Retail and e-commerce

Home Depot lookalike domains

Greyphish has recorded 219 domains that resemble Home Depot since February 2026, 187 of them in the last 90 days. Most of them (85%) are typosquats, a keystroke or two away from the real name. .com carries 97% of them, out of 8 endings in all. The pace has picked up, with 187 in the last 30 days against 0 in the 30 before. The busiest week began 21 September 2026, with 96 new ones. 13 certificates for unregistered .com.ph, .ph names (registry wildcard) are excluded: the registry answers for any name under those endings, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
219
since February 2026
Last 90 days
187
187 in the last 30 days
Endings
8
most on .com (97%)
Serve a website
83%
of 12 checked; 17% publish MX

What kind of lookalikes

Typosquats186 (85%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Homoglyphs17 (8%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Combosquats16 (7%)

The brand spelled correctly with a word added, such as login or support. More

Lookalikes per week

TypoComboHomoglyph
48
96
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-200000
2026-04-270011
2026-05-040202
2026-05-110000
2026-05-180101
2026-05-250000
2026-06-010000
2026-06-080101
2026-06-150000
2026-06-221012
2026-06-290000
2026-07-061001
2026-07-131001
2026-07-200000
2026-07-270000
2026-08-030000
2026-08-100000
2026-08-170000
2026-08-240000
2026-08-310000
2026-09-070000
2026-09-14650368
2026-09-21882696
2026-09-28173121
2026-10-052002
2026-10-120000

Endings

The 8 most used of the 8 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com21296.8%
.au10.5%
.ca10.5%
.info10.5%
.net10.5%
.org10.5%
.ph10.5%
.us10.5%

Where they are registered

For the 185 with a registrar in WHOIS (84% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
Corsearch15986.0%Brand protection
GoDaddy52.7%Retail
Media Elite Holdings31.6%Retail
Wild West Domains31.6%Retail
Name.com21.1%Retail
Namecheap21.1%Retail
BoteroSolutions.com10.5%Retail
DropCatch.com 147210.5%Retail

What the live ones do

12 of these lookalikes were registered and checked for a website and mail: 10 (83%) served a website and 2 (17%) publish MX records, so they can receive email. Checks run on the higher-severity matches that resolve, not on every lookalike.

Google Web Risk lists none of the 9 live ones checked against it.

9 were tracked while live and 0 have since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles Home Depot; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • homedepotservices[.]org
    Combo, Oct 4MX records
  • homedepot5[.]com
    Typo, Oct 2Not checked
  • homedepo5[.]com
    Typo, Oct 2Not checked
  • homecdepot[.]com
    Typo, Oct 1Not checked
  • hormedepot[.]com
    Homoglyph, Sep 30Not checked
  • homedrepot[.]com
    Typo, Sep 30Not checked
  • homecepot[.]com
    Typo, Sep 30Not checked
  • homed3pot[.]com
    Typo, Sep 29Not checked
  • homedepotportal[.]com
    Combo, Sep 29Not checked
  • homedeplt[.]com
    Typo, Sep 29Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with Home Depot. Domains listed resemble Home Depot by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.