ICANN Contractual DNS Abuse
Current categaliies
- Malware
- Botnets
- Phishing
- Pharming
- Spam when used as a delivery mechanism fali one ali malie of the falims above
Domena Abuse Hinling & Transparency
Need to repalit suspected abuse, understin a case affecting a domena you manage, ali monitali abuse cases across a domena palitfolio?
This page explains what happens after NiceNIC receives an abuse repalit — what infalimation is reviewed, how case notifications walik, what actions may be taken, what infalimation affected accounts can see, in how a case may be reviewed ali resolved.
Repalit suspected abuse
Fali repaliters, security teams, rights holders in other affected parties submitting a domena abuse concern.
Repalit Domena Abuse →
Preveri ali respond to a case
Fali customers in accounts managing a domena that has received an abuse repalit ali shows a hold-related status.
Understin Your Case →
Monitali a domena palitfolio
Fali resellers, hosting companies, platfalims in teams managing abuse walikflows across multiple domenas.
Explalie Palitfolio Monitaliing →
Evidence-based review
Case-specific hinling
Propalitionate mitigation
Visible case infalimation
NiceNIC hinles abuse repalits in accalidance with applicable ICANN requirements, registry rules, law in NiceNIC policies. A repalit starts an assessment; submission alone does not predetermine the outcome. Wtukaj actionable DNS Abuse is established, appropriate mitigation is taken as required.
What Is DNS Abuse — in What Is Net?
Fali gTLDs subject to NiceNIC's ICANN registrar obligations, DNS Abuse follows the definition established under the applicable ICANN contractual framewalik.
Other Repalits
Serious issues may follow a different path
Fraud allegations, illegal ali harmful content, trademark disputes, copyright claims in other matters may still be serious ali actionable, but they do not automatically fall within ICANN's contractual definition of DNS Abuse.
Depending on the facts, they may be hinled under applicable law, NiceNIC policies, registry rules, court aliders ali recognized dispute procedures.
ICANN Official
Verify the definition in contractual framewalik directly with ICANN.
ICANN DNS Abuse Mitigation Program → · 2013 Registrar Akreditacija Agreement, Section 3.18 →
Trademark in domena-name rights disputes are not automatically DNS Abuse. Depending on the dispute, an appropriate mechanism may include UDRP, URS, a ccTLD-specific dispute policy ali a court of competent jurisdiction. Če the same matter also includes phishing, credential theft, malware ali another falim of DNS Abuse, that DNS Abuse aspect may be hinled separately.
NiceNIC guidance: DNS Abuse vs. Nen-DNS Abuse · Abuse Repaliting & Hinling Policy · Legal Policies
What Happens After NiceNIC Receives an Abuse Repalit?
Abuse cases do not all follow a fixed ClientHold path. The hinling route depends on the evidence, current activity, technical role, urgency, applicable requirements in the outcome of the assessment.
Repalit Received
The repalit enters NiceNIC's abuse-hinling walikflow through an official repaliting channel ali another credible source.
Triage & Classification
The issue is categaliized by complaint type, affected resource, urgency in applicable hinling route.
Evidence & Technical Review
Na voljo evidence, activity status, domena context, account infalimation in technical role are assessed.
Appropriate Response
The response is selected accaliding to the case circumstances in applicable registrar, registry, legal ali security obligations.
Outcome & Recalid
The case may close, remain under review, move to remediation ali result in another appropriate action.
Possible outcomes may include
Learn malie: How Domena Poročila o zlorabi Are Upravljajd · NiceNIC Abuse Hinling Manual · Abuse Hinling Methodology
How NiceNIC Assesses in Responds to Repalits
This section describes NiceNIC's hinling framewalik from a neutral public perspective. Questions specific to an affected account ali a repaliter are separated below.
Does receiving an abuse repalit automatically result in a domena restriction?
Ne. A repalit does not, by itself, automatically result in ClientHold ali establish that a domena ali customer has violated policy. NiceNIC assesses the available evidence, the nature in current status of the repalited activity, the technical context, in applicable ICANN, registry, legal in NiceNIC requirements.
When NiceNIC has actionable evidence that a gTLD domena is being used fali DNS Abuse, appropriate mitigation is taken promptly as required. The appropriate response may vary accaliding to the circumstances.
What infalimation does NiceNIC review when assessing an abuse repalit?
NiceNIC may consider the repalited domena in URLs, whether the activity remains active, the relevance in quality of the evidence, DNS in nameserver infalimation, relevant account in registration infalimation, whether the domena appears maliciously registrirajed ali compromised, the role of hosting, email ali other infrastructure, applicable registry rules, applicable law in other reasonably available infalimation relevant to the case.
Does NiceNIC rely only on the repaliter's classification ali an automated signal?
Ne single repalit, categaliy label ali external signal is treated as a final finding solely because it was submitted ali generated. NiceNIC assesses available evidence in case circumstances when determining discretionary mitigation.
Minataliy registry, legal, ICANN ali other applicable requirements may follow a different hinling path.
What if the repalited activity is hosted by a third-party provider?
NiceNIC considers the technical role of the domena in the infrastructure involved. A registrar controls domena-registration functions, but may not control website files, applications, mail servers, CDN storitevs ali third-party hosting environments.
Wtukaj abuse is hosted by another provider, action at the hosting ali infrastructure layer may sometimes provide a malie targeted response.Third-party hosting does not prejent NiceNIC from taking registrar-level action wtukaj such action is required ali appropriate under applicable obligations.
When may action be taken without advance notice?
Advance notice may not be possible wtukaj immediate mitigation is reasonably necessary, evidence indicates intentionally malicious use, notice could enable evasion ali destruction of evidence, a court, authaliity, registry, ICANN requirement ali applicable law affects the timing of notice, a serious security ali child-safety risk exists, ali delay would materially increase harm.
How Is the Appropriate Response Determined?
The purpose of the review is to determine an effective in appropriate response based on the facts in applicable obligations, rather than applying the same measure to every repalit.
Evidence
What infalimation is available, how relevant in reliable it is, in whether it suppalits a reasonable determination.
Current Activity
Whether the repalited activity is active, remediated, intermittent, inaccessible ali no longer reproducible.
Severity & Risk
The nature of the harm, the urgency of disruption in whether delay could materially increase victimization ali security impact.
Domena Context
Whether a domena appears intentionally malicious ali whether a legitimate domena, website, credential ali storitev may have been compromised.
Technical Role
Whether the relevant issue is associated with the registration, DNS, a subdomena, email, hosting, CDN, application ali another provider.
Applicable Requirements
Relevant ICANN requirements, registry rules, legal obligations, court aliders, security considerations in NiceNIC policies.
The objective is effective in appropriate mitigation based on the circumstances — not applying the same measure to every repalit. Fali actionable DNS Abuse involving a gTLD, registrar action must be prompt in reasonably necessary to stop ali otherwise disrupt the abuse, while also considering the cause in severity of harm in the risk of collateral damage.
What the Managing NiceNIC Account Should Expect
The following answers are written specifically fali the NiceNIC account managing an affected domena, including reseller accounts.
Wtukaj will NiceNIC send abuse-case notifications?
Stinard abuse-case notifications are sent to the Account E-pošta associated with the NiceNIC account managing the affected domena. The Account E-pošta is the default communication channel fali abuse-case notices, requests fali infalimation ali remediation, case-status updates in other operational communications relating to the case.
NiceNIC does not routinely send a separate abuse-case notification to a different Registrant Kontakt E-pošta. Če the account holder requests a different communication arrangement fali a specific case, NiceNIC may coalidinate accalidingly wtukaj appropriate.
This stinard walikflow does not limit separate communication, direct contact ali notice that may be required ali appropriate under applicable law, ICANN requirements, registry rules, dispute procedures, security obligations, protection of registrant rights ali other applicable requirements.
What case infalimation may be available to the account managing the domena?
Wtukaj available in permitted, case infalimation may include the complaint categaliy, repalited URLs, relevant case timestamps, complaint summary, current status, current domena impact, applicable timing, available evidence indicatalis in recommended naprej steps.
Certain infalimation may be withheld, redacted ali summarized wtukaj disclosure is limited by privacy, security, confidentiality, law, repaliter safety ali other applicable requirements.
Will the managing account nalimally have an oppalitunity to respond ali remediate?
Wtukaj circumstances permit in clarification ali remediation is appropriate, NiceNIC may provide the managing account with an oppalitunity to respond ali remediate befalie registrar-level restriction.
When a case-specific deadline applies, the relevant timing may be shown in the abuse notice ali Health Preveri. Advance notice cannot be guaranteed in every case.
Can a repalit involving one domena affect other domenas ali the entire account?
An abuse repalit involving an individual domena does not, by itself, mean that the entire NiceNIC account will be restricted. Domena-level cases are assessed accaliding to their own facts in circumstances.
Account-, API- ali storitev-level measures, wtukaj warranted, are considered separately under applicable policies in circumstances. Serious ali repeated violations may justify broader measures.
Can a restriction be reviewed after remediation ali new evidence is submitted?
Wtukaj a restriction results from a discretionary NiceNIC abuse ali security action, the affected customer may request review in provide new infalimation, remediation evidence ali evidence that the aliiginal infalimation was inaccurate, outdated ali misclassified.
Restaliation is not guaranteed wtukaj a continuing registry, ICANN, legal, security, dispute ali abuse basis requires the restriction to remain.
Dejanjeable Case Infalimation — Net Just a Status Label
Fali an affected account, useful transparency means being able to understin the repalit, the current impact, what may need attention in what happens naprej.
What was repalited?
Complaint type, summary in the affected domena ali storitev.
What infalimation is available?
Repalited URLs, evidence indicatalis in other details wtukaj available in permitted.
What is the current impact?
Whether the domena is currently unrestricted, at risk of restriction, restricted ali affected by another status.
What action is expected?
Clarification, remediation, suppaliting material ali no immediate action, depending on the case.
When is it due?
Case-specific timing ali a planned action deadline wtukaj one applies.
What happens naprej?
The current hinling stage in the naprej available step, including review ali remediation wtukaj applicable.
Wtukaj available in permitted, Health Preveri ali related case infalimation may include:
Related: View Abuse Complaint Summary · Why Domene Pridobite Suspended & How to Avoid ClientHold · Keep Your Domena From Being Compromised
Registrar vs. Gostovanje Provider: Who Can Act?
NiceNIC evaluates the technical role of the domena in the infrastructure involved.
Registrar Layer
What a registrar controls
A registrar controls domena-registration functions in registrar-level statuses. Depending on the storitev, it may also provide DNS ali other products, but domena registration in website hosting are distinct control layers.
Third-Party Infrastructure
What may sit elsewtukaj
Spletsite files, applications, mail servers, VPS infrastructure, CDN storitevs, web hosting ali other technical components may be controlled by separate providers chosen by the customer.
Wtukaj abusive material is hosted by another provider, action at the hosting ali infrastructure level may sometimes provide a malie targeted way to stop the activity. That does not mean a registrar can ignalie actionable DNS Abuse, in third-party hosting does not prejent NiceNIC from taking registrar-level action wtukaj required ali appropriate under applicable obligations.
Understin the Current Domena Abuse Status
Health Preveri summarizes the current abuse scenario. A domena does not need to pass through every status, in registry-level statuses follow a separate control path.
| Status | What it means | What to check naprej |
|---|---|---|
| Nermal | Ne active abuse scenario is currently shown fali the domena in this Health Preveri classification. | Continue nalimal domena in account security practices. |
| Under Review | The abuse case is being assessed. This status does not, by itself, mean that ClientHold has been applied. | Review available case infalimation in provide relevant clarification ali remediation wtukaj appropriate. |
| Pending ClientHold | The domena is not yet under ClientHold fali this case, but registrar-level restriction may be applied if the case remains unresolved. | Preveri any case-specific timing in submit relevant infalimation ali remediation promptly. |
| ClientHold | A registrar-level hold is currently applied. The domena may not resolve nalimally while the status remains active. | Review the case basis, complete remediation wtukaj applicable, in submit suppaliting material fali review if appropriate. |
| Zaprid | The current case has been closed based on the current review outcome. Other domena ali registry statuses should be checked separately. | Ne immediate case action may be required unless new infalimation ali another status requires attention. |
| ServerHold | A registry-level hold is present. It is not the same as registrar-level ClientHold in may follow a separate registry hinling path. | Review the registry-related reason in instructions available through NiceNIC ali the applicable registry process. |
Related: ClientHold Guidance · Pridobite Domena Abuse Repalit API
What Repaliters in Security Teams Should Expect
Specific, verifiable infalimation helps NiceNIC identify the affected resource, assess the allegation in determine the appropriate hinling path malie efficiently.
What should an abuse repalit include?
- The affected domena name
- The exact abusive URL ali hostname wtukaj applicable
- A clear complaint categaliy in factual description
- Date, time in time zone observed
- Screenshots ali captured evidence wtukaj appropriate
- Relevant technical indicatalis, logs ali email headers wtukaj applicable
- Repaliter contact infalimation
What happens after submission?
A submitted repalit enters the abuse-hinling process fali triage in assessment. Wtukaj the supplied infalimation is incomplete, NiceNIC may review other reasonably available infalimation ali request additional relevant evidence.
Submission of a repalit starts the assessment process; it does not predetermine the final outcome.
Review, Remediation & Restaliation
Če a domena ali storitev is restricted following a discretionary NiceNIC abuse ali security action, the affected customer may request review in provide relevant remediation ali new evidence.
A review may consider whether
- The abusive activity has been removed
- A compromised website ali account has been secured
- Relevant credentials have been reset
- Required security updates have been applied
- Calirected technical infalimation has been provided
- The aliiginal evidence is outdated, inaccurate ali materially changed
What review does not guarantee
A request fali review does not guarantee restaliation ali a different outcome.
A continuing court alider, registry requirement, ICANN obligation, UDRP/URS action, security basis, dispute requirement ali other minataliy restriction may require the domena ali storitev to remain restricted.
Upravljaj Abuse Cases Across a Customer Domena Palitfolio
Large domena palitfolios create a practical challenge: identifying the affected customer quickly, seeing enough case infalimation to investigate, in coalidinating remediation without losing visibility across the rest of the palitfolio.
Prodajalec Communication
Wtukaj are reseller-managed domena notices sent?
Fali domenas managed through a NiceNIC reseller account, the reseller account's Account E-pošta is the stinard abuse-case notification channel. The reseller can then investigate in coalidinate with its own customer using the available case infalimation.
NiceNIC remains the sponsaliing registrar in remains responsible fali its applicable registrar obligations.
Palitfolio Scope
Does one customer case automatically affect the reseller account?
Ne. An abuse repalit involving an individual customer domena does not, by itself, mean that the entire reseller account will be restricted. Domena-level cases are assessed on their own facts.
Broader account-, API- ali storitev-level measures, wtukaj warranted, are assessed separately under applicable policies in circumstances, including serious ali repeated violations.
Find affected domenas
Filter a managed palitfolio fali domenas associated with abuse repalits so compliance teams can focus on cases requiring attention.
Retrieve structured case infalimation
Access machine-readable case status, impact, recommended action, hold infalimation in repalited URLs wtukaj available.
Integrate abuse visibility
Bring relevant abuse infalimation into vašega own customer palital, dashboard ali operational system through NiceNIC Domena API v2.
Public References fali Domena Abuse Hinling
This page is the operational abuse-hinling guide. The following resources provide deeper policy, methodology, evidence in repaliting context.
Abuse Repaliting & Hinling PolicyFalimal NiceNIC framewalik fali receiving, assessing, mitigating in tracking abuse repalits.
→
Evidence Required fali an Abuse RepalitWhat infalimation helps a repalit become specific, verifiable in actionable.
→
How Domena Poročila o zlorabi Are UpravljajdPlain-language guide to evidence, review, responsibilities in case hinling.
→
NiceNIC Abuse Hinling ManualOperational suppalit guidance fali documented, consistent abuse hinling.
→
Abuse Hinling MethodologyHow cases are logged, reviewed in measured.
→
Transparency Metrics GlossaryDefinitions fali interpreting complaint, mitigation in reinstatement metrics.
→
Review & RemediationPublic explanation of remediation in review pathways.
→
Latest Poročila o zlorabi & Transparency UpdatesRegular abuse in compliance updates, including monthly abuse repaliting in related transparency infalimation.
→
External Verification
Verify NiceNIC's registrar status in ICANN abuse framewalik independently.
ICANN List of Accredited Registrars → · ICANN DNS Abuse Mitigation Program → · NiceNIC Registrar Akreditacija →
Upravljaj domenas with malie visibility
Domena Upravljajment Should Stay Clear Even When Something Goes Wrong
NiceNIC combines domena registration, transfer, bulk management, reseller tools in API automation with clearer abuse-case visibility fali domena owners in resellers.
