At Hostinger, we take customer security very seriously. That's why it's important that can verify that the emails you receive from us are authentic.
While we recommend verifying the legitimacy of all email messages you receive, we've made it easy to check a Hostinger message by following these steps:
Step 1 - Check the Sender
Before interacting with the message or its content, including clicking on the Unsubscribe button, always confirm the identity of the sender, that is, who sent the message.
The easiest way do this is by to use the built-in feature of your email application’s interface. For example, in Gmail, you can click on the arrow next to the recipient to display the email details:
For a more comprehensive and reliable review, you can verify the sender using the message's email headers.
Step 2 - Match the Sender With the Official Hostinger Email Addresses
The important part of the sender’s address is the domain name:
If the message comes from one of the following domains or subdomains, you can be sure that it is sent by Hostinger:
000webhost.com
000webhostforum.com
account.hostinger.com
email.hostinger.com
hosting24.com
hostinger-domains.com
hostinger.com
hostingerdomains.com
hostingeremail.com
hostingermail.com
hostingermedia.com
hostmania.es
weblink.com.br
Be on the lookout for misspellings or typosquatting versions of the domain name, as they can be similar to Hostinger, eg. h0stinger ❌
If the email is sent from a domain or subdomain not listed above, even if it includes hostinger as part of the domain name, it is not a legitimate message but an attempt from malicious actors to obtain your sensitive information, a practice known as phishing.
Do not click on any links within a phishing email, and make sure to report it 📝
You don’t need to perform this process every time you receive a new message. However, if you receive any unexpected and/or suspicious email, it’s always best to double-check.
Messages Sent From Your Own Domain
In some cases, you may receive a message that appears to be coming from your website or from a non-existing email account using your domain. This does not necessarily mean that your website has been hacked. Malicious actors can use techniques such as spoofing to make a message looks like it was sent from a different email than it really was.