📌 📌 Please select the abuse category first, then the specific subtype. DNS abuse is handled directly by the registrar; non-DNS abuse is referred to the appropriate escalation path.
Select the broad category that best matches your complaint. Different categories follow different handling paths and authorities.
🛡
DNS Abuse Complaint
Domains used for malware distribution, botnet control, phishing, hijacking, or spam that serves as a vector for those activities. The registrar will investigate and apply mitigation measures such as locking or suspension under ICANN RAA §3.18.2.
⚖
Non-DNS Abuse Complaint
Trademark disputes, general spam, content infringement, unfair competition or contract disputes, illegal content, and child sexual abuse material (CSAM). The registrar will accept and route the complaint to the appropriate path, but it does not adjudicate legal disputes.
Please select the specific DNS abuse subtype:
Malware ✓
Domains used to distribute viruses, spyware, ransomware, or other malware
Botnet ✓
Domains used as command-and-control nodes for botnets
Phishing ✓
Domains used to impersonate legitimate sites and steal user credentials
Hijacking ✓
DNS poisoning or hijacking that redirects users to fraudulent sites
Spam (Distribution Vector) ✓
Spam used as a vector for malware, phishing, or hijacking
Illegal Activity ✓
Domains used for activities explicitly prohibited by Chinese law, such as telecom fraud
Note:Spam only constitutes DNS abuse when it functions as a vector for malware, phishing, hijacking, or botnet activity. For ordinary commercial bulk mail, choose “General Spam” under the non-DNS abuse category.
Please select the specific non-DNS abuse subtype:
Trademark Dispute ✓
Domains infringing on registered trademarks; UDRP/URS or court action is recommended
General Spam ✓
Bulk unsolicited commercial mail not linked to phishing or malware
Content Infringement ✓
Copyright, portrait, or reputation infringement
Unfair Competition / Contract Dispute ✓
Civil disputes involving unfair competition, confusion, or breach of contract
Illegal Content ✓
Sites containing illegal content but not involving the five categories of DNS abuse (such as gambling or pornography)
Child Sexual Abuse Material (CSAM) ✓
Child sexual abuse or exploitation material — special handling process
📋 Requirements for Actionable DNS Abuse Evidence
Registrars handling DNS abuse complaints should base their action on actionable evidence. Please include at least the following in the evidence materials:
1. Technical analysis report：Security analysis reports verified by a reputable third party, clearly showing that the reported domain exhibits abuse behavior.
2. Abuse behavior screenshots：Clear screenshots showing the domain being used for DNS abuse, with the discovery time clearly marked.
3. Abuse URL list：Complete URLs involved in the abuse behavior (please use defanged format such as example[.]com/path; submitting only the homepage cannot serve as complaint evidence).
Note: complaints lacking actionable evidence may be rejected for insufficient evidence. Providing only a domain screenshot or subjective description is not enough to constitute actionable evidence.
⚠ Special warning for CSAM (child sexual abuse material)
1. Do notupload or describe any CSAM samples or content in this form
2. Please report it immediately to the Chinese police (dial 110) or the cybercrime reporting site (cyberpolice.cn)
3. If you need to report it to an international organization, use INHOPE (www.inhope.org) or NCMEC (www.missingkids.org)
4. When submitting through this platform, please use defanged URLs and do not describe the content in detail