Report domain abuse
Email abuse@serallo.co.uk to report suspected phishing, malware, fraud, spam, unlawful use, rights infringement or another security concern involving a domain associated with Serallo. You do not have to be a customer.
You can also use this address to report a security concern about the Serallo website.
The abuse mailbox is monitored at reasonable intervals by a person authorised to investigate and act on actionable reports. It is not an emergency service or a promise of continuous 24-hour monitoring.
What to include
Give the exact domain and relevant URL, a description of the suspected abuse, the date and time observed including the time zone, and a reply address where possible. Safe screenshots, relevant email headers or a short log extract can help. For a rights complaint, identify the right concerned and your authority to act.
Do not put yourself at risk to gather evidence. Do not send live malware, illegal images, passwords or unnecessary sensitive data. A description and safe reference are normally sufficient for an initial report.
Acknowledgement and review
We aim to acknowledge abuse reports within two working days and will acknowledge receipt within no more than five working days where a usable reply address is available. A report does not need to be proven actionable before we acknowledge it.
We review reports as soon as reasonably practicable and prioritise credible indications of immediate harm. We assess the evidence, whether we control the domain and what action is available. We may seek further details where necessary.
Investigation and action
We take proportionate action where required by law, registry policy, a valid order or the findings of an investigation. Depending on our actual control and the circumstances, this may include securing an account, changing or disabling a configuration within our control, preserving relevant evidence, or contacting the hosting provider, registrar, registry or law enforcement.
We cooperate with lawful requests from competent authorities and applicable registry processes. A report alone does not automatically establish abuse, justify suspension or entitle the reporter to a domain transfer.
We aim to resolve routine reports within five working days. If investigation continues, we provide an update at least every five working days unless disclosure is legally prohibited or would compromise the investigation; we will provide a limited lawful update where possible. We may not be able to share confidential security information.
Limits of our role and domain disputes
A registrant, registrar, website host and content operator can be different organisations. We cannot remove content or change registrations outside our control. Where lawful and appropriate, we may direct a report to the responsible party. A historical website or use of a name is not, by itself, evidence of a connection with Serallo.
Concerns about rights in a .UK domain can be pursued through the appropriate legal route, including Nominet’s DRS guidance and current submission route. This is separate from reporting technical abuse.
Urgent risks, complaints and privacy
Where someone is in immediate danger, contact emergency services. Serious suspected crime should also be reported to the appropriate law-enforcement body rather than relying solely on email.
If you believe we mishandled a report, use our Complaints Procedure and Escalation. Our privacy policy explains how report information is used. Do not assume a report is legally privileged or that absolute confidentiality can be guaranteed.