How do I get a look-alike website taken down?
Report it to the company hosting the website as well as to the registrar.
Last read from the sources at the foot of this page.
Who can take a website down?
Complaints about phishing are outside of ICANN's scope and authority. For these types of complaints, please refer to one of the options listed below: You may want to contact a law enforcement agency in your jurisdiction.
A look-alike has two parts: the domain name, held at a registrar, and the website, held by a hosting company. Each can act on its own part.
ICANN says complaints about phishing are outside its scope and authority, and lists the web hosting provider and the registrar of the phishing domain among the places to report it.
How do I find the host?
You may want to contact the phishing domain name's web hosting provider. You may want to contact the registrar of the phishing domain name.
- Look up the address the look-alike, for example yourfirm-pay.example, points to, and the network that owns that address.
- Find that company's abuse contact or abuse form on its website.
- If the site sits behind a service that hides the host, report to that service; it can pass the report on or act itself.
What should the report say?
- Say that the site copies your firm to deceive your clients, and give your own address beside it.
- Attach screenshots with the date, and any emails that sent people to the site.
- Report the same evidence to the registrar so both parts are covered.
Where does this come from?
- ICANN: About phishingicann.orgRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/