Fast, competent handling of a malware abuse report
I reported a typosquatted domain registered through Gname that was impersonating our site and distributing a Windows client containing a trojan — flagged by Kaspersky, ESET, DrWeb and several other engines on VirusTotal. The first response was a standard request for a trademark certificate, which we don't have. I replied explaining that this wasn't a trademark dispute but a malware distribution case under ICANN's DNS Abuse framework, and provided the VirusTotal report and file hash. The team re-evaluated it on that basis and placed the domain on Client Hold. What I appreciated: they were willing to look past the intake template and assess the actual evidence. Plenty of registrars would have closed the ticket the moment we said we had no registered trademark. Gname didn't, and a domain pushing a backdoor to end users is now offline. One suggestion: the evidence upload step only accepts images, so there's no way to submit a file hash, a sandbox report, or the sample itself as text or an attachment. For malware cases specifically, that makes documentation harder than it needs to be.