# \[How to article\] Takedown Phishing Domains/URLs on Cosmotown

**URL:** <https://community.bolster.ai/t/how-to-article-takedown-phishing-domains-urls-on-cosmotown/91>\
**Category:** Registrars\
**Tags:** takedown, phishing, registrar, cosmotown\
**Created:** [February 21, 2024, 6:43am UTC](https://community.bolster.ai/t/how-to-article-takedown-phishing-domains-urls-on-cosmotown/91 "2024-02-21T06:43:08Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jaclyn](https://avatars.discourse-cdn.com/v4/letter/j/73ab20/32.png) [@Jaclyn](https://community.bolster.ai/u/Jaclyn)\
**Post date:** [February 21, 2024, 6:43am UTC](https://community.bolster.ai/t/how-to-article-takedown-phishing-domains-urls-on-cosmotown/91/1 "2024-02-21T06:43:08Z")

</div>

How to do a takedown on a malicious domain which is registered through Cosmotown.

**Step 1** : To begin, open your email account and create a new message.

**Step 2** : In the “To:” section type Cosmotown’s abuse contact email. You may choose to send it to [abuse@cosmotown.com](mailto:abuse@cosmotown.com), [support@cosmotown.com](mailto:support@cosmotown.com) or both.

**Step 3** : For the subject line, use language that allows for the recipient to understand the request and call attention to it.

-ex: “{Your Brand} Phishing on Your Infrastructure”

**Step 4** : Draft the body of the email. Make sure to provide a detailed description of the abuse including the domain name, all abusive URLs built off the domain, and the IP address of the malicious user.

\*Please note that in order to avoid being blocked by the email providers, it is essential to obfuscate the URL by changing some of the characters.

-ex: “[https://www.google.com](https://www.google.com)” can be written “hxxp://www[.]google[.]com”

 ![Screenshot 2024-02-16 at 11.40.31 AM](https://canada1.discourse-cdn.com/flex028/uploads/checkphish/original/1X/1c857bc7b21bf960383e05a49ce4eb7c8084fee2.png)  
**Step 5** : Attach screenshot evidence with timestamps showing that the abuse is still currently taking place.

**Step 6** : Click “Send.”

Cosmotown does not send an automated response when you submit an abuse complaint to them, nor will they update you on their decision once they review your submission.

\*Please note: Cosmotown usually assesses the submission within a week, so if the site targeting you is still active after 7 business days you may need to resubmit.