How to report a phishing site to PDR Ltd. (PublicDomainRegistry)

To report a phishing or scam site to PDR Ltd. (PublicDomainRegistry), email [email protected] or use PDR Ltd. (PublicDomainRegistry)'s report a phishing complaint.

Domain registrar: can suspend the domain name itself.

PDR Ltd., trading as PublicDomainRegistry.com (IANA ID 303), is a large ICANN-accredited registrar. PublicDomainRegistry says it sells domain registrations through a global partner network, so many domains it sponsors were bought from a reseller's website rather than from PDR directly.

That means the brand you see on the scam site's checkout or invoice may not be PDR. Look up the domain in WHOIS or RDAP: if the registrar field reads 'PDR Ltd. d/b/a PublicDomainRegistry.com', PDR is the accountable registrar and this is the right place.

PDR runs a set of reporting forms grouped on its 'Process For Handling Abuse' page. Phishing has its own form under the Domain Abuse heading.

How to reach them

Registrar abuse emailRegistrar abuse phoneReport a phishing complaint
  • You get a case ID to track the report
  • Organisations with many cases can attach them as a spreadsheet to the form

Reporting to PDR Ltd. (PublicDomainRegistry), step by step

  1. Confirm the registrar with a WHOIS or RDAP lookup on the domain.
  2. Open PublicDomainRegistry's 'Process For Handling Abuse' page and, under Domain Abuse, choose Phishing ('GET STARTED'), which leads to publicdomainregistry.com/phishing.
  3. PDR describes phishing as a link that tries to get usernames, passwords or card details, usually a login page disguised as a trusted brand. If the site is instead a 419 scam, Ponzi scheme or fake investment site, PDR lists a separate 'Scam website' form under Other.
  4. Fill in the domain name you are reporting, the specific details the form asks for, and the name and email address PDR can reach you on. Then click Send.
  5. If you prefer email, PDR's dedicated abuse contact is [email protected], phone +1-2013775952.

What PDR Ltd. (PublicDomainRegistry) asks you to include

  • PDR's table for phishing, malware and counterfeit reports asks for the domain name, the specific details requested in the form, and your name and email address.
  • Fields marked with an asterisk are required, according to PDR.
  • If you are an anti-spam or monitoring organisation with several cases, PDR asks you to put them in a spreadsheet and attach it to the form.

What PDR Ltd. (PublicDomainRegistry) can do

  • PDR's Abuse Team says that for intentional abuse the domain name will be suspended immediately.
  • For a compromised or hacked domain, PDR sends a warning to the registrant first, and suspends the domain if the reported content is not removed.
  • PublicDomainRegistry says it may also act when an activity breaks ICANN or registry policy.

What PDR Ltd. (PublicDomainRegistry) cannot do

  • PDR says it may not be able to give you specific updates on your report, for privacy reasons.
  • PDR's reporting process is built around the domain name. For intellectual property complaints it asks you to report to PDR only if the domain is hosted with PDR or its name servers show webhostbox.net. If the phishing page sits with another host, report it to that host as well.
  • Requests to see the non-public registration data behind a domain go through PDR's separate RDDS request form and its Data Request Policy, not through the phishing form.

What happens after you report

  • PublicDomainRegistry creates a unique case ID for each report and quotes it when it replies with its review and next steps.
  • PDR says it investigates and records every report, may ask you for more information, and may need to check the complaint with its customer.
  • You can watch the domain's status in a WHOIS lookup to see whether it has been suspended.

Write the report

Paste the link, phone number or email address and we'll write the message for PDR Ltd. (PublicDomainRegistry). You send it yourself.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.

Scan a website

Checked against PDR Ltd. (PublicDomainRegistry)'s own pages on 2026-10-20: