Flagged isn’t gone. We make it gone.
A fake version of your site is stealing your customers. We take it down — guaranteed.
Report the phishing URL and a senior analyst takes your case — not a ticket queue.
Flat $499 USD — no demo, no sales call, no subscription. Backed by our 48-hour money-back SLA*.
- OSCE/OSCP-certified analysts
- Flat $499, pay once
- Money-back SLA
- Live status dashboard
The 48-hour money-back SLA is explained in full in The guarantee below and in the Terms.
What is a phishing takedown, and how long does it take?
A phishing takedown gets a fake copy of your website off the internet, or out of your customers' reach. A senior analyst captures the evidence, finds who really hosts and registers the site, and reports it to every party that can act: the host, the registrar, the registry, the CDN and the major browsers' safe-browsing services. The site counts as neutralized when it is no longer reachable as a live phishing page. That means the content is removed at the host, the domain is suspended at the registrar, or browsers block it behind a security warning. We always tell you which. Your customers are typically protected within hours, once safe-browsing providers action the report. Full neutralization is guaranteed within 48 hours of analyst approval, or you get a full refund. It is a flat $499 USD per incident, anywhere in the world, with no subscription.
Every hour it stays live, it's working.
A phishing page that copies your brand harvests your customers' credentials, drains their trust in you, and leaves you with the chargebacks, support load, and regulatory exposure. Speed of response is everything — and most “solutions” want you to sit through a sales demo first.
From reported URL to neutralized — in four steps.
- 01
Submit the URL
Paste the phishing link and a few details. Sixty seconds, no account needed.
- 02
We investigate and report
A senior analyst builds the evidence case and reports it to every party that can act — the host, the domain registrar and registry, the CDN, and the major browser safe-browsing providers — and notifies regional law enforcement and cybercrime reporting centres.
- 03
Track it live
Watch progress in real time on your private dashboard, from first report to confirmed result.
- 04
Neutralized — plus a 7-day watch
We confirm the site is no longer reachable as a live phishing page, send you an evidence report, and keep watching it for 7 days. If it comes back, we go again at no extra cost.
Who gets the report, and what can each of them do?
A phishing site depends on several companies at once, and each one can switch off a different part of it. Reporting to only one of them is why so many takedowns stall. We report to every party that can act, in the form that party acts on, and follow up until one of them does.
| Who | What they can do |
|---|---|
| The hosting provider | Remove the phishing pages from its servers. |
| The domain registrar | Suspend the domain, so the address stops working wherever it points. |
| The registry | Suspend the domain at the top-level domain when the registrar doesn't act. See domain takedown. |
| The CDN in front of it | Stop serving the site through its network. |
| Browser safe-browsing services | Show a security warning instead of the page in major browsers, usually within hours. |
| Law enforcement and cybercrime reporting centres | Receive the report for their records and investigations. |
Watch your case move, in real time.
We tell you the truth about what a takedown is.
A takedown doesn't destroy the attacker's files — they can rebuild. What we guarantee is that the reported site is no longer reachable as a live phishing page by your customers, achieved by removing the content at the host, suspending the domain at the registrar, or getting it blocked behind a security warning in major browsers. We always push for the most durable result — full domain suspension — and we show you exactly which was achieved. No vague “case closed.”
Report the phishing URL.
Sixty seconds. A senior analyst takes your case — not a ticket queue. Flat $499 USD — you only pay after you submit, and it's fully refunded under our 48-hour money-back SLA.
Neutralized within 48 hours from analyst approval — or your money back.
If we can't neutralize the reported phishing site within 48 hours from analyst approval, you pay nothing — full refund. The clock starts the moment we approve and begin your case. Some abuse-resistant hosts are outside any provider's control; if your case is one of those, we tell you before you pay. Full SLA terms are in the Terms.
A flat fee and a guarantee — not a sales cycle.
| Feature | Core Sentinel | Enterprise platforms | Do it yourself |
|---|---|---|---|
| Price | Flat $499, pay per incident | “Request a quote” $5k–$250k+/yr | Free, slow, uncertain |
| To get started | Minutes, self-serve | Sales demo + procurement | Your nights and weekends |
| Guarantee | Full refund if not neutralized within 48 hours from analyst approval — our 48-hour money-back SLA | None | None |
| Who handles it | A senior OSCE/OSCP analyst | A shared ticket queue | You |
| Commitment | One incident, no lock-in | Annual subscription | — |
Run by a senior operator, not a ticket queue.
Core Sentinel was founded in 2016 by Steve McLaughlin, an OSCE/OSCP-certified penetration tester — who has also completed CREST certification — with 20+ years across banking, finance, insurance, health, utilities, oil & gas, government and defence. Every case is handled personally and evidenced properly — the same standard that makes hosts and registrars act fast. We protect brands across fintech, e-commerce, SaaS, and professional services.
- Fintech
- E-commerce
- SaaS
- Professional services
Flat fee. Pay once, per incident.
- Full takedown process — we verify the site, build the evidence case, and submit abuse reports to registrars, hosts, and anti-phishing bodies until it’s removed.
- Live status dashboard — track your case in real time, from first report to confirmed removal.
- Evidence report — a screenshot and tamper-evident integrity proof of the takedown.
- 7-day post-neutralization watch — after removal we keep checking for 7 days; if the page returns, we take it down again at no extra charge.
- Full-refund SLA — neutralized within 48 hours from analyst approval, or your money back.
Everything in Single Takedown, plus 30 days of active protection after removal:
- Resurrection monitoring — after removal we keep checking; if the same phishing page returns we take it down again, no new charge within your 30-day window.
- New-clone detection — within your 30-day Sentinel Watch window we watch for new sites impersonating your brand (look-alike domains, your brand surfacing in live phishing feeds); a new impersonation means you’re alerted and we act on it at no extra charge.
- Threat-intelligence monitoring — throughout your Sentinel Watch window your brand is matched against multiple live phishing and abuse feeds and new-domain and certificate streams, so a fresh impersonation surfaces and you’re alerted.
- Periodic liveness + integrity re-checks — ongoing verification it stays down, with a tamper-evident evidence trail.
- Alerts + evidence — you’re notified of any re-appearance and the action taken, with the evidence.
- Priority re-takedown — any resurrection within your 30-day window is handled at no extra charge.
Sentinel Watch is arranged with an analyst — self-serve checkout covers the single takedown today.
Talk to us about Sentinel WatchNo subscription. No hidden fees. Pay once, per incident.
Straight answers.
What counts as “taken down”?
Reachability. The reported site is no longer reachable as a live phishing page — the content is removed at the host, the domain is suspended at the registrar, or it's blocked behind a security warning in major browsers. We always show you which result was achieved.
How fast is it?
Usually within hours for your customers. Once safe-browsing providers action our report, major browsers show a warning instead of the fake page. Removing the site itself depends on the host and the registrar, and full neutralization is guaranteed within 48 hours from analyst approval, or you get a full refund.
What if it's not down within 48 hours?
You get a full refund. The clock runs for 48 hours from analyst approval and starts when we approve and begin your case. The full terms are in the guarantee section above.
Do you handle any country or TLD?
Yes. We work globally, with any host, registrar and top-level domain. A small number of abuse-resistant hosts ignore every report, from anyone. If your case sits on one of those, we tell you before you pay, so you never pay for a takedown we can't deliver.
Do I need a subscription?
No. You pay once, per incident: a flat $499 USD. If you want the site watched after it comes down, Takedown + 30 Day Sentinel Watch is $799 USD and takes the same page down again at no charge if it returns within 30 days.
Is my information confidential?
Yes. The details you provide are used only to action the takedown.
What happens if the site comes back?
We keep watching it for 7 days after it is neutralized, and if it comes back in that time we take it down again at no extra cost. If you want it watched for 30 days, Sentinel Watch is arranged with an analyst.
How much does a phishing takedown cost?
A flat $499 USD per incident, with no subscription and no annual contract. Brand protection platforms are usually sold as quote-based subscriptions. Doing it yourself costs nothing but time.
What do you need from me?
The phishing URL, and ideally the brand it imitates. Anything else you can add helps us build the evidence case faster.
More guides: Domain takedown · Brand impersonation takedown · Phishing takedown services compared · Free phishing site lookup · Where to report a phishing website · How to take a phishing site offline yourself · Reported it to urlscan.io? How to get it removed · Compare us with Bolster, Netcraft, BrandShield and PhishFort.
Your customers are being targeted right now.
Report the URL and a senior analyst takes your case — not a ticket queue. Flat $499 — neutralized within 48 hours from analyst approval, or your money back under our 48-hour money-back SLA.
Start a Takedown — $499