Why does this tool show me the address instead of asking for my email first?

Because an abuse contact is a public fact and holding it hostage would be a trick, not a service. The address, the form URL and the channel are returned in full on the first run, with no account and no email.

What does the abuse@ fallback mean?

It means nothing better was published. RFC 2142 reserves abuse@ on every domain, so the address is well-formed and worth sending to, but no host has confirmed it is monitored. Treat a silent reply as uninformative rather than as a refusal.

The lookup returned a web form instead of an email. Why?

Some hosts act only on their own form and discard abuse email entirely. Where openDMCA has filed against a host before and learned that, the curated route points at the form, because sending email there is a week spent on nothing.

Does looking up an abuse contact tell the host about me?

No. The lookup reads a registry record and openDMCA's own routing table. Nothing is sent to the host, and the host learns nothing until you choose to file.

How many lookups can I run for free?

Twenty an hour, on a rolling sixty-minute window, per network and browser. Every one of those returns the complete answer. What an account changes is scale and scheduling, not what a single lookup shows you.

Abuse Contact Lookup — Find Where a Takedown Notice Actually Goes

The address a takedown notice should go to is published in one of three places: a host's own abuse page, the domain's RDAP registry record, or the RFC 2142 convention that reserves abuse@ on every domain. Paste a URL and openDMCA resolves the ladder and names which rung answered.

Given a URL, produce the actual abuse contact and the channel that works for that host, in under 10 seconds.

Free: 20 lookups an hour. Every lookup returns the real address or form URL in full — there is no masked, partial or account-gated version of this answer.

The URL you paste is resolved and then discarded. openDMCA caches the abuse address for the domain, which is a public registry fact and carries nothing about you, and keeps a hashed rate-limit key.

How to find a site's abuse contact by hand

An abuse contact is published in one of three places, and they are worth trying in this order because the earlier ones are both more accurate and more likely to be read.

The site's own pages. Try /dmca, /abuse, /copyright, /legal and the terms of service. A host that has registered a DMCA agent with the Copyright Office usually names them here, and that is the address with the strongest obligation attached.
The domain's registry record. RDAP replaced WHOIS and returns structured JSON at rdap.org/domain/example.com. Look for an entity with the role abuse and read the email out of its vCard. Where the domain uses privacy protection, the registrar's own abuse address appears instead, which still works — registrars act on repeat infringement.
The RFC 2142 convention. The standard reserves abuse@ on every domain for exactly this. It is a fallback rather than a promise: it reaches many hosts and is silently discarded by some.

One more step matters and is easy to skip: check whether a CDN sits in front of the host. When the host ignores a notice, the CDN is a separate channel with its own abuse contact, and the site's public DNS records name it — the nameservers identify the DNS operator and a CNAME identifies the CDN.

Where looking up each abuse contact by hand stops working

Finding one abuse contact takes about ten minutes. The method breaks in three specific ways, and none of them is about the lookup itself.

The published address is often not the working one. Plenty of hosts publish an abuse mailbox that bounces, or that nobody reads, while acting reliably on a web form buried three clicks deeper. You find that out by sending a notice and waiting a week for nothing to happen.

Contacts move. Aggregators change registrars, move behind a new CDN, and rotate abuse addresses. A contact list built in March is wrong by September, and it fails silently.

Some hosts never comply, and the time spent proving it is the real cost. Two rounds of email to a host that has never removed anything is roughly nine days spent to learn something the previous complainant already knew.

openDMCA keeps that knowledge instead of rediscovering it. Each resolved takedown records which channel worked for which host, so the next notice takes the shortest path that has historically worked — including skipping a host with a low removal rate straight to search delisting. See how openDMCA routes and escalates a takedown.

Abuse contact lookup