Security and scam protection

How to spot a fake Hostamor message

We will never ask for your password, a one-time code or your full card number by email, phone or chat.
Our only website is hostamor.com. Check the address bar before you sign in or pay, and watch for lookalikes such as h0stamor or hostamor-billing.
Card payments happen only on our checkout or on Stripe's secure page at checkout.stripe.com. We never ask you to pay by gift card, crypto or bank transfer to a personal account.
Urgent threats like "your domain will be deleted today" are a classic scam trick. When in doubt, sign in at hostamor.com yourself instead of clicking a link.

How we protect you

✓ Every page is served over HTTPS with strict browser security headers.
✓ Passwords are stored only as salted hashes, and passwords found in known data breaches are refused.
✓ Sign-in attempts are limited and automated bots are detected and blocked.
✓ Card details go straight to Stripe and never touch our servers. Your bank may ask you to confirm each payment (3D Secure).
✓ Our domain is locked against unauthorised transfers.

Report a scam or abuse

Got a suspicious message that mentions Hostamor, or found a site on our hosting that spreads phishing, malware or spam? Tell us and we will investigate.

Report it

Security researchers can find our contact details in /.well-known/security.txt.