Short answer
Send the full phishing URL, screenshots of the live page and your official site to Tucows through its abuse email [email protected]. Tucows replies with a case number, and for a clear phishing site says it will "expeditiously reset its Name Servers".
Who this is for: Teams that found a phishing copy of their site on a Tucows domain.
Where to report a domain to Tucows
| Abuse page | tucowsdomains.com/report-abuse/ |
|---|---|
| Phishing report form | bullwark.tucows.com/report |
| Abuse email | [email protected] (its abuse contact in registration data) |
| IANA ID | 69, 48 |
| Also covers | Hover, OpenSRS and eNom |
Not sure the domain is with Tucows? Check it in our abuse contact lookup: it reads the registrar from RDAP.
What Tucows asks for
- The form first sends a verification code to your email.
- Then your name, email, organization and role, and the type of abuse.
Take full-page screenshots that show the address bar before you report: the page may be gone or hidden from you later. Our takedown request template covers all of the above.
What to expect
Tucows replies with a case number, and for a clear phishing site says it will "expeditiously reset its Name Servers".
Accredited registrars of generic domains must act on actionable evidence of phishing under their ICANN contract. If nothing happens, see how to escalate to ICANN.
Report it here too
- The host. The registrar controls the domain, the host controls the site. The lookup shows when the site sits behind Cloudflare.
- Browsers. Google Safe Browsing and Netcraft make browsers warn visitors, often before the domain is suspended.
- Wallets. See how to report a phishing site to wallets.
Sources
Frequently asked questions
How do I know a domain is registered with Tucows?
Look the domain up in RDAP: our free abuse contact lookup or ICANN Lookup shows the registrar, its IANA ID and its abuse contact.
What if Tucows does not act on my report?
Reply with new evidence, then file a DNS abuse complaint with ICANN Contractual Compliance and attach your report. Meanwhile report the site to Google Safe Browsing and Netcraft so browsers warn visitors.