Hetzner: phishing domains and abuse response

PhishDestroy reported 33 phishing domains registered with Hetzner between 2026-01-02 and 2026-06-18, sending 33 abuse reports. Median time from the first report until a domain stopped resolving: 19.3 days (n = 11). 14 of 25 domains were still active 90 days after the first report. The database holds 33 Hetzner domains in total.

33
Domains reported (window)
33
Abuse reports sent
19.3 days
Median time to unavailable
33
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 22 (67%); Offline 10 (30%); Suspended 1 (3%).

90th percentile time to unavailable: 26.1 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. Google4
  2. Bancobradesco2
  3. WeTransfer1
  4. Microsoft1
  5. Netflix1
  6. Pedagiodigital1
  7. Spotify1
  8. Coinbase1

Top-level domains

  1. .net17
  2. .com8
  3. .de2
  4. .ng1
  5. .app1
  6. .today1
  7. .ch1
  8. .pro1

Most reported domains

  1. account.animus.store
  2. airdropcast.com.examaccess.com.ng
  3. claim.rex-myfinance.live
  4. claw-env-1.example.septim.meteora.pro
  5. dc.crsorgi.gov.in.cscmewat96.info

Latest Hetzner phishing domains

The 30 most recently detected domains at Hetzner
DomainFirst detectedStatus at last checkRegistrar
georgjocham.com2026-07-27OnlineHetzner Online
pamconj.com2026-07-12OnlineHetzner Online
spx.pamconj.com2026-07-12OnlineHetzner Online
compliance-direkt.net2026-07-03OnlineHetzner Online
rewards-simona-group.com2026-06-09OnlineHetzner Online
portal-pedagio.dynv6.net2026-06-09OnlineHetzner Online
hivox.pk2026-06-07OnlineHetzner
my-spotifymembership.dynv6.net2026-05-31OfflineHetzner Online
pagamento-pedagio.dynv6.net2026-05-29Taken downHetzner Online
bra9-pts-facil.dynv6.net2026-05-23OfflineHetzner Online
netfilx-account.dynv6.net2026-05-20OfflineHetzner Online
microsoft.security.82a7c75895bc4ad7bbe3a494d299ee52.norreply.com2026-04-24OnlineHetzner Online
livelopontos26.dynv6.net2026-04-01OfflineHetzner Online
claw-env-1.example.septim.meteora.pro2026-03-25OnlineHetzner
jetztallesmoeglich.de2026-03-19OnlineHetzner
app-beneficios.dynv6.net2026-02-26Taken downHetzner Online
rtgsdefi.com2026-02-26OnlineHetzner Online
app-exclusivo1.dynv6.net2026-02-26OfflineHetzner Online
perform-x.ch2026-02-23OfflineHetzner
uzbekistonishlash.today2026-02-18OfflineHetzner
galerie.medienstuermer.de2026-02-18OnlineHetzner
home-bryge-trzer.wasmer.app2026-02-07OfflineHetzner
airdropcast.com.examaccess.com.ng2026-02-03OfflineHetzner
points-e-cashbaicks.dynv6.net2026-01-06OfflineHetzner Online
pont-e-cashback.dynv6.net2025-12-31OfflineHetzner Online
lafoiunrtyui.dynv6.net2025-12-20OfflineHetzner Online
exclusivo1-app.dynv6.net2025-11-02OfflineHetzner Online
app-exclusiivo.dynv6.net2025-11-02OfflineHetzner Online
argocd.tooling-2.metis-internal.com2025-10-31OfflineHetzner Online
pts-vantagens.dynv6.net2025-10-19OfflineHetzner Online

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.