To assist registrars combat phishing we are providing a phishing feed.

Specialist security companies are continually monitoring phishing through a variety of methods. These security companies will often identify a phishing site within a very short time of it being registered and set up.

When a phisher sets up a phishing site it is usually only effective for a short period of time. It is therefore essential to act as quickly as possible to shut down phishing sites.

The security companies are providing us with a live data feed of sites that have been reported as phishing sites. We can use this data to alert a registrar of any domain names on their tag that are on this report. Once you receive notification of a domain name suspected of being involved in phishing, you can then lock the name using our Investigation lock, whilst you carry out further checks.

The data for our phishing feed is currently supplied by Netcraft. We are also looking at other sources of data and will add them when available.

How do I use the phishing feed?

The phishing feed is an opt-in service and can be accessed in your online service account under Registrars > Notifications. To enable the phishing feed simply check the box 'Receive Phishing Notifications'.

Notifications can be sent either by email or by EPP. If you wish to receive email notification of phishing events on your tag you can supply your preferred notification email address. Further details about the notification email and the layout of the EPP notification are available.

The phishing feed and its use are covered by its own terms of use.