DOMAIN WARNING LIST, DOMAIN ALERT LIST AND DOMAIN BLOCKING – Polish cybersecurity authorities and legal basis
Publication date: September 01, 2025
The development and dissemination of technology mean that internet users are facing an increasing number of threats. This development also brings with it a growing number of opportunities for those seeking to exploit this development to deceive others. To counteract this threat, particularly against personal data theft and the misuse of property, CERT Polska, a computer security incident response team operating within the Scientific and Academic Computer Network – National Research Institute (NASK PIB), is tasked with this goal. This is primarily achieved through the CERT Warning List. In 2024 alone, 92,600 malicious domains were added to the Warning List, compared to 79,300 the previous year. Approximately one in three reports submitted to CERT results in the website being added to the Warning List (in 2024, the CERT team analyzed over 300,000 reports). In 2024, the websites listed primarily offered fraudulent investments and were domains imitating popular portals to trick potential victims into providing login credentials. According to CERT data, the estimated number of visits to websites blocked by the Warning List reached nearly 72 million in 2024[1], demonstrating that CERT, together with the Warning List, plays an important role in protecting Polish internet users. This article outlines the procedure for adding websites to the Warning List and, consequently, blocking them.
