Skip to content

Request a takedown

This guide walks you through requesting a takedown against a genuine impersonation, and following the case until it closes.

You need a finding you have already reviewed and confirmed as a Threat, for example a look-alike domain. If you have not triaged the finding yet, start with Review a suspicious domain or Review your first finding.

  1. Open the finding and start the takedown. On a domain, choose Request Takedown. On a social profile or an ad, mark it as Threat. Either one opens a takedown request form.

  2. Complete and submit the request. The finding’s details are filled in for you, and you can add optional comments. Tick the box to authorize nebty to act on your behalf, which is required, then choose Submit Takedown Request. The request goes to the nebty team for review.

  3. Track the case on the Takedowns page. Each case carries a status, moving through an arc such as Pending Review, Open, In Progress, and Pending Response, so you always know where it stands. Open the case to see its full event timeline.

    A takedown case being tracked with its event timeline
  4. Wait for the case to reach Closed. A closed case carries a resolution outcome, for example Domain Suspended, Content Removed, Voluntary Takedown, or Unresolved, that tells you how it ended.

Once a case is open, the nebty team works it: contacting the relevant registrar, host, or platform through the Abuse Contact, and filing a Blacklist Submission where that applies. You do not author either of these yourself; you simply follow their status on the case.

How long a case takes to close depends on the registrar, host, or platform involved, so there is no fixed timeline to expect. The event timeline on the case is the most reliable way to see what has happened so far.

Related: Takedowns.

Track a takedown case in the demo(opens the public demo with sample data)