IPzest
Contacts verified 2026-09-06

How to report abuse to Netlify

Report phishing, counterfeit, and brand-abuse sites deployed on Netlify.

Not published; Netlify says it takes down infringing sites expeditiously and restores counter-noticed content in 10–14 business days if no legal action is filedNetlify DMCA takedown and abuse reporting

Where to report

Report a Netlify site by emailing fraud@netlify.com with the site URL and reason (the address Netlify's Terms of Use give for misuse). Copyright notices go to copyright@netlify.com per netlify.com/dmca-submit. No published SLA; counter-noticed content is restored in 10–14 business days.

Abuse report form
www.netlify.com/dmca-submit
Abuse email
fraud@netlify.com

Include in your report

  • The exact .netlify.app or custom domain URLs and the reason for the report
  • For copyright: a statement that you have read Netlify's DMCA guidance, identification of the work, and the specific infringing URL
  • Good-faith statement and a perjury statement confirming accuracy and authority to act
  • Your contact information and a physical or electronic signature, in plain text in the email body
  • Awareness that Netlify may publish the notice, with personal details redacted, on GitHub and Lumen

Netlify hosts or serves the content, so it can remove the infringing page or store. If the domain itself is the abuse (a typosquat or lookalike), report it to the registrar as well.

Netlify is a static and Jamstack hosting platform whose free tier and instant .netlify.app deployments are used for both legitimate frontends and disposable phishing and brand-impersonation pages. Netlify does not operate a public abuse web form; it publishes a fraud/abuse email, a DMCA policy with a copyright email and mailing address, and it posts redacted takedown notices publicly on GitHub and shares them with Lumen.

A Netlify abuse report can remove the infringing page or store. If the domain itself is the abuse (a typosquat or lookalike), report it to the domain registrar as well. For a cloned storefront, see how to remove a fake website. Payment processors are often faster than hosts — payment takedown guides cover that layer. Free takedown templates cover the wording.

Why brand-abuse sites show up on Netlify

Netlify sites are cheap to redeploy, so a single phishing kit can cycle through many random subdomains. Netlify's DMCA policy states it will expeditiously take down the affected site or content and will disable free-tier accounts on receipt of a DMCA notice, but there is no published SLA and no form to track a case, so reports need to be complete on first submission and sent to the right mailbox.

What a Netlify abuse report can cover

  • Phishing pages on random .netlify.app subdomains
  • Brand-impersonation and fake customer-support sites
  • Counterfeit storefront frontends built from cloned themes
  • Copyright-infringing clones of brand websites
  • Scam landing pages using a brand's name and logo

How to file a Netlify abuse report

  1. 1

    Capture the site and its subdomain

    Record the .netlify.app URL and any custom domain, with screenshots and timestamps. Netlify sites are often redeployed under a new name after a report.

  2. 2

    Email the right mailbox

    For phishing, fraud, and impersonation, email fraud@netlify.com with the site URL and reason, with no CCs. For copyright, follow netlify.com/dmca-submit and email copyright@netlify.com; Netlify says email is the fastest option and that mailed notices take longer.

  3. 3

    Send the notice in plain text

    Netlify asks for a plain-text version in the email body, with attachments acceptable as a supplement. Include all seven required elements or the notice will not meet statutory requirements.

  4. 4

    Expect publication of the notice

    Netlify posts takedown and counter notices, with personal information redacted, at github.com/netlify/dmca and shares them with Lumen. Draft the notice knowing it may become public.

Netlify DMCA takedown and abuse reporting

When a Netlify abuse report is not enough

Hosting complaints remove the page, not the domain. A suspended site can reappear on a new host under the same URL within hours. If the domain itself is the abuse, file with the registrar as well. Stolen photos and copy are usually faster as a DMCA notice than as a trademark complaint — see the DMCA takedown guide.

How IPzest speeds up Netlify enforcement

  • Continuous monitoring for brand-abuse sites appearing on .netlify.app and custom domains pointed at Netlify
  • Hosting identification that distinguishes Netlify from Vercel, Cloudflare Pages, and similar static hosts
  • Plain-text notice packaging with all seven elements Netlify's DMCA guidance requires
  • Coordinated filing across Netlify, the custom domain's registrar, and any upstream CDN

Frequently asked questions

How do I report abuse to Netlify?

Netlify has no public abuse form. Email fraud@netlify.com with the site URL and reason; Netlify's Terms of Use name that address for reporting misuse, and its DMCA page links to it for abuse reports. For copyright, follow https://www.netlify.com/dmca-submit/ and email copyright@netlify.com.

What is Netlify's DMCA agent?

Netlify, Inc., Attn: DMCA Agent, 101 2nd Street, San Francisco, CA 94105, email copyright@netlify.com. Netlify says email is the fastest route and physical mail may take longer.

Does Netlify remove content or only forward the complaint?

Netlify removes it. Its DMCA policy says it will expeditiously take down the affected user's site or the allegedly infringing content, may optionally let the user remove the content first, and notifies the user when a notice meets statutory requirements. Free-tier accounts can be disabled on receipt of a DMCA notice.

Will my Netlify notice be made public?

Possibly. Netlify posts takedown and counter notices at github.com/netlify/dmca with personal information redacted and shares them with Lumen at Harvard's Berkman Klein Center.

Other hosting providers

Report abuse to Vercel

Report phishing, counterfeit, and brand-abuse sites deployed on Vercel.

Report abuse to Cloudflare (CDN)

Report brand-abuse sites fronted by Cloudflare's CDN and proxy.

Report abuse to WordPress.com

Report a WordPress.com site for counterfeits, trademark, or copyright infringement.

All hosting providers we cover

Related guides