Productivity

Webflow lookalike domains

Greyphish has recorded 52 domains that resemble Webflow since February 2026, 10 of them in the last 90 days. Most of them (65%) are typosquats, a keystroke or two away from the real name. .com carries 92% of them, out of 5 endings in all. The pace has picked up, with 5 in the last 30 days against 2 in the 30 before. 1 certificate for unregistered .ph names (registry wildcard) is excluded: the registry answers for any name under that ending, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
52
since February 2026
Last 90 days
10
5 in the last 30 days
Endings
5
most on .com (92%)
Typosquats
65%
the most common kind

What kind of lookalikes

Typosquats34 (65%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Combosquats12 (23%)

The brand spelled correctly with a word added, such as login or support. More

Homoglyphs6 (12%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Lookalikes per week

TypoComboHomoglyph
2
3
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-202002
2026-04-271001
2026-05-041001
2026-05-110000
2026-05-180000
2026-05-251001
2026-06-010101
2026-06-080000
2026-06-150000
2026-06-220000
2026-06-292103
2026-07-061001
2026-07-130000
2026-07-200000
2026-07-271001
2026-08-030000
2026-08-100022
2026-08-171102
2026-08-240000
2026-08-310000
2026-09-070000
2026-09-141001
2026-09-210000
2026-09-281001
2026-10-050101
2026-10-121102

Endings

The 5 most used of the 5 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com4892.3%
.digital11.9%
.in11.9%
.nl11.9%
.shop11.9%

Where they are registered

For the 44 with a registrar in WHOIS (85% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
GoDaddy1125.0%Retail
Namecheap715.9%Retail
Hostinger36.8%Retail
NameBright36.8%Retail
Spaceship36.8%Retail
IONOS24.5%Retail
Cloudflare12.3%Retail
DropCatch.com 121112.3%Retail

What the live ones do

Google Web Risk lists none of the 2 live ones checked against it.

2 were tracked while live and 0 have since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles Webflow; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • webflowwebsitelatenmaken[.]nl
    Combo, Oct 13Serves a websiteMX records
  • webrflow[.]com
    Typo, Oct 12Not checked
  • webflowwebdesigners[.]com
    Combo, Oct 11Serves a website
  • webflows[.]com
    Typo, Sep 29Not checked
  • wenflow[.]com
    Typo, Sep 14Not checked
  • webflowservice[.]shop
    Combo, Aug 21Not checked
  • webflaw[.]com
    Typo, Aug 17Not checked
  • vvebflow[.]com
    Homoglyph, Aug 13Not checked
  • webflovv[.]com
    Homoglyph, Aug 13Not checked
  • wobflow[.]com
    Typo, Aug 2Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with Webflow. Domains listed resemble Webflow by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.