How to report a phishing site to OVHcloud
To report a phishing or scam site to OVHcloud, email [email protected] or use OVHcloud's abuse form.
Hosting provider: runs the servers the site is served from.
OVHcloud (OVH SAS, based in Roubaix, France) runs dedicated servers, VPS, public cloud and web hosting, and its footer also links the Kimsufi server brand. OVHcloud's Trust & Safety Team handles reports of illegal content on services it provides to its customers.
To see whether OVHcloud is the right place, look up the IP address of the phishing site. OVHcloud itself points reporters to a WHOIS lookup for this. In the RIPE database, OVH address blocks are registered to OVH SAS with [email protected] as the abuse contact.
OVHcloud's process is built around its customer: a valid report is passed to the customer, who is expected to fix the problem. Your explanation is sent on to them, so leave out anything you do not want the site owner to see.
How to reach them
- For an imminent threat, contact the authorities in your country first
Reporting to OVHcloud, step by step
- Read the terms of use for the abuse form, linked from ovhcloud.com/en/abuse/. OVHcloud says reports missing the required elements will not be considered.
- Open the Abuse Form at ovhcloud.com/en/abuse/ and choose the category "Phishing / Scam" (under Report illegal content).
- Fill in the URL or IP address, the legal basis, a description of why the content is unlawful, who you are, and a working email address.
- Check your inbox. OVHcloud emails you a link, and you must click it to validate the report. The form's Step 2 also lets you confirm a report by entering the Uuid you received by email.
- If you cannot use the form, OVHcloud accepts reports by post to OVHcloud, Trust & Safety Team, 2 rue Kellermann, 59100 Roubaix, France. Its footer also lists [email protected] for reporting abuse.
- If someone faces an imminent threat, OVHcloud tells you to contact the competent authorities in your country without delay.
What OVHcloud asks you to include
- The location of the content: a URL or an IP address.
- The legal basis, for example the article of the law the content breaks.
- A substantiated explanation of why the content or activity is unlawful. OVHcloud warns that this text is transferred to its client, so do not include confidential or personal details you want to keep private.
- Your identity: your name and surname as an individual, your company name and type as a business, or the authority name as a public body.
- An email address to receive the outcome. OVHcloud does not accept single-use email addresses.
- A declaration of good faith. OVHcloud reminds reporters that knowingly false reports may lead to legal action.
What OVHcloud can do
- OVHcloud says an admissible report is transferred to its customer so the customer can take the necessary corrective measures.
What OVHcloud cannot do
- OVHcloud says it will not consider reports that lack the required technical and legal elements.
- OVHcloud does not accept single-use email addresses for reports.
- OVHcloud says it accepts no responsibility for how the customer uses the information in your report.
What happens after you report
- OVHcloud confirms receipt by emailing the contact address you gave, and you must click the link in that email to validate the report.
- The Trust & Safety Team checks that the report is admissible, meaning it has everything needed to process it.
- If it is, OVHcloud passes the report to its customer to take corrective measures.
- Once the report has been processed, OVHcloud emails you to say it has been resolved and closed.
Write the report
Paste the link, phone number or email address and we'll write the message for OVHcloud. You send it yourself.
Not sure who hosts the site?
Scan it: we'll identify the host and registrar and give you the routes that apply.
Scan a websiteChecked against OVHcloud's own pages on 2026-10-20: