Abuse Handling Policy

1 Scope and service responsibilities

For domain registration, UltaHost means UltaHost Inc., an ICANN-accredited registrar. For hosting, the responsible provider is the UltaHost legal entity identified in the customer's service agreement. The government correspondence mailing address in this policy is for UltaHost Inc.; it does not designate an agent for a different group company.

This policy complements our applicable Terms and Conditions, registration agreements, Anti Spam Policy and Privacy Policy. Mandatory law, binding court orders and applicable ICANN or registry requirements govern where they require a different procedure. Country-code domains may be subject to different registry and dispute rules.

When we host the affected material, we can take measures at the content, hosting or account level. When we only register a domain, we generally cannot remove material from an independent host, but we can investigate and take appropriate registration-level action. This distinction does not limit our duties to mitigate DNS Abuse. If the service is outside our control, we will explain that limitation where appropriate.

2 Activity covered by this policy

We assess suspected unlawful activity and violations of the applicable service agreements. Reports may concern:

• DNS Abuse, including malicious software, botnet activity, phishing, deceptive DNS redirection known as pharming, and spam used to deliver these threats.
• Fraud, advance-fee scams, impersonation, credential theft and other deceptive activity.
• Unauthorized access, exploitation, denial-of-service attacks and abuse of our network or computing resources.
• Child sexual abuse material, child sexual exploitation, trafficking or online enticement.
• Copyright or trademark infringement, unlawful disclosure of personal information, threats, or other content alleged to violate applicable law.
• Inaccurate registration data, prohibited unsolicited messaging, or material and conduct prohibited by the applicable UltaHost agreement.

The classification of a report depends on its facts and applicable rules. A contractual content restriction does not necessarily mean that the material is illegal. Disputed civil claims may require determination by a court or an appropriate dispute-resolution provider.

3 How to submit an abuse report

Submit reports through https://ultahost.com/report-abuse or email [email protected]. The Report Abuse page provides the current DNS reporting form. For follow-up correspondence, use the case-specific reply address supplied in our notice and include the case reference. Live chat and general support can help route a concern, but they should not be the sole channel for an urgent report.

Provide enough information to locate the issue and assess the allegation. Include the following where relevant:

• The domain, exact URLs, IP addresses or other identifiers of the affected service.
• A clear explanation of the activity, the harm and the legal or contractual basis for the report.
• Dates, times and time zone, together with relevant logs, full email headers, screenshots or other reliable evidence.
• Your contact details and authority to act for a rights holder or organization, where applicable.
• Any urgency, current risk to people or systems, and relevant court order or official case reference.

Submit accurate information in good faith. Redact unrelated personal or confidential information, while preserving information necessary to verify the allegation. Do not send passwords, executable malware, or copies of suspected child sexual abuse material through ordinary email or the reporting form. For suspected child exploitation, provide locations and identifying details without downloading or redistributing the material.

We may request clarification when information is insufficient. An incomplete report does not prevent us from acting where the information already available establishes a risk or a legal duty. We may consolidate duplicate reports and close demonstrably unfounded or abusive submissions, subject to applicable law.

4 Acknowledgment and investigation

We confirm receipt and track the report. We assess whether the affected service is under our control, examine the available evidence, prioritize the risk and determine the appropriate response. An acknowledgment confirms receipt; it does not establish that the allegation is correct.

We may seek information from the customer, reporter, host, registry, security specialists or appropriate authorities where lawful and useful. We do not require proof of a customer's malicious intent before addressing an active threat.

Urgent threats receive priority. Other cases are handled promptly in light of their complexity, the available evidence and applicable deadlines. We provide decisions, reasons and available remedies where required by law. Otherwise, we provide appropriate updates when practicable. Resolution timelines depend on the nature of the issue, necessary verification and the applicable procedure.

5 Protective action and customer notification

We select measures reasonably suited to stop or reduce the harm, taking account of urgency and the effect on legitimate users. Measures may include requesting correction, removing or restricting identified hosted material, isolating an affected service, limiting network traffic, disabling a hosting account, or applying an appropriate domain restriction. Termination, cancellation or transfer will be used only where permitted or required by the applicable agreement, law or domain procedure.

Where actionable evidence establishes DNS Abuse involving a domain we sponsor, we act promptly to interrupt the abusive use. A compromised legitimate website may require targeted remediation, while a domain established for malicious activity may require immediate suspension. The action depends on the evidence and the practical measures available.

We may act without advance warning when necessary to address an urgent threat, prevent continuing harm, comply with a legal obligation or preserve evidence. In other cases, we may notify the customer and specify a reasonable correction period. A warning period is not an entitlement to continue harmful activity and does not postpone a mandatory response.

We provide the affected customer with notice, reasons and review information as required by law and the applicable procedure. Notice may be delayed or limited where lawfully necessary, including under a binding nondisclosure requirement. A complainant's unsupported demand does not by itself determine the outcome.

6 Registration data inaccuracy

Reports about inaccurate registration data should identify the domain, the information alleged to be incorrect and supporting evidence. Redacted or privacy-protected public records are not, by themselves, evidence of inaccuracy. We investigate credible reports and contact the registrant for correction, validation or verification under the applicable ICANN and registry rules.

Registrants must maintain accurate contact information. For gTLD registrations subject to ICANN's accuracy requirements, changed contact information must be updated within seven days. Deliberately supplying inaccurate information, deliberately failing to update it, or failing to respond for more than fifteen calendar days to an accuracy inquiry is a material breach. When these conditions are met, we apply the suspension, termination or hold measures required by the applicable accuracy rules.

Restoration requires satisfactory correction and the necessary verification, together with resolution of any separate grounds for restriction. Registration Data Access Protocol, or RDAP, is the principal public registration-information service for gTLDs; references to WHOIS include any relevant legacy registration-data service.

7 Phishing, malware and financial scams

For phishing, malware, pharming or scams, identify the exact location, observed behavior, affected organization or victims, and any technical evidence. Where content varies by country, device or browser, explain how to reproduce the issue safely.

We investigate and apply prompt, appropriate protective measures when the evidence supports action. These may include immediate restrictions without prior notice. Compromised customers may be required to remove harmful material, address the cause of compromise, secure credentials and provide evidence of remediation. A customer's lack of involvement in the original compromise does not prevent necessary protective action.

8 Child sexual exploitation and urgent safety threats

Child sexual abuse material and other forms of child sexual exploitation are prohibited. Suspected cases receive urgent review. We restrict affected services where warranted, safeguard relevant evidence and make reports to the National Center for Missing and Exploited Children or other competent authorities when required by applicable law.

We handle suspected material and associated information through restricted, secure procedures. Customers must not destroy evidence subject to a lawful preservation requirement. Reporters should provide URLs and identifying details without attaching or redistributing the suspected material. For an immediate danger to a person, contact the appropriate emergency services as well as our abuse team.

9 Copyright complaints and the DMCA

We assess copyright complaints under the law applicable to the responsible provider and service. Where the United States Digital Millennium Copyright Act applies, notices and counter-notices must be sent to our designated DMCA agent using the contact details in section 16. A copyright notice must contain:

• A physical or electronic signature of the copyright owner or authorized representative.
• Identification of the copyrighted work, or a representative list where the permitted multiple-work procedure applies.
• Identification and precise location of the material to be removed or disabled.
• Contact information sufficient to reach the complaining party.
• A good-faith statement that the disputed use is not authorized by the rights holder, its agent or the law.
• A statement of accuracy and, under penalty of perjury, authority to act for the owner of the exclusive right concerned.

For a substantially compliant notice concerning material covered by the applicable DMCA procedure, we act expeditiously to remove or disable access and promptly notify the affected subscriber. We may request missing information or consider other lawful grounds for action.

The affected subscriber may submit a signed counter-notice identifying the material removed or disabled and its former location, stating under penalty of perjury a good-faith belief that the restriction resulted from mistake or misidentification, and providing the subscriber's name, address and telephone number. It must include consent to jurisdiction of the United States federal district court for the judicial district where the subscriber's address is located. For an address outside the United States, consent must cover any judicial district where the responsible service-provider legal entity may be found. The subscriber must also accept service from the original notifier or its agent.

We promptly forward a valid counter-notice to the original notifier and inform that party that access will be restored in ten business days. Under the applicable DMCA procedure, we restore access no earlier than ten and no later than fourteen business days after receiving the counter-notice, unless our designated agent receives notice that the notifier has filed an action seeking a court order restraining the subscriber's infringement relating to the material on the responsible provider's system or network. Separate lawful grounds for a restriction remain subject to their own requirements.

We terminate repeat infringers in appropriate circumstances and accommodate qualifying standard technical measures as required by applicable law. Knowingly making a material misrepresentation in a DMCA notice or counter-notice may expose the sender to liability. Domain registration alone does not give us control over copyrighted material held by an unrelated host.

10 Trademark and domain disputes

Trademark complaints should identify the rights relied on, the disputed domain or material, and the basis of the alleged infringement. Domain ownership disputes may be addressed through a competent court, the Uniform Domain Name Dispute Resolution Policy, or UDRP, or the Uniform Rapid Suspension System, or URS, where applicable. WIPO is one of the approved dispute-resolution providers.

For a properly initiated UDRP case, we apply the required administrative lock and cooperate with the approved provider. A UDRP lock ordinarily preserves the registration against specified changes; receipt of a complaint does not by itself suspend domain resolution. A separate lawful abuse or court-order restriction may still apply.

We implement UDRP decisions under the applicable procedure. For a transfer or cancellation decision, this includes the mandatory ten-business-day waiting period after provider notification and the provisions that pause implementation following timely documentation of qualifying court proceedings.

Where URS applies, we cooperate with the approved provider and registry operator and perform our registrar duties. Registry locks and suspensions follow the applicable URS procedure. Each dispute mechanism has its own requirements and implementation timetable.

11 Other unlawful or prohibited content

For other content complaints, identify the exact material, explain the alleged violation and provide supporting facts and any relevant legal decision. We assess the report under applicable law and the relevant service agreement, distinguishing disputed allegations from established facts.

We may request customer clarification, seek corrective action, apply an appropriate restriction, or direct the parties to a competent decision-maker where a civil dispute requires adjudication. We do not impose a universal warning period where immediate action is required. We do not undertake to review all customer content in advance; our reporting and response duties remain subject to applicable law.

12 Government, law enforcement and cross-border requests

Government agencies, law enforcement authorities, courts and other authorized parties from any country may submit abuse reports, preservation requests and requests for information to [email protected]. Identify the relevant UltaHost legal entity and service. The mailing address in section 16 receives government and legal correspondence for UltaHost Inc. Authorities reporting domain abuse may also use [email protected]. Use an electronic channel for urgent matters and send an electronic copy of a time-sensitive postal request where lawful. Postal delivery is not an emergency reporting mechanism.

We distinguish reports of suspected abuse from requests to remove or restrict content, preserve records, or disclose customer information. We may investigate a supported abuse report without a disclosure order. Each request for additional action is assessed under the legal and contractual requirements applicable to that action. Receipt or acknowledgment does not establish valid service of process, jurisdiction or authority to disclose information.

Well-founded illegal-activity reports covered by section 3.18.3 of the Registrar Accreditation Agreement are reviewed within twenty-four hours by personnel authorized to take appropriate action. This review requirement is separate from a guarantee of final resolution or disclosure. Valid requests and orders are handled within the deadlines prescribed by the applicable procedure, including any mandatory urgent deadlines.

Requests should identify the requesting authority and officer, provide verifiable official contact details, state the legal basis and jurisdiction, identify the relevant entity and service, and describe the records or action sought, date range and deadline. Include a complete copy of the legal process and any claimed nondisclosure requirement.

We review authenticity, legal validity, jurisdiction, scope, the type of information requested and any conflicting obligations. We disclose information only when legally required or otherwise lawfully permitted, and only to the extent supported by the applicable legal basis. We may seek clarification, request narrowing, refer the requester to the appropriate entity or procedure, or challenge a request where permitted. An abuse allegation alone does not authorize access to customer records.

Cross-border requests are assessed under the laws applicable to the entity, service and data concerned. Depending on the circumstances, the appropriate route may involve domestic legal process, mutual legal assistance, a recognized international agreement, qualifying European Production or Preservation Orders, or another lawful mechanism. Where a designated establishment, legal representative or prescribed delivery channel is required by law, the applicable procedure must be followed. A foreign official letter or court order does not, by itself, establish a lawful basis for disclosure. The country of storage, customer residence or correspondence address does not alone determine every applicable jurisdiction.

Where personal information is protected by applicable privacy law, we assess the required processing basis and any requirements for transfers between countries. Preservation does not itself authorize disclosure. Any required notification, confidentiality, challenge or redress procedure follows the rules applicable to the request.

Emergency requests must explain the immediate threat, why action or disclosure cannot await ordinary legal process, why the requested information is necessary, and how the authority can be authenticated. We prioritize these requests and apply any legally required emergency procedure. Any emergency disclosure remains subject to the legal requirements applicable to the information. We consider customer notification where lawful, subject to binding restrictions and legitimate safety concerns.

13 Preservation, privacy and records

Preservation and disclosure are separate processes. We preserve relevant existing records when required by a valid legal obligation. For a qualifying United States government request under 18 U.S.C. 2703(f), the statutory period is ninety days, with an additional ninety days on a renewed request. Other preservation duties, including duties relating to reports of child exploitation, may require different periods and safeguards.

We document abuse reports and our responses and retain the related registrar records for the period required by the RAA and applicable law. Other records follow the relevant retention requirements and lawful preservation holds. Access is limited to authorized personnel and parties with a lawful basis.

We use and share report information only for lawful purposes, including investigating the allegation, contacting the affected customer, mitigating harm and meeting legal obligations. Relevant information may be shared with authorized service providers, registries or competent authorities where lawful and necessary. We do not guarantee a reporter's anonymity and may need to share the substance of a complaint. We do not disclose unnecessary personal information or confidential investigation details.

14 Requests for nonpublic registration data

Requests for nonpublic domain registration data must follow our separate process at https://ultahost.com/non-public-registration. An abuse report does not itself constitute an approved disclosure request. Requesters must identify themselves and their authority, specify the requested data, explain the legal basis and purpose, affirm good faith and undertake to process any disclosed data lawfully.

For properly formed requests covered by the ICANN Registration Data Policy, we acknowledge receipt without undue delay and within two business days, and respond without undue delay and within thirty calendar days after acknowledgment, absent exceptional circumstances. Our response provides permitted data or explains any refusal. Urgent requests are prioritized and handled under applicable law and any ICANN urgent-request requirements that have taken effect.

15 Review and restoration

A customer or reporter seeking review should reply through the case-specific channel or contact [email protected] with the case reference, disputed decision and supporting evidence. We review the challenged decision and the supporting information and correct or modify the decision where warranted. We provide applicable review or redress information. Where law requires a particular notice, appeal or complaint procedure, that procedure and its deadlines apply.

For reinstatement, the customer must provide credible evidence that the relevant issue and its cause have been addressed, including required security remediation or registration verification. Filing a review request does not automatically lift a restriction. Restoration remains subject to applicable legal process, registry or dispute rules and any independent unresolved ground for restriction. DMCA counter-notices follow section 9 rather than a general appeal process.

16 Contacts and addresses

General abuse reports by email: [email protected]

Government notices and legal correspondence by email: [email protected]

Online reporting: https://ultahost.com/report-abuse

Authority abuse reports: [email protected]

Government and legal correspondence mailing address
UltaHost Inc.
Attn: Legal and Compliance
8 The Green #4969
Dover, DE 19901
United States

The Dover address receives correspondence. Formal service must comply with the applicable procedural rules and the authority of the recipient. Publishing an address or receiving a copy does not waive objections to jurisdiction, sufficiency or service. Electronic service is accepted only when valid under applicable law or specifically agreed by an authorized representative.

DMCA designated agent
Abuse Department
UltaHost Inc
651 N Broad St, Suite 206
Middletown, DE 19709
United States
Telephone: +1 302-966-3941
Email: [email protected]

17 Policy administration and reserved rights

Customers remain responsible for compliance with their applicable agreements and law. This policy explains our handling procedures and does not guarantee that every report will result in removal, suspension, compensation or disclosure. Refunds, liability limits, indemnities and other contractual remedies are governed by the applicable service agreement and mandatory law.

We may update this policy to reflect changes in law, domain requirements and our services. Updates and any required customer notice follow applicable law and the relevant agreement. Nothing in this policy limits mandatory customer or complainant rights, or relieves UltaHost of a duty that applies to the responsible provider.