Retail and e-commerce

WooCommerce lookalike domains

Greyphish has recorded 42 domains that resemble WooCommerce since March 2026, 10 of them in the last 90 days. They split between combosquats (55%) and typosquats (40%). .com carries 81% of them, out of 8 endings in all. 5 certificates for unregistered .ph, .com.ph names (registry wildcard) are excluded: the registry answers for any name under those endings, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
42
since March 2026
Last 90 days
10
4 in the last 30 days
Endings
8
most on .com (81%)
Combosquats
55%
the most common kind

What kind of lookalikes

Combosquats23 (55%)

The brand spelled correctly with a word added, such as login or support. More

Typosquats17 (40%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Homoglyphs2 (5%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Lookalikes per week

TypoComboHomoglyph
2
4
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-202103
2026-04-270101
2026-05-040000
2026-05-110000
2026-05-180000
2026-05-250000
2026-06-010000
2026-06-081001
2026-06-152002
2026-06-220000
2026-06-290000
2026-07-060000
2026-07-130000
2026-07-204004
2026-07-270101
2026-08-030000
2026-08-100011
2026-08-170000
2026-08-240000
2026-08-310000
2026-09-070000
2026-09-140000
2026-09-210000
2026-09-281102
2026-10-050101
2026-10-120101

Endings

The 8 most used of the 8 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com3481.0%
.ch24.8%
.co.uk12.4%
.cyou12.4%
.fr12.4%
.net12.4%
.online12.4%
.store12.4%

Where they are registered

For the 34 with a registrar in WHOIS (81% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
GoDaddy617.6%Retail
Gransy411.8%Retail
NICENIC INTERNATIONAL GROUP38.8%Retail
Cloudflare25.9%Retail
Namecheap25.9%Retail
Above.com12.9%Retail
Alibaba Cloud12.9%Retail
DNSPod12.9%Retail

What the live ones do

Google Web Risk lists none of the 3 live ones checked against it.

3 were tracked while live and 0 have since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles WooCommerce; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • getwoocommerce[.]com
    Combo, Oct 13MX records
  • woocommerceapps[.]com
    Combo, Oct 8Serves a website
  • woocommercewebdesign[.]co[.]uk
    Combo, Oct 4Serves a websiteMX records
  • woodcommerce[.]com
    Typo, Oct 2Not checked
  • vvoocommerce[.]com
    Homoglyph, Aug 13Not checked
  • woocommerceweb[.]com
    Combo, Jul 31Not checked
  • woocemmerce[.]com
    Typo, Jul 20Not checked
  • woocommarce[.]com
    Typo, Jul 20Not checked
  • woocommerc[.]com
    Typo, Jul 20Not checked
  • woocommerece[.]com
    Typo, Jul 20Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with WooCommerce. Domains listed resemble WooCommerce by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.