{ "dataset_id": "D3", "slug": "url-warning-review-routes", "title": "URL warning review and abuse-reporting routes", "version": "2026-10-24", "licence": "CC BY 4.0", "licence_url": "https://creativecommons.org/licenses/by/4.0/", "attribution": "URL warning review routes — original compilation, 2026-10-24", "row_count": 20, "scope": "Twenty official routes across browser review, email, registrar, hosting/platform and anti-phishing organizations. Guidance-only inspection; zero submissions.", "category_counts": { "anti_phishing": 4, "browser_warning_review": 3, "email_provider": 4, "hosting_platform": 5, "registrar": 4 }, "not_independent_authorities": "Firefox’s documented phishing removal route uses Google; these are two entrypoints, not two independent review authorities.", "unknown_meaning": "A field was not established in selected official guidance. No form submission or account workflow was tested.", "rows": [ { "id": "UWR01", "organization": "Google Search Console", "category": "browser_warning_review", "purpose": "Owner requests review of security issues after correction.", "route_type": "Search Console Security Issues review", "route_url": "https://support.google.com/webmasters/answer/9044101?hl=en", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Site owner or authorized property user.", "account_requirement": "Search Console property access; permission level not separately audited.", "ownership_requirement": "Site owner", "required_information": "Issue, correction and outcome explanation.", "privacy_and_sharing": "Not stated in selected review instructions.", "status_followup": "Review confirmation, progress and final email.", "stated_response_time": "Several days or weeks; not a guaranteed deadline.", "does_not_do": "Does not establish a verdict from every browser or remove unrelated content.", "shared_authority_group": "Google Safe Browsing-related review", "source_ids": [ "D3S01" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:34.077618+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR02", "organization": "Microsoft Defender SmartScreen", "category": "browser_warning_review", "purpose": "Owner challenges an incorrect SmartScreen site warning.", "route_type": "Warning feedback and review email", "route_url": "https://learn.microsoft.com/en-us/troubleshoot/microsoft-edge/development/unexpected-block-warning", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Site owner; non-owners are directed to the owner.", "account_requirement": "Not stated", "ownership_requirement": "Site owner", "required_information": "Reported site and explanation through the documented warning-feedback route.", "privacy_and_sharing": "Not stated", "status_followup": "Confirmation email; replies reach the review group.", "stated_response_time": "Not stated", "does_not_do": "A file submission portal is not substituted for a URL review.", "shared_authority_group": "Microsoft Defender SmartScreen", "source_ids": [ "D3S02" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:34.078210+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR03", "organization": "Mozilla Firefox", "category": "browser_warning_review", "purpose": "Owner requests removal of an erroneous phishing-list entry.", "route_type": "Official help links to Google removal form", "route_url": "https://support.mozilla.org/en-US/kb/how-does-phishing-and-malware-protection-work", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Site owner after investigation or correction.", "account_requirement": "Not stated", "ownership_requirement": "Site owner", "required_information": "Site and explanation requested by the linked provider form; fields not audited.", "privacy_and_sharing": "Mozilla describes Google as the removal-form provider.", "status_followup": "Not stated", "stated_response_time": "Not stated", "does_not_do": "Not a separate independent blocklist or a universal warning appeal.", "shared_authority_group": "Google Safe Browsing-related review", "source_ids": [ "D3S03" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:34.078082+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR04", "organization": "Gmail", "category": "email_provider", "purpose": "Recipient reports phishing or corrects a mistaken phishing label.", "route_type": "Message menu", "route_url": "https://support.google.com/mail/answer/8253?hl=en-GB", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Message recipient.", "account_requirement": "Gmail mailbox access.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Existing message; choose the applicable reporting action.", "privacy_and_sharing": "Manual spam reporting gives Google a copy and attachments for possible analysis.", "status_followup": "No case-status process established.", "stated_response_time": "Not stated", "does_not_do": "Does not review a website for every browser or block every future sender.", "shared_authority_group": "Gmail", "source_ids": [ "D3S04" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:34.078358+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR05", "organization": "Outlook", "category": "email_provider", "purpose": "Recipient reports a phishing message.", "route_type": "Message reporting control", "route_url": "https://support.microsoft.com/en-us/outlook/mail/phishing-and-suspicious-behavior-in-outlook", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Message recipient.", "account_requirement": "Outlook mailbox access.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Selected suspicious message.", "privacy_and_sharing": "Not stated", "status_followup": "Not stated", "stated_response_time": "Not stated", "does_not_do": "Reporting does not itself block the sender; blocking is separate.", "shared_authority_group": "Outlook", "source_ids": [ "D3S05" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:34.078502+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR06", "organization": "Yahoo Mail", "category": "email_provider", "purpose": "Recipient flags suspicious mail or Yahoo/AOL-origin abuse.", "route_type": "Spam/report controls and abuse guidance", "route_url": "https://help.yahoo.com/kb/SLN31009.html", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Message recipient.", "account_requirement": "Yahoo mailbox access for mailbox controls.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Selected message and the relevant report control.", "privacy_and_sharing": "Not stated", "status_followup": "Not stated", "stated_response_time": "Not stated", "does_not_do": "Filter feedback is not a browser-warning appeal or guaranteed takedown.", "shared_authority_group": "Yahoo Mail", "source_ids": [ "D3S06" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:34.078644+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR07", "organization": "Apple", "category": "email_provider", "purpose": "Report email impersonating Apple.", "route_type": "Forward email to official reporting address", "route_url": "https://support.apple.com/en-mide/102568", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": "reportphishing@apple.com", "eligible_reporter": "Recipient of Apple-impersonation email.", "account_requirement": "No Apple-account prerequisite stated for email forwarding.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Suspicious Apple-impersonation email.", "privacy_and_sharing": "Not stated", "status_followup": "Not stated", "stated_response_time": "Not stated", "does_not_do": "iCloud junk/abuse has separate handling; this is not a Safari URL appeal.", "shared_authority_group": "Apple", "source_ids": [ "D3S07" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:34.479621+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR08", "organization": "Namecheap", "category": "registrar", "purpose": "Report phishing associated with a registered domain or hosted content.", "route_type": "Separate registrar and hosting abuse addresses", "route_url": "https://www.namecheap.com/support/knowledgebase/article.aspx/9196/5/how-and-where-can-i-file-abuse-complaints/", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": { "registrar": "abuse@namecheap.com", "hosting": "abuse@namecheaphosting.com" }, "eligible_reporter": "Reporter with relevant evidence.", "account_requirement": "Not stated", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Domain, full URL, impersonated target and existing relevant evidence.", "privacy_and_sharing": "Not stated", "status_followup": "Not stated", "stated_response_time": "Not stated", "does_not_do": "Registrar and hosting responsibility differ; one address does not establish both roles.", "shared_authority_group": "Namecheap", "source_ids": [ "D3S08" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:34.668175+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR09", "organization": "GoDaddy", "category": "registrar", "purpose": "Report phishing involving a GoDaddy-associated domain or service.", "route_type": "Phishing abuse form", "route_url": "https://legalportal.godaddy.com/abuse/phishing", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Reporter attesting good faith.", "account_requirement": "No sign-in requirement established by the read-only form.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Contact email, impersonated brand, URL/domain and explanation; context fields also appear.", "privacy_and_sharing": "Not stated", "status_followup": "A Check Status link is present; outcome delivery was not tested.", "stated_response_time": "Not stated", "does_not_do": "An intake/status interface does not promise action or browser-list removal.", "shared_authority_group": "GoDaddy", "source_ids": [ "D3S22", "D3S09" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:36.525560+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR10", "organization": "Tucows Domains", "category": "registrar", "purpose": "Report phishing/pharming involving the registrar family.", "route_type": "DNS-abuse form linked from guidance", "route_url": "https://tucowsdomains.com/report-abuse/", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Reporter with relevant DNS-abuse information.", "account_requirement": "Not stated", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Relevant domain and evidence; downstream form requirements not inspected.", "privacy_and_sharing": "No reporter personal information in the described internal resolution database; broader handling not established.", "status_followup": "Acknowledgement includes a Freshdesk case ID.", "stated_response_time": "Not stated", "does_not_do": "Family coverage includes Ascio, Enom, EPAG and OpenSRS; unrelated hosts remain separate.", "shared_authority_group": "Tucows Domains", "source_ids": [ "D3S10" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:35.147638+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR11", "organization": "Porkbun", "category": "registrar", "purpose": "Report verifiable DNS abuse.", "route_type": "Abuse intake and report-status route", "route_url": "https://porkbun.com/abuse", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Reporter with evidence.", "account_requirement": "Not stated", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Definitive, verifiable evidence; retain report ID.", "privacy_and_sharing": "Not stated", "status_followup": "Published status route uses email and report ID.", "stated_response_time": "Confirmation within 24 hours; not a resolution promise.", "does_not_do": "Not a general content, trademark or ownership-dispute arbiter.", "shared_authority_group": "Porkbun", "source_ids": [ "D3S11" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:35.173406+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR12", "organization": "Amazon Web Services", "category": "hosting_platform", "purpose": "Report abuse involving AWS resources.", "route_type": "Public form or Trust & Safety email", "route_url": "https://www.repost.aws/articles/ARDaJQbZSdSdKpFjrFMNmgzQ/abuse-reporting-faqs", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": "trustandsafety@support.aws.com", "eligible_reporter": "Anyone; need not be an AWS customer.", "account_requirement": "AWS account not required.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Specific URL and policy concern for content; technical incident reports require relevant logs and timestamps.", "privacy_and_sharing": "AWS may notify its customer to investigate.", "status_followup": "Automated confirmation; questions and final response may follow.", "stated_response_time": "Varies with investigation.", "does_not_do": "No guaranteed outcome or universal abuse-report API.", "shared_authority_group": "Amazon Web Services", "source_ids": [ "D3S12" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:35.197923+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR13", "organization": "Cloudflare", "category": "hosting_platform", "purpose": "Report phishing involving a Cloudflare service.", "route_type": "Public form; entitled dashboard/API routes", "route_url": "https://developers.cloudflare.com/fundamentals/reference/report-abuse/submit-report/", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Anyone for the public report form.", "account_requirement": "Public form available; account permissions apply to dashboard/API.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Domain and specific phishing URL; use appropriate complaint category.", "privacy_and_sharing": "Handling depends on service and complaint type; confidentiality not established here.", "status_followup": "Customer mitigation review is separate from the public report route.", "stated_response_time": "Not stated", "does_not_do": "A CDN/proxy role does not prove Cloudflare hosts the origin content.", "shared_authority_group": "Cloudflare", "source_ids": [ "D3S13", "D3S14" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:35.591210+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR14", "organization": "GitHub", "category": "hosting_platform", "purpose": "Report abusive repositories, profiles or eligible content.", "route_type": "Repository/user reporting and contact form", "route_url": "https://docs.github.com/en/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Repository or profile reporters; some content controls require a relationship.", "account_requirement": "Eligibility depends on reporting surface; issue/comment reports have role restrictions.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Repository/user/content reference and explanation.", "privacy_and_sharing": "Not stated", "status_followup": "Not stated", "stated_response_time": "Not stated", "does_not_do": "Not a general website-warning appeal or a vulnerability-disclosure substitute.", "shared_authority_group": "GitHub", "source_ids": [ "D3S15" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:35.593793+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR15", "organization": "WordPress.com", "category": "hosting_platform", "purpose": "Report abusive content hosted by Automattic services.", "route_type": "Logged-in report control or direct form", "route_url": "https://wordpress.com/support/report-blogs/", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Reporter with relevant hosted-content concern.", "account_requirement": "Direct form available without login.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Relevant hosted site/content and complaint details.", "privacy_and_sharing": "See source exceptions; no anonymous-report guarantee is inferred.", "status_followup": "Reports are read; individual replies are not always provided.", "stated_response_time": "Not stated", "does_not_do": "Does not cover every website running independently hosted WordPress software.", "shared_authority_group": "WordPress.com", "source_ids": [ "D3S16" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:35.728202+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR16", "organization": "DigitalOcean", "category": "hosting_platform", "purpose": "Report suspected abuse involving DigitalOcean infrastructure.", "route_type": "Security Operations Center abuse form", "route_url": "https://www.digitalocean.com/company/contact/abuse", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Reporter with relevant infrastructure-abuse concern.", "account_requirement": "Not established", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Select abuse category; remaining required fields were not fully exposed.", "privacy_and_sharing": "Not stated", "status_followup": "Not stated", "stated_response_time": "Not stated", "does_not_do": "Read-only intake discovery does not confirm account requirements, handling time or resolution.", "shared_authority_group": "DigitalOcean", "source_ids": [ "D3S17" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:35.791622+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR17", "organization": "Anti-Phishing Working Group", "category": "anti_phishing", "purpose": "Contribute suspected phishing email to shared threat intelligence.", "route_type": "Email forwarding and linked reporting form", "route_url": "https://apwg.org/reportphishing", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": "reportphishing@apwg.org", "eligible_reporter": "Recipient of suspected phishing email.", "account_requirement": "No account prerequisite stated for the published email route.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Full phishing email, preferably forwarded as an attachment.", "privacy_and_sharing": "Email is archived in eCrime eXchange for vetted community members.", "status_followup": "No individual case-resolution process established.", "stated_response_time": "Not stated", "does_not_do": "A contribution is not a guaranteed personal response, refund or website takedown.", "shared_authority_group": "Anti-Phishing Working Group", "source_ids": [ "D3S18" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:35.820435+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR18", "organization": "Netcraft", "category": "anti_phishing", "purpose": "Report suspicious URLs or phishing messages for investigation.", "route_type": "Public reporting entrypoint or forwarded email", "route_url": "https://report.netcraft.com/", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": "scam@netcraft.com", "eligible_reporter": "Reporter with a suspicious URL/message.", "account_requirement": "Not established", "ownership_requirement": "Not established as a general prerequisite", "required_information": "URL and existing context; suspicious email can be forwarded.", "privacy_and_sharing": "Not stated in selected intake guidance.", "status_followup": "Form interaction was unavailable in the retrieved page.", "stated_response_time": "Not stated", "does_not_do": "Provider investigation is not a guaranteed takedown or removal from all browser lists.", "shared_authority_group": "Netcraft", "source_ids": [ "D3S19", "D3S23" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:17:07.006683+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR19", "organization": "PhishTank", "category": "anti_phishing", "purpose": "Submit suspected phishing for community verification and sharing.", "route_type": "Registered website/email reporting routes", "route_url": "https://phishtank.org/faq.php", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Registered community reporter.", "account_requirement": "Registration and valid email required; current sign-up availability not tested.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "Suspected phishing URL and supporting message information.", "privacy_and_sharing": "Reports and validation are community-attributed; phishing data is shared.", "status_followup": "Community tracking/validation; no guaranteed vendor response.", "stated_response_time": "Not stated", "does_not_do": "Community classification does not control every warning system or guarantee removal.", "shared_authority_group": "PhishTank", "source_ids": [ "D3S20" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:36.142453+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null }, { "id": "UWR20", "organization": "UK National Cyber Security Centre", "category": "anti_phishing", "purpose": "Report a suspicious scam website.", "route_type": "Public report form", "route_url": "https://www.ncsc.gov.uk/section/about-this-website/report-scam-website", "route_url_role": "official guidance or read-only intake entrypoint", "email_address": null, "eligible_reporter": "Person with a suspicious website address.", "account_requirement": "No account prerequisite shown in inspected form.", "ownership_requirement": "Not established as a general prerequisite", "required_information": "URL, how it was received and optional explanatory context.", "privacy_and_sharing": "Access is limited; information may be shared with law-enforcement partners.", "status_followup": "No individual outcome process established.", "stated_response_time": "Not stated", "does_not_do": "Not an emergency service or a guarantee of removal; no suspicious link needs opening.", "shared_authority_group": "UK National Cyber Security Centre", "source_ids": [ "D3S21" ], "observed_date": "2026-10-24", "checked_at_utc": "2026-10-25T00:07:36.481037+00:00", "submission_tested": false, "resolution_tested": false, "author": null, "reviewer": null } ], "license": "CC-BY-4.0" }