Productivity

Zendesk lookalike domains

Greyphish has recorded 64 domains that resemble Zendesk since February 2026, 10 of them in the last 90 days. Most of them (70%) are typosquats, a keystroke or two away from the real name. .com carries 92% of them, out of 6 endings in all. The pace has slowed, with 2 in the last 30 days against 5 in the 30 before. 20 certificates for unregistered .ph, .com.ph names (registry wildcard) are excluded: the registry answers for any name under those endings, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
64
since February 2026
Last 90 days
10
2 in the last 30 days
Endings
6
most on .com (92%)
Typosquats
70%
the most common kind

What kind of lookalikes

Typosquats45 (70%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Combosquats13 (20%)

The brand spelled correctly with a word added, such as login or support. More

Homoglyphs6 (9%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Lookalikes per week

TypoComboHomoglyph
2
3
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-203003
2026-04-270101
2026-05-040000
2026-05-110000
2026-05-180000
2026-05-251001
2026-06-010000
2026-06-080000
2026-06-152103
2026-06-220011
2026-06-292002
2026-07-060000
2026-07-130011
2026-07-200101
2026-07-270000
2026-08-031001
2026-08-100000
2026-08-170202
2026-08-241001
2026-08-311102
2026-09-070000
2026-09-140101
2026-09-210000
2026-09-281001
2026-10-050000
2026-10-120000

Endings

The 6 most used of the 6 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com5992.2%
.app11.6%
.cfd11.6%
.com.cn11.6%
.de11.6%
.fr11.6%

Where they are registered

For the 56 with a registrar in WHOIS (88% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
GoDaddy1119.6%Retail
Gransy58.9%Retail
West.cn58.9%Retail
Cosmotown35.4%Retail
Alibaba Cloud23.6%Retail
Cloudflare23.6%Retail
Gname23.6%Retail
NameBright23.6%Retail

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles Zendesk; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • eendesk[.]com
    Typo, Oct 2Not checked
  • zendeskhelp[.]com
    Combo, Sep 20Not checked
  • zendesk-service[.]de
    Combo, Sep 1Not checked
  • zendeck[.]com
    Typo, Aug 31Not checked
  • hendesk[.]com
    Typo, Aug 27Not checked
  • zendesk-app[.]com[.]cn
    Combo, Aug 22Not checked
  • zendeskaccount[.]app
    Combo, Aug 20Not checked
  • jendesk[.]com
    Typo, Aug 9Not checked
  • secure-zendesk[.]com
    Combo, Jul 23No site or mail when checked
  • xn--zendsk-eva[.]com
    Shown in a browser as zendésk[.]com
    Homoglyph, Jul 16Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with Zendesk. Domains listed resemble Zendesk by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.