How to report a phishing site to Hostinger

How to reach them

Hostinger lists two routes: the Report Abuse page and [email protected]. Its help article says phishing sites hosted on Hostinger go to [email protected].

• Include the full URL, not just the domain.
• Attach a screenshot and the date/time you saw it.
• State plainly that it is phishing or fraud, and what it impersonates.

Reporting to Hostinger, step by step

1. Email [email protected]. Hostinger's help article says reports of phishing websites, malware, spam or other abusive content hosted on Hostinger should go to that address and are handled by its Abuse team.
2. As an alternative, Hostinger's policy points to its Report Abuse page at hostinger.com/report-abuse. Hostinger says both channels take submissions 24 hours a day, 7 days a week.
3. Do not use Hostinger's security vulnerability form. Hostinger says that form is for bugs in its own systems under its Bug Reward Program, not for phishing sites.
4. Put the full link to the fake page and the reason it is fraudulent near the top of the message, then attach your screenshots.
5. If you are in India, Hostinger says a report may also count as a grievance under the India IT Rules, and grievances can go to its Grievance Officer at [email protected].
6. Keep any reference number Hostinger sends back so you can quote it later.

What Hostinger asks you to include

• The domain name, URL, IP address or another precise location of the scam content.
• A description of the abuse and why you believe it is unlawful or abusive, for example which bank or brand the page copies.
• Supporting material such as screenshots, the headers and text of any phishing email that linked to the site, logs and timestamps.
• Your name and an email address, unless the law says these are not needed. By sending the report you confirm to Hostinger that it is accurate and made in good faith.

What Hostinger can do

• Hostinger says it may ask the customer to fix the problem, restrict or disable access to content or services, or suspend or terminate the customer's services.
• In serious or urgent cases Hostinger says it may act without telling the customer first, and may preserve information or report the matter to law enforcement.
• Hostinger says it may prioritise reports about serious risks to people's safety and reports from authorities and Trusted Flaggers.

What Hostinger cannot do

• Hostinger says it is not generally required to monitor what customers store or to look for illegal activity itself, so it depends on reports like yours to find a scam site.
• Hostinger says a report does not guarantee any particular outcome, and that it may decide no further action is needed on the information it has.

What happens after you report

• Hostinger says it records each report and checks whether it relates to Hostinger's services and has enough information. It may come back to you, the customer or others for more detail.
• Hostinger may confirm receipt and give you a reference to track the report. Where the law requires it and you gave contact details, it will confirm receipt and tell you its decision and any redress options.
• Hostinger may share the report with its customer to verify the claims or ask for a fix. It says your identity is passed to the customer only where strictly necessary, and it may redact what is not needed.
• The customer may be allowed to respond or remedy the problem, and Hostinger may reconsider its action if they do. Hostinger publishes figures on content moderation in its EU DSA Transparency Reports.
• Hostinger says it aims to carry out an initial review within 24 hours of receiving a report; further assessment or resolution can take longer.

Write the report

Paste the link, phone number or email address and we'll write the message for Hostinger. You send it yourself.

Is the domain also registered with Hostinger Domains?

This page is about content on Hostinger's servers. If the domain name itself is registered with Hostinger Domains (the Registrar line in a WHOIS lookup shows it), the registrar route is the one that can suspend the name. Report to both when the same company does both jobs.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.