How should abuse reports be handled for affiliate sites using resellers?

[NiceNICDomainServer]

Affiliate sites often use separate providers for domains, hosting, email, DNS, and tracking.

When an abuse report comes in, it may not be clear which part caused the issue.

What is the fair process? Contact the reseller or host first when they can fix it, or take direct domain action when the evidence clearly shows domain abuse?

 

[jorge1243]

A fair approach is to first determine which provider is actually responsible for the issue. If the reseller, hosting provider or another service can resolve the abuse, contacting them first usually makes sense. However, if there is clear evidence that the domain itself is being used for abusive or malicious activity, direct domain action can be appropriate. The key is to base decisions on solid evidence and take action that is proportionate to the problem.

 

[Alamghir001]

I think the best approach is to contact the provider that can resolve the issue first. Domain action should usually be a last resort unless there's clear evidence of serious abuse.

 

[NiceNICDomainServer]

A fair approach is to first determine which provider is actually responsible for the issue. If the reseller, hosting provider or another service can resolve the abuse, contacting them first usually makes sense. However, if there is clear evidence that the domain itself is being used for abusive or malicious activity, direct domain action can be appropriate. The key is to base decisions on solid evidence and take action that is proportionate to the problem.

I think the best approach is to contact the provider that can resolve the issue first. Domain action should usually be a last resort unless there's clear evidence of serious abuse.

Yeah, I think that's the balance. Give the reseller/host a chance when it’s something they can fix, but don't wait around if it's obvious phishing or malware.

 

[ldmaestro]

fair way is to follow the part that can actually fix it first. hosting/email/tracking abuse should go to that provider with evidence, but if the domain is clearly used for phishing or malware then waiting around makes no sense. log everything and keep the action proportional.