Short answer
Send the full phishing URL, screenshots of the live page and your official site to Hostinger through its abuse email [email protected]. Hostinger says: "We aim to conduct an initial review within 24 hours after receipt." Its abuse channels are open 24/7.
Who this is for: Teams that found a phishing copy of their site on a Hostinger domain.
Where to report a domain to Hostinger
| Abuse page | www.hostinger.com/legal/abuse-policy |
|---|---|
| Phishing report form | www.hostinger.com/report-abuse |
| Abuse email | [email protected] (its abuse contact in registration data) |
| IANA ID | 1636 |
Not sure the domain is with Hostinger? Check it in our abuse contact lookup: it reads the registrar from RDAP.
What Hostinger asks for
- The URL, domain or IP address.
- A description of the abuse.
- Evidence: screenshots, email headers, logs and timestamps.
- Your name and contact details.
Take full-page screenshots that show the address bar before you report: the page may be gone or hidden from you later. Our takedown request template covers all of the above.
What to expect
Hostinger says: "We aim to conduct an initial review within 24 hours after receipt." Its abuse channels are open 24/7.
Hostinger is both a registrar and a host, so one report can cover the domain and the site.
Accredited registrars of generic domains must act on actionable evidence of phishing under their ICANN contract. If nothing happens, see how to escalate to ICANN.
Report it here too
- The host. The registrar controls the domain, the host controls the site. The lookup shows when the site sits behind Cloudflare.
- Browsers. Google Safe Browsing and Netcraft make browsers warn visitors, often before the domain is suspended.
- Wallets. See how to report a phishing site to wallets.
Sources
Frequently asked questions
How do I know a domain is registered with Hostinger?
Look the domain up in RDAP: our free abuse contact lookup or ICANN Lookup shows the registrar, its IANA ID and its abuse contact.
What if Hostinger does not act on my report?
Reply with new evidence, then file a DNS abuse complaint with ICANN Contractual Compliance and attach your report. Meanwhile report the site to Google Safe Browsing and Netcraft so browsers warn visitors.