How to report a phishing site to Namecheap Hosting

How to reach them

• For phishing, include the domain, the full URLs and the real site being copied
• Say which country you are in and which browser you used, since the page may only show to some visitors

Reporting to Namecheap Hosting, step by step

1. Find the site's IP address and check who owns it, as Namecheap suggests. Continue here if the lookup names Namecheap or shows a web-hosting.com server.
2. Email [email protected]. Namecheap's abuse help article gives this address for domains hosted with it and offers no web form for hosting complaints.
3. Give Namecheap's hosting team the domain, every phishing URL on the server, and the genuine site being copied.
4. Tell Namecheap where you are and what you used to view the page: the country of your IP address, plus your device and browser. Namecheap says it will test through a proxy in that country because scam pages are often geo-blocked.
5. Attach screenshots or a PDF rather than raw files; Namecheap's list of accepted attachment types is csv, doc, docx, eml, jpeg, jpg, pdf, png, txt, xls and xlsx.
6. If Namecheap replies, answer in that same thread and keep the engagement ID in the subject. If you find more scam pages later, add them to the same thread instead of starting a new complaint.

What Namecheap Hosting asks you to include

• Domain names and full URLs of the pages hosted on Namecheap.
• The legitimate website under attack.
• The country of your IP address, your device type (phone or PC) and your browser.
• For scams that took money, any invoices or receipts and a screenshot of the hosted page.
• Namecheap asks for safe evidence only: plain-text email headers, screenshots, de-fanged links, or a sandbox or VirusTotal report link. Do not forward the scam email itself or any malware file.

What Namecheap Hosting can do

• Namecheap says it may investigate the use of its hosting services for breaches of its policies.
• Namecheap's Hosting Acceptable Use Policy prohibits using a hosting account to deceive people about the user's true identity, to host viruses or similar harmful programs, or to run malicious software.
• Under the same policy, obscene or threatening material can be removed from Namecheap servers with or without notice and can lead to a warning, suspension or account termination without refund.
• Namecheap says it can terminate any hosting account that has stayed suspended for more than 14 calendar days unless the customer has fixed the violation.

What Namecheap Hosting cannot do

• Namecheap Hosting only controls pages stored on its own servers. If the scam domain merely points to another company's servers, Namecheap's hosting team has no files to remove and the report belongs with that other host.
• Namecheap says it may not reply to tell you the result of its investigation.
• Namecheap will not hand over the domain holder's contact details without that customer's consent, outside limited cases such as an official US court order or subpoena.

What happens after you report

• Namecheap says all complaints are investigated and that action follows when needed, in line with its policies.
• If the domain itself is also registered at Namecheap, a status of clientHold or serverHold in Namecheap's Whois lookup means the domain has been suspended as well.
• Namecheap gives 72 hours as its general abuse complaint processing time, saying it varies by case and is not a promise of when the problem will be fixed.

Write the report

Paste the link, phone number or email address and we'll write the message for Namecheap Hosting. You send it yourself.

Is the domain also registered with Namecheap?

This page is about content on Namecheap Hosting's servers. If the domain name itself is registered with Namecheap (the Registrar line in a WHOIS lookup shows it), the registrar route is the one that can suspend the name. Report to both when the same company does both jobs.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.