Report abuse

Last updated: 2026-10-23

Use this page to report phishing, malware or other abuse involving a domain registered through SatsDNS, a zone served by our nameservers (ns1.satsdns.com, ns2.satsdns.com and the per-zone names under them), or a hostname under dynkite.com. We respond to every report within 5 business days.

Abuse email: abuse@satsdns.com

How to report

• Email abuse@satsdns.com. Name the domain or hostname in the subject or the text: an email that names one we serve or hold now opens a case by itself. An email our mail filter puts in spam opens one only if it passes SPF or DKIM for the sender's domain and does not look like bulk mail; otherwise it is read by a person first. At most 30 cases an hour are opened from email in all; an email beyond that opens its case in a later hour.
• The report form of the API (no account needed):

  curl -X POST https://api.satsdns.com/v1/abuse/reports \
    -H "Content-Type: application/json" \
    -d '{"domain": "example.com", "category": "phishing",
         "details": "https://example.com/login imitates a bank login page; seen 2026-10-21 14:05 UTC",
         "contact": "you@example.net"}'

  category is one of phishing, malware, spam, botnet, fraud, csam, trademark or other; details is 10 to 5,000 characters; contact is optional. The answer gives the report's id and the date by which we respond (respond_by). A name we do not serve or hold now gets 404 not_ours. The form accepts 5 reports an hour from one address, 10 from one network (IPv4 /24, IPv6 /48) and 30 in all.
• Nostr direct message to the address on the contact page. A direct message does not open a case by itself; for that, use email or the form.

What to include

• The domain or hostname, and the full URLs involved.
• What you saw and when (with the time zone): for example the page's text or a screenshot (by email), the headers of a spam or phishing email, or a malware sample's hash and where it was downloaded from.
• Do not send malware or illegal material itself. For child sexual abuse material, give only the URL, and report it to the authorities or a hotline as well.
• How to reach you, if you want an answer.

What we act on

• Phishing, malware, botnet command-and-control, fraud and scams, spam, and child sexual abuse material, involving names we serve or sold, and anything else our acceptable use policy does not allow.
• We act when we can confirm the report, and without notice where the harm is ongoing. Reports of phishing, malware and child sexual abuse material reach us at once.
• We do not host websites or email: the content itself is on someone else's server. Our levers are the DNS and, for domains registered through SatsDNS, the registration (see below).
• Trademark and other disputes about who should hold a domain name are decided under ICANN's UDRP or URS, or by a court. We carry out such decisions; we do not decide them ourselves. A name used to impersonate a brand for phishing or fraud is abuse: report it as such.
• Defamation, copyright and other complaints about content are for the site's host or a court. We act on a court order addressed to us.

What we can do

• Zones and hostnames: suspend (stop serving the records) or remove them, and block the name for new orders. See the acceptable use policy.
• Domains registered through SatsDNS: suspend the domain by pointing it at our nameservers and withdrawing any zone we host for it, and ask the sponsoring registrar to place it on hold or delete it. While we act on a confirmed case of phishing, malware or child sexual abuse material on a domain, its transfer code is withheld.
• Report illegal content or activity to the authorities where the law requires it.

Domains registered through SatsDNS

• Their sponsoring registrar is Global Domain Group LLC (IANA ID 3956), an affiliate of Dynadot Inc. The registrar's own abuse contact is shown in each domain's public registration data, for example through ICANN's lookup. You may report to the registrar as well as to us.
• Registrant contact data: WHOIS privacy hides the registrant's details from the public registration data. Requests for registrant data are answered by the registrar under its own disclosure policy.

How reports are handled and kept

• A report through the form, and an email to the abuse address that names a domain, zone or hostname served or sold here, opens a case automatically, with a due date 5 business days after receipt.
• We record when the report came in, its category, what we decided and what we did, and when.
• When a case is closed, we delete the report's text and the reporter's contact details. The domain, category, dates and action taken are kept as the record of the case.
• We do not pass your contact details to the domain's owner unless the law requires it.
• The sender address of an email can be forged, so we do not send details of a case to it before we have checked that it is really yours.

These pages are written in plain language and are not legal advice.