valid legal requests.
False statements of fact that damage a reputation can be removed on legal notice, and in some cases by court order. If a case needs a court order, we tell you up front.
Some hosts reply that they only rent out servers, and some don't reply at all. That is where escalation starts. ICANN-accredited registrars must investigate abuse reports, and they can suspend a domain used for phishing or fraud. A CDN can stop serving the site and identify the host behind it. The network the host rents capacity from has its own abuse policy. EU hosts must decide on DSA notices and explain a refusal with a statement of reasons, which we can challenge. Browser safety lists and search engines can cut off the site's visitors while the rest proceeds. If a case truly needs a court order, we tell you up front.
What we take down, and what we never will
A website takedown service can be misused, so here is our line. We act only against sites that are themselves unlawful: they steal credentials, impersonate a real business to deceive people, distribute your content without permission, publish intimate images without consent, defraud people, or exist to spread clearly defamatory claims. The test is the law and each provider's own rules, not whether a site is inconvenient for you.
We do not take down lawful websites. That includes competitors, critics, review sites, activists and journalists, even when what they publish is harsh. We never use technical disruption of any kind: no attacks, no hacking, no overloading servers. Every removal goes through the host, the registrar, the CDN, the search engines or a formal legal notice, and every action is documented with its legal basis.
How an unlawful site actually comes down
A website depends on several companies at once. Each can act against abuse on its own part of the chain, and each has different rules.
Phishing and fraud sites tend to come down fastest, because hosts and registrars treat them as clear-cut abuse. Defamation is slower: providers want a clear legal basis, and some will act only on a court order. If the domain name itself copies your trademark, a domain dispute under the UDRP can transfer it to you; that is a legal proceeding, and we tell you if you need counsel for it.
Host: stores the site and can suspend the account for phishing, fraud, piracy or other illegal content
Registrar: controls the domain and can suspend it for abuse such as phishing, fraud or malware
CDN: sits in front of many sites, forwards complaints and can disclose the real host
Search engines and browsers: delist pages and show phishing warnings, cutting off visitors
Legal notices: DMCA for copyright, DSA for EU-hosted content, defamation notices for false claims
What to do right now, before you contact us
If a site is taking money or passwords from people right now, use the free routes at once. They help immediately, and everything you save becomes evidence for the takedown.
Save evidence: dated screenshots, the full URL, and any emails, ads or messages that point to the site
Report phishing pages to Google Safe Browsing, and warn your customers through your own channels
If you or your customers lost money, contact the bank and report it to the police or your national fraud reporting service
If the site shows intimate images of you, StopNCII.org can help block copies on participating platforms for free
Through the companies that run its infrastructure. A WHOIS lookup and an IP check reveal most of the host, CDN and registrar, and each one can be reported under its abuse policy or the relevant law, with evidence. It only works if the site is unlawful, and it is slow when providers don't respond, which is where escalation matters.
Will you remove a competitor's website?
No. A competitor's lawful website is not something we will touch, whatever it says about its prices or yours. If a competitor copies your content, the copied pages can be removed with a DMCA notice, and false statements of fact about you can be addressed with a defamation notice. The rest of the site stays up.
How long does a website takedown take?
It depends on the provider and the legal ground. Hosts and registrars tend to act quickly on clear phishing and fraud; piracy and defamation cases take longer, especially with offshore hosts. You get an estimate after assessment, together with the tier price.
How much does a website takedown service cost?
From $3,000 per site with Nullify. The tier depends on where the site is hosted and which jurisdictions are involved, because an offshore host with no working abuse desk takes more work than a mainstream provider. You get the price after assessment, and you pay only when it's removed.
What if the site comes back on a new domain or host?
It can happen. A takedown removes the site from that host or registrar, and some operators move. The same evidence usually supports quick reports to the new providers, and search delisting makes the new copy harder to find. We tell you at assessment how a reappearance would be handled.
Is it legal to report a website to its host?
Yes. Reporting abuse to a host, registrar or CDN is how the system is meant to work, and providers publish abuse contacts for exactly that reason. What is not legal is attacking or disrupting a site yourself, and we never do it, whatever the site has done.