Takedown & Escalation Workflows

The problem

Knowing a domain is abusive is only the first step. You must identify the right contact, submit clear evidence, and sometimes escalate. Without workflows, response is ad hoc and slow.

• Phishing domains that need urgent registrar takedown
• Impersonation where registry or host must be contacted
• Cross-border abuse that may need law enforcement
• High volume where you need status and audit trails

How it works

1. 1

   Select domain and get package

   From the dashboard you choose a threat and request a takedown package. We assemble evidence and suggest the right recipient.

2. 2

   Draft and customize notice

   We provide templates and draft language. You customize for your brand and jurisdiction. Enterprise can use approval workflows.

3. 3

   Submit and track

   You submit (or we assist on some plans). Each case is tracked so you can see status and follow up.

4. 4

   Escalate when needed

   If the first recipient does not act, we help you identify the next step (registry, host, or law enforcement) and prepare evidence.

Frequently asked questions

• Who sends the takedown request?

  Usually your team sends it using our evidence and templates. On some Enterprise plans we can assist or manage submission; this is defined in your agreement.

• How long do takedowns take?

  It depends on the registrar or host. Many respond within days when evidence is clear. We track status and help you follow up when they do not.

• Do you work with law enforcement?

  We help you prepare evidence and narratives for law enforcement. We do not submit reports on your behalf.

• Can we require approval before sending?

  Yes. Enterprise plans support approval workflows so notices are reviewed internally before submission.

• What if the domain is in another country?

  We identify the responsible registrar and registry. You may need local counsel or authorities for some cases; we can tailor evidence and guidance for cross-border escalation.