What counts as domain abuse
- Phishing pages and fake sign in forms.
- Malware distribution and command and control servers.
- Spam sent from or advertising the domain.
- Pharming, botnets and fraud schemes.
- Illegal content where the law requires registrar action.
The full list is in our acceptable use policy.
Report abuse step by step
1. Check the registrar
Look up the domain in WHOIS. The report reaches the right party only if the domain is registered with us. For hosted content, the web host can often act faster, so report there too.
2. Write the email
Send it to [email protected] with the subject Abuse report.
3. Include the details
- The domain name and the exact addresses involved.
- The type of abuse and when you saw it.
- Evidence such as screenshots, full email headers or malware samples described with their hashes.
- Your name and how to reach you. Law enforcement and security teams can add their reference number.
How we handle abuse reports
| Step | What we do |
|---|---|
| Receipt | We confirm that we received the report |
| Review | We check the evidence and contact the registrant where that is appropriate |
| Action | Depending on the case, we suspend the domain, lock it or ask the registrant to fix the issue |
| Reply | We tell you the outcome where the law and privacy rules allow it |
Reports from law enforcement and urgent cases such as live phishing are handled first. ICANN requires registrars to keep an abuse contact, to take reasonable steps to investigate reports and to respond to them.
Trademark disputes are not abuse reports
If you believe a domain infringes your trademark but there is no phishing, malware or fraud, an abuse report is not the right path. Use the Uniform Domain Name Dispute Resolution Policy, explained on our UDRP page. Questions about ownership are covered in who owns a domain.
Can you tell me who owns the domain?
Registrant data behind WHOIS privacy is shared only on a valid legal request, as described in our privacy policy.
I received a complaint about my own domain. What should I do?
Read the email, fix the problem and reply with what you changed. A quick response usually avoids a suspension.