Productivity

GoDaddy lookalike domains

Greyphish has recorded 222 domains that resemble GoDaddy since February 2026, 41 of them in the last 90 days. They split between typosquats (53%) and combosquats (40%). .com carries 76% of them, out of 13 endings in all. The pace has picked up, with 17 in the last 30 days against 3 in the 30 before. The busiest week began 29 June 2026, with 26 new ones. 41 certificates for unregistered .com.ph, .ph, .net.ph names (registry wildcard) are excluded: the registry answers for any name under those endings, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
222
since February 2026
Last 90 days
41
17 in the last 30 days
Endings
13
most on .com (76%)
Serve a website
13%
of 16 checked; 75% publish MX

What kind of lookalikes

Typosquats118 (53%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Combosquats88 (40%)

The brand spelled correctly with a word added, such as login or support. More

Homoglyphs16 (7%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Words most often added to the name in the last 90 days: web (8), app (5), update (4), refund (3).

Lookalikes per week

TypoComboHomoglyph
13
26
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-202103
2026-04-271001
2026-05-041124
2026-05-110112
2026-05-181102
2026-05-251102
2026-06-011102
2026-06-081102
2026-06-1529213
2026-06-220101
2026-06-29620026
2026-07-064509
2026-07-134307
2026-07-20812020
2026-07-270000
2026-08-030000
2026-08-100000
2026-08-170101
2026-08-240000
2026-08-311001
2026-09-070101
2026-09-141001
2026-09-210011
2026-09-280000
2026-10-05112013
2026-10-122002

Endings

The 8 most used of the 13 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com16875.7%
.net167.2%
.org156.8%
.info94.0%
.biz41.8%
.blog20.9%
.us20.9%
.co10.4%

Where they are registered

For the 170 with a registrar in WHOIS (77% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
GoDaddy6337.1%Retail
Above.com1810.6%Retail
Unstoppable Domains95.3%Retail
Dynadot84.7%Retail
Spaceship84.7%Retail
Cloudflare63.5%Retail
NameBright63.5%Retail
Internet Domain Service BS52.9%Retail

What the live ones do

16 of these lookalikes were registered and checked for a website and mail: 2 (13%) served a website and 12 (75%) publish MX records, so they can receive email. Checks run on the higher-severity matches that resolve, not on every lookalike.

Google Web Risk lists none of the 9 live ones checked against it.

11 were tracked while live and 0 have since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles GoDaddy; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • godadly[.]com
    Typo, Oct 13Not checked
  • godaddyh[.]com
    Typo, Oct 12Not checked
  • godaddywebsitebuilders[.]net
    Combo, Oct 10MX records
  • godaddyappraisals[.]info
    Combo, Oct 10MX records
  • godaddywebmail[.]org
    Combo, Oct 8MX records
  • godaddywebsitebuilder[.]org
    Combo, Oct 8MX records
  • zodaddy[.]com
    Typo, Oct 8Not checked
  • godaddysupportsucks[.]com
    Combo, Oct 7Serves a websiteMX records
  • godaddywebsitebuilder[.]net
    Combo, Oct 6MX records
  • godaddyonlinebookkeeping[.]com
    Combo, Oct 6MX records

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with GoDaddy. Domains listed resemble GoDaddy by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.