01 / Identify the concern
Select a category to see the information that can help a receiving team assess your report.
Phishing & impersonation+
Include the exact URL, the organization being impersonated, timestamps, and screenshots. Do not enter credentials or payment details to gather evidence. If credentials were disclosed, change them through the legitimate service.
Malware distribution+
Provide the domain, affected URLs, detection time, and any existing security analysis or file hashes. Do not download or attach executable malware samples to a general report.
Botnets & technical abuse+
Include relevant DNS observations, timestamps with time zone, and redacted network logs. Explain the relationship between the domain and the suspected activity. Avoid exposing unrelated personal or confidential information.
Spam & other concerns+
For spam supporting malicious activity, include the original email headers and relevant URLs. Website content complaints may need to go to the hosting provider. Trademark disputes may require a separate dispute-resolution process.
02 / Prepare your report
- Record the complete domain name, relevant URLs, and when you observed the activity.
- Describe what happened and why you believe it is abusive. Separate direct observations from assumptions.
- Attach safe evidence such as screenshots or redacted logs, and provide a reply address.
- Send your report through the registrar’s verified abuse channel and retain its reference number.
03 / Find the right contact
Look up the domain to find the sponsoring registrar and its abuse contact. Lookup coverage differs by namespace. For registrations beneath .ru.com, .sa.com, or .za.com, consult the registration provider if the specific record is not returned.
WHOIS lookupFor immediate threats to life or safety, contact the appropriate emergency service. Domain abuse channels are not emergency services.