How to report a phishing site to Alibaba Cloud Domains

To report a phishing or scam site to Alibaba Cloud Domains, email [email protected] or use Alibaba Cloud Domains's reporting center: illegal information reporting.

Domain registrar: can suspend the domain name itself.

Alibaba Cloud sells domain names through its international website, alibabacloud.com. Its Domain Name Service Agreement says the registrations are made through an ICANN-accredited registrar, currently Dominet (HK) Limited (IANA ID 3775). Older and China-site registrations, such as aliyun.com itself, show Alibaba Cloud Computing (Beijing) Co., Ltd. (IANA ID 420) as the registrar.

Look up the scam domain in WHOIS or RDAP. If the Registrar field says Dominet (HK) Limited or Alibaba Cloud Computing (Beijing) Co., Ltd., this page is the right route. Both registrars publish the same abuse address in RDAP: [email protected].

This route is about the domain name. Alibaba Cloud's own help page covers reports of a domain name or website with illegal and harmful information, and its registrant terms ban using a domain for phishing, malware or fraudulent and deceptive practices.

How to reach them

  • In the Reporting Center, choose Illegal Information Reporting and provide proof of the abuse
  • Reports without adequate evidence are not accepted, and you get no further notice

Reporting to Alibaba Cloud Domains, step by step

  1. Confirm the registrar. Run an RDAP or WHOIS lookup on the domain and check that the sponsoring registrar is Dominet (HK) Limited or Alibaba Cloud Computing (Beijing) Co., Ltd.
  2. Email the report to [email protected]. Alibaba Cloud lists this address as Method 1 for reporting illegal and harmful information on a domain name.
  3. Or use Method 2: open the Alibaba Cloud Reporting Center at report.alibabacloud.com, choose Illegal Information Reporting, and follow the on-screen steps to give proof of domain name abuse.
  4. Keep a copy of what you sent. Alibaba Cloud's help page describes status checks only through a Reporting Center login.

What Alibaba Cloud Domains asks you to include

  • Alibaba Cloud asks for valid proof of domain name abuse. Name the domain and the exact phishing or scam URLs, and explain what the page pretends to be.
  • Alibaba Cloud warns that if your materials do not meet its requirements, it will not accept the report and will not notify you further. A thin report can simply disappear.
  • Attach only clean, legitimate files such as screenshots. Alibaba Cloud says it will not open a file or email it detects as malicious, and will not process that report.

What Alibaba Cloud Domains can do

  • Alibaba Cloud's domain agreement says it may suspend a domain name, or revoke its registration, without prior notice if the holder breaches the agreement, for ICANN compliance, under applicable law or a court order, or for security reasons.
  • Under the registrant terms with Dominet (HK) Limited, false contact details, or a failure to answer the registrar's accuracy questions for over 15 days, is a material breach and a basis for suspending or cancelling the registration.
  • Alibaba Cloud forwards an accepted report to the reported party, so the domain holder is put on notice.

What Alibaba Cloud Domains cannot do

  • Alibaba Cloud Domains acts on the domain name. If the scam pages sit on another company's servers, removing those pages is a job for that host, so report to the host as well.
  • The registrant terms name law enforcement requests and court orders as routes for releasing registrant data. Do not expect the domain owner's identity in reply to an abuse report.
  • Alibaba Cloud will not act on a report that lacks adequate proof, and it says it will not send you any further notice in that case.

What happens after you report

  • Once Alibaba Cloud accepts the report, it says it forwards it to the reported party within 5 business days.
  • If the domain holder replies, Alibaba Cloud says it promptly passes that response on to you.
  • If the reported product or service is suspended while Alibaba Cloud investigates, it closes the case.
  • You can log in to the Reporting Center to see the status of your report.
  • Alibaba Cloud says an accepted report is forwarded to the reported party within 5 business days. It gives no time for suspending a domain.

Write the report

Paste the link, phone number or email address and we'll write the message for Alibaba Cloud Domains. You send it yourself.

Is the site also hosted on Alibaba Cloud?

This page is about the domain name. If the scam pages sit on Alibaba Cloud's servers (an IP lookup shows it), the hosting route is the one that can take the content down. Report to both when the same company does both jobs.

How to report to Alibaba Cloud

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.

Scan a website