Hostinger: phishing domains and abuse response

PhishDestroy reported 1,179 phishing domains registered with Hostinger between 2026-01-02 and 2026-06-18, sending 1,202 abuse reports. Median time from the first report until a domain stopped resolving: 11.9 days (n = 536). 530 of 1,070 domains were still active 90 days after the first report. The database holds 3,636 Hostinger domains in total.

1,179
Domains reported (window)
1,202
Abuse reports sent
11.9 days
Median time to unavailable
3,636
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 638 (54%); Offline 534 (45%); Suspended 7 (1%).

90th percentile time to unavailable: 36.2 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. Wordpress129
  2. Google71
  3. Coinbase69
  4. Coinbase68
  5. MetaMask67
  6. Ledger63
  7. Solana63
  8. Ethereum60

Top-level domains

  1. .com1,433
  2. .online262
  3. .site258
  4. .fun173
  5. .org170
  6. .xyz159
  7. .pro132
  8. .net114

Most reported domains

  1. fifa.casino
  2. claimpayai.network
  3. cryptonovaexchange.com
  4. d4ug.site
  5. lineabuild.net

Latest Hostinger phishing domains

The 30 most recently detected domains at Hostinger
DomainFirst detectedStatus at last checkRegistrar
ititraders.com2026-10-22OnlineHOSTINGER operations
app.antifraudportal.eu2026-10-21OnlineHOSTINGER operations
rboxe.com2026-10-21OnlineHOSTINGER operations
spinusdc.site2026-10-20OfflineHOSTINGER operations
insurancewave.in2026-10-20OnlineHOSTINGER operations
organizr.poseidonserver.top2026-10-20OnlineHOSTINGER operations
download.foden.site2026-10-20OnlineHOSTINGER operations
uspstracking.fun2026-10-19OfflineHOSTINGER operations
adobereview.online2026-10-19OnlineHOSTINGER operations
binancecoins.com2026-10-18OnlineHOSTINGER operations
claimpr.site2026-10-18OnlineHOSTINGER operations
fastadharprint.xyz2026-10-17OnlineHOSTINGER operations
whatsapp.laptopsupdate.com2026-10-16OnlineHOSTINGER operations
wholemeltextractbrands.com2026-10-16OnlineHOSTINGER operations
wholemeltextractofficialstore.com2026-10-16OnlineHOSTINGER operations
dexcunnect.online2026-10-16OnlineHOSTINGER operations
webmail-roundcubes.ktexim.pro2026-10-16OfflineHOSTINGER operations
celestium.live2026-10-14OfflineHOSTINGER operations
ramylox.shop2026-10-13OnlineHOSTINGER operations
crygodi.com2026-10-13OnlineHOSTINGER operations
connectmeet.online2026-10-13OnlineHOSTINGER operations
facebook-secure-my-account.brothersexpeditions.com2026-10-13OnlineHOSTINGER operations
vantora.space2026-10-13OnlineHOSTINGER operations
trumpaccountsusd1.fun2026-10-13OnlineHOSTINGER operations
mnonly.com2026-10-12OnlineHOSTINGER operations
mingoy.com2026-10-12OnlineHOSTINGER operations
everymail-apps.org2026-10-12OfflineHOSTINGER operations
neweverymail.com2026-10-12OfflineHOSTINGER operations
neweverymail.org2026-10-12OfflineHOSTINGER operations
everymail-apps.tech2026-10-12OfflineHOSTINGER operations

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.