How to report a phishing site to Alibaba Cloud

How to reach them

• Upload only legitimate supporting files; Alibaba Cloud will not open files detected as malicious
• Once a report is accepted, it is forwarded to the reported party within 5 business days

Reporting to Alibaba Cloud, step by step

1. Find the hosting IP address of the scam site and run an IP WHOIS or RDAP lookup. Go on if the network belongs to Alibaba Cloud.
2. Open the Alibaba Cloud Reporting Center (report.alibabacloud.com, also reached from www.alibabacloud.com/report).
3. Pick Illegal Information Reporting for phishing, fraud and other harmful content. Infringement Reporting is the separate entry for copyright and trademark claims.
4. Complete the on-screen form and upload your proof. Alibaba Cloud says reports need valid supporting evidence.
5. Log in to the Reporting Center later to follow your report; Alibaba Cloud says that is where report status is shown.

What Alibaba Cloud asks you to include

• Give the full URLs of the scam pages on Alibaba Cloud and the IP address you found, with a short explanation of who the site imitates and how it tricks people.
• Alibaba Cloud says it will not accept reports whose materials fall short of its requirements, and you get no further message if that happens.
• For an infringement claim, Alibaba Cloud asks you to name the specific laws and regulations you say were broken, plus supporting materials.
• Upload screenshots or documents only. Alibaba Cloud says any file it detects as malicious will not be opened and the report will not be processed, so never attach the phishing kit or a live sample.

What Alibaba Cloud can do

• Alibaba Cloud's Product Terms of Service let it ask a customer to remove unlawful content, disable or suspend that customer's use of a product, restrict platform access, or suspend or terminate the account when it believes the conduct is unlawful, deceptive, fraudulent or misleading.
• The same terms say Alibaba Cloud may directly remove content on its platform that may be unlawful.
• Alibaba Cloud's Terms of Use bar fraudulent and deceptive conduct, including impersonating any person or entity, and allow account suspension upon notice for a breach.

What Alibaba Cloud cannot do

• Alibaba Cloud's hosting team works on what runs on its servers. If the scam domain is registered with a different registrar, the name itself stays live elsewhere unless you also report it to that registrar.
• The abuse emails in Alibaba's ARIN record are labelled for Alibaba.com and AliExpress abuse, not for Alibaba Cloud servers, so use the Reporting Center for a hosted phishing site.
• Alibaba Cloud will not process a report that carries a file it flags as malicious.

What happens after you report

• Alibaba Cloud says an accepted report goes to the reported customer within 5 business days.
• Any reply from that customer is passed back to you, according to Alibaba Cloud.
• If the reported product or service gets suspended during the investigation, Alibaba Cloud closes the case.
• Status updates live in the Reporting Center, so keep the login you used.
• Alibaba Cloud documents only one timing: an accepted report reaches the reported party within 5 business days.

Write the report

Paste the link, phone number or email address and we'll write the message for Alibaba Cloud. You send it yourself.

Is the domain also registered with Alibaba Cloud Domains?

This page is about content on Alibaba Cloud's servers. If the domain name itself is registered with Alibaba Cloud Domains (the Registrar line in a WHOIS lookup shows it), the registrar route is the one that can suspend the name. Report to both when the same company does both jobs.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.