Identifying a potentially dangerous domain—one imitating your site, posing a phishing risk, or harming your reputation—allows you to initiate, through Arsen, a takedown procedure.
This is an official request sent to the registrar asking for the domain to be removed from the web.
You can then centralize the monitoring of all takedown requests to maintain full visibility over their progress.
1 – Objectives
This article explains how to:
understand how a takedown procedure works
review the status of ongoing requests
initiate a takedown directly from Arsen
identify the different abuse types that justify submitting a request to a registrar
2 – Prerequisites
Have access to the Threat Monitoring module
Have sufficient rights to use this feature (Admin role)
Have previously marked one or more domains as Malicious
3 – Accessing the takedown feature
Go to the Threat Monitoring section
Click
Domains, thenTakedown
This section lists all initiated requests and their current status.
4 – Available information
4.1 – Understanding the registrar’s role
A takedown request is always submitted to the registrar, the entity that registered the domain.
The registrar reviews the complaint and may:
accept the request
reject it
request additional information
📚 Note
A takedown is not automatic:
The registrar may reject the request if the domain owner proves the activity is legitimate and not harmful to your organization.
4.2 – Understanding request statuses
The takedown table displays all initiated requests and their progress:
Status | Meaning |
Ongoing | The registrar is reviewing the request; a response is pending. |
Rejected | The registrar has refused the request. |
Approved | The takedown was approved; the domain is now disabled. |
When a takedown is successful, the domain becomes available again for purchase. Two actions are recommended:
Acquire it to prevent malicious re-registration
Use the domain in awareness campaigns by adding it to the platform
5 – Submitting a takedown request
5.1 – Initiate a request
Click
+ Request TakedownOpen the right-side drawer that appears
5.2 – Select the domain to report
Select a domain previously marked as Malicious in the Domain Monitoring module
5.3 – Choose the type of abuse
Select the reason for reporting the domain:
Phishing: attempted impersonation targeting employees or customers
Copyright / Trademark Violation: infringement of intellectual property or brand identity
Spam or Scam: reputation damage or fraudulent activity
Click Next when finished.
6 – Finalizing and sending the request
The drawer displays a pre-filled email template to simplify the process.
You can:
edit the message text
add attachments (evidence, screenshots, logs, etc.)
click
Submitto officially send the request
📚 Note
Arsen automatically fills in the registrar’s email address.
Click Submit to initiate the request.