Skip to main content

How to Report Abuse

Report DNS abuse (phishing/malware/botnet). Registrar—not host. Content/DMCA/UDRP → provider. CSAM: no media—send hotline ID. Abuse desk: misuse@atom.com

Atom avatar
Written by Atom
Updated this week

Atom is a domain registrar. We provide domain registration and DNS management. We do not host website content or email. Use this page to quickly report DNS abuse and to find the right place for issues the registrar cannot handle.


Before you report (save time)

Use this quick check to avoid delays and reduce back‑and‑forth:

  • Is it DNS abuse? (phishing/credential theft, malware distribution, botnet C2, pharming/DNS hijack) → Yes: report to us below.

  • Is it website content, moderation, or commerce? (defamation, offensive content, counterfeit goods, non‑delivery/refund disputes) → Contact the hosting provider or platform. Registrars can’t remove site content.

  • Is it ordinary marketing spam? (no phishing/malware) → Report to the sender’s email service and your mailbox provider’s “Report Spam” tool.

  • Is it trademark/copyright? → Use UDRP/URS (trademark) or send a DMCA to the hosting provider/platform (copyright). Registrars do not adjudicate trademark rights and generally cannot remove content.

Find the hosting provider: Do an RDAP/WHOIS lookup for nameservers, or use your preferred hosting‑detection tool. If a CDN is used, report to the CDN and the origin host (if known).


How to contact us (24/7)

Public abuse desk: misuse@atom.com
Include domain/URL(s), description, evidence (screenshots, logs, timestamps+TZ; for email abuse: full headers), your contact info, and any provider ticket #.

Law‑enforcement & consumer‑protection authorities:
Phone: +1.844.447.7823 (intended for verified authorities)
Email: legal@atom.com (verified authorities only)

  • Include agency, officer/agent, callback number, case/reference ID, the domain/URL(s), and the specific records/actions sought.

  • Jurisdiction: We act on valid legal process from a competent authority. Outside the U.S., please use recognized channels (e.g., MLAT) or domesticate process in the U.S.

Civil/legal matters from private parties:
Email: compliance@atom.com (subpoenas, civil court orders, etc.)
Cost recovery: We may seek reasonable cost reimbursement for non‑government civil process (e.g., a $100 administrative minimum plus actual production costs). Fee waivers may be granted at our discretion.


Evidence checklist (what we need to verify)

Evidence is required. We must be able to verify the reported harm. Screenshots are strongly preferred. If a screenshot isn’t possible, provide full URL(s) and exact content; for email abuse, attach the message with full headers. Reports lacking sufficient detail may be returned for more information and cannot be actioned until evidence is provided.

Important — CSAM:

  • Do not send or attach CSAM images/videos or live CSAM links.

  • First report to your national hotline (e.g., NCMEC in the U.S.) and law enforcement.

  • Then email us the domain/URL(s) plus the hotline/LE report ID and (if available) the official confirmation/receipt showing the ID and date (redact sensitive victim info).

  • We will coordinate with authorities and take appropriate registrar‑level action without undue delay once verified.

  • We also accept hash/indicator references (e.g., PhotoDNA/Project Arachnid) from recognized child‑safety authorities.


Common non‑registrar issues — where to send them instead

Issue

Not a registrar function

Where to report

Trademark infringement

Registrars don’t adjudicate rights

File UDRP/URS or pursue court remedies; you may also contact the hosting provider for voluntary action

Copyright (DMCA)

Registrars can’t remove site content

Send a DMCA notice to the hosting provider/platform hosting the material

Ordinary spam (no phishing/malware)

Registrar generally won’t take action

Use your mailbox’s Report Spam; send to the sender’s email service abuse address

Payment/order disputes

Commerce issue, not registrar

Payment network (bank/card), marketplace/platform, or the merchant’s host

Content you dislike/offense

Content moderation is host/platform

Hosting provider, platform, or relevant authorities if illegal


Reporting guide by category (DNS abuse)

Category

Examples

Registrar role (what we do)

Where else to report / next steps

Phishing / credential theft

Login harvest pages, fake banking portals

Verify, suspend/lock domain or disable DNS when appropriate; notify registrant

Also report to the targeted brand’s security team and relevant national CERT

Malware distribution

Drive‑by downloads, payload hosting

Verify indicators, disable domain/DNS when appropriate; notify registrant

Share IoCs with AV vendors/CERT; contact hosting provider for file removal

Botnet C2 / fast‑flux

Domain used for C2 or flux networks

Coordinate with security researchers; suspend/lock when verified

National CERT, industry sharing groups

Pharming / DNS hijack

DNS records manipulated to redirect

Investigate DNS changes; secure account; may revert/lock domain

Hosting/DNS operator if third‑party; advise impacted parties

Spam (no phishing/malware)

Bulk unsolicited mail advertising

Typically out of scope for registrar action

Report to sender’s email service and receiving mailbox provider

Trademark infringement

Brand in domain (e.g., brand‑name‑shop.example)

Registrar does not decide rights

File UDRP/URS or pursue court remedies

Copyright infringement

Movies, images, code on the site

Registrar cannot remove content

Send DMCA/copyright notice to hosting provider/platform

CSAM or imminent threats

Child sexual abuse material, threats of violence

We cooperate with LE immediately; may lock/suspend

Do not send images/videos. Report to law enforcement and national hotlines (e.g., NCMEC) first; then provide the report ID and domain details


Receipt & handling (summary)

You’ll receive an email confirmation when you submit a report to our channels. We prioritize high‑severity DNS abuse and act without undue delay once verified. Other reports are reviewed as practicable based on severity and volume.


Contact

Did this answer your question?