How to report a phishing site to Hetzner

How to reach them

• Choose the type of violation and give your evidence

Reporting to Hetzner, step by step

1. Open abuse.hetzner.com. The root URL shows German; use abuse.hetzner.com/en for English. No account is needed.
2. Step 1: under "Type of abuse" pick Phishing. The other choices are Spam, Attacks/DDoS, Copyright/Trademark Violations, GDPR, CSAM and Other.
3. Step 2: enter the domain, the IP address, a description, and optionally a log extract and an attachment. Hetzner asks for one form per domain; several links on the same domain can go in one report.
4. Step 3: enter your name and email and choose whether Hetzner may forward your full report, including your name and email, to its customer.

What Hetzner asks you to include

• The domain, with links on that domain.
• An IP address. The field is labelled "Sender's IP address (optional)", but when we tried the form on 19 October 2026, it would not move to step 3 without a valid public IP.
• A description.
• Optionally a log extract and an attachment (.jpg, .jpeg, .png, .txt or .pdf, up to 15 MB).

What happens after you report

• Hetzner says it may need to forward your report to its customer, because for some products it has no access to the affected systems.
• Hetzner says it does not check the description, log extract or attachments for personal data before forwarding them to the customer.
• If the customer needs your personal details and you have not agreed, Hetzner says it will ask for your consent first. If you refuse, the customer may not be able to act and Hetzner may close the report.

Write the report

Paste the link, phone number or email address and we'll write the message for Hetzner. You send it yourself.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.