Frequently asked questions.

Yes. Registrars, hosting providers, Cloudflare, Google and Microsoft all run abuse and copyright reporting channels precisely so that rights holders can report sites that impersonate them or copy their content. What matters is that what you report is true. That is why you review and approve every report, and why you have to verify you own the real domain before anything can be sent.

We cannot promise it, and nobody honestly can: registrars and hosts decide for themselves. What we can do is make each report as easy as possible to act on, with the right recipient, complete evidence, the wording each channel expects, and a polite follow-up when the first report is ignored, which is common. Browser warnings from Google and Microsoft often arrive independently of the host, so a fake site can stop reaching most visitors even before it is removed.

Yes. Cloudflare is not the host; it sits in front of the host. The free check tells you whether the site is proxied through Cloudflare, and the pack includes the report for Cloudflare's abuse form, which passes complaints on to the real hosting provider. The registrar, browser blocklists and search engines do not depend on knowing the host at all.

The free check takes about 20 seconds. The evidence and drafts are prepared automatically as soon as you start the pack, so you can approve and send the same day. After that it depends on the recipients: some act within a day, some need chasing, and some never respond. We recheck the site daily and draft follow-ups for 30 days, and you can see each report's status throughout.

No. Most domains have their owner details redacted for privacy, and fraudsters use fake details anyway. You do not need to know who is behind the site. Reports go to the companies that provide the domain and the hosting, and they can act on their own customer.

Yes. You, or someone you name in your team, are the signatory. Email reports are sent from our system with your address as the reply-to, so the abuse desk replies to you. Form-based reports (Google, Microsoft, Cloudflare, search removal, Action Fraud) are prepared for you to paste and submit yourself.

No. Every report waits for a named person to read the exact text and approve it. There is no auto-send. Before the first report can go anywhere you also verify that you control your real domain, with a DNS record or a meta tag.

It helps, and the reports will cite it if you have one, but it is not required. A fake website usually copies your photos and text, which you own the copyright in automatically, and impersonating a business to take payments or details is fraud whether or not the name is registered.

The fake site's address, the lookups about it, the evidence we capture and the reports you approve. For your account, your email and the signatory details that appear on reports. Card payments are handled by our payment provider; we never see card numbers. The privacy notice has the detail.

If the pack has not been started, yes, within 14 days of purchase. Once evidence has been captured and reports drafted the work has been done, so we do not refund because a recipient chose not to act. If something on our side did not work, tell us and we will put it right.

No. The Takedown Pack is a one-off payment per fake site. Monitor and Protect are for when you want us to look for the next lookalike domain every day; you can start one later and cancel at any time.

Yes, and our guides show how. The pack saves you the research (finding the right abuse contacts behind privacy services and Cloudflare), the evidence work, the wording each channel expects and the follow-ups, which together are most of the time it takes.