GoDaddy

Hosting & domains United Statesgodaddy.comAdded on review
Cert findings · 24 h
0
Cert findings · 7 days
14
14 on phishing hosts
Registered lookalikes
307
18 listed by a source or an address list
Official domains
23
verified from GoDaddy's own sites and records

Certificate findings for GoDaddy

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to GoDaddy's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 14 findings, grouped by hostname

  1. webmail.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    webmail.domainsbyproxy.sl
    First seen
    2026-11-04 04:06 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  2. webdisk.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    webdisk.domainsbyproxy.sl
    First seen
    2026-11-04 04:06 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  3. mail.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    mail.domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  4. www.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 05:23 UTC
    DNS
    Resolves · checked 2026-11-05 05:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  5. whm.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    whm.domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 05:23 UTC
    DNS
    Resolves · checked 2026-11-05 05:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  6. cpcontacts.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    cpcontacts.domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  7. cpcalendars.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    cpcalendars.domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  8. cpanel.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    cpanel.domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 04:15 UTC
    DNS
    Resolves · checked 2026-11-05 04:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  9. domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 05:23 UTC
    DNS
    Resolves · checked 2026-11-05 05:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  10. autodiscover.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    autodiscover.domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 05:23 UTC
    DNS
    Resolves · checked 2026-11-05 05:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  11. autoconfig.domainsbyproxy.sl GB · AS51713 · WHG-LON WHG Hosting Service…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    autoconfig.domainsbyproxy.sl
    First seen
    2026-11-04 04:05 UTC
    First published
    2026-11-04 05:23 UTC
    DNS
    Resolves · checked 2026-11-05 05:28 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.95.113.183.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.95.113.183
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 03:03 UTC to 2027-02-02 03:03 UTC
    Logged 2026-11-04 04:01 UTC in DigiCert Wyvern2027h1, entry 397,521,593
    SHA-256 68a56368e7ce480bcd8b6ca5a1bf137f1f94dd958792dabb47bb113f715ca849
    Public key SHA-256 16bbf70dc967febaa40fee9ff22f39cd664f5a2c25f6f6da413c32b9d7da931f
    Brand
    GoDaddy
    Addresses
    77.95.113.183 · United Kingdom · AS51713 WHG-LON WHG Hosting Services Ltd
    Domain
    domainsbyproxy.sl
    MX
    Receives mail at domainsbyproxy.sl
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 04:17 UTC

    Suggest a correction

  12. sso-godaddy-mail-46yerd.wasmer.app DE · AS213230 · HETZNER-CLOUD2-AS Hetzner O…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    sso-godaddy-mail-46yerd.wasmer.app
    First seen
    2026-11-03 06:17 UTC
    First published
    2026-11-03 06:36 UTC
    DNS
    Resolves · checked 2026-11-05 06:39 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.161.23.223.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.161.23.223
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 05:11 UTC to 2027-02-01 05:11 UTC
    Logged 2026-11-03 06:10 UTC in Geomys Tuscolo2027h1, entry 454,999,837
    SHA-256 18bbb44b8e1d082c0e7825e27326ff78cf9a3eeb1f0cf5611be26d65da8a8c82
    Public key SHA-256 01c91d001a3ca909623e71ff2afb26e11b400537ea27c28945e789ca199865ca
    Brand
    GoDaddy
    Addresses
    5.161.23.223 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH

    Suggest a correction

  13. myprofessionalmail-log-in-secureserver-x2.wasmer.app DE · AS213230 · HETZNER-CLOUD2-AS Hetzner O…
    Phishing hostAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    myprofessionalmail-log-in-secureserver-x2.wasmer.app
    First seen
    2026-11-01 12:46 UTC
    First published
    2026-11-01 13:04 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.161.23.223.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.161.23.223
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-01 11:46 UTC to 2027-01-30 11:46 UTC
    Logged 2026-11-01 12:45 UTC in IPng Networks Gouda2027h1, entry 285,711,799
    SHA-256 7912cdfbf1dc6eb107b99f4798c38419669250cd652ba6ed48a207dd90d5de56
    Public key SHA-256 119c86be88cf42c34c45cfccac07022fb98e00b41452b42006060265027d4c9f
    Brand
    GoDaddy
    Addresses
    5.161.23.223 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH

    Suggest a correction

  14. sucuri-analytics.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    sucuri-analytics.com
    First seen
    2026-10-30 16:52 UTC
    First published
    2026-10-30 17:03 UTC
    DNS
    Resolves · checked 2026-11-04 17:12 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 184.174.96.89.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 184.174.96.89
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-30 15:47 UTC to 2027-01-28 15:47 UTC
    Logged 2026-10-30 16:46 UTC in Google PlumbersArms2027h1, entry 526,203,642
    SHA-256 475655071bc256e281c5a484db10652534026fee63a316e9e88d099bf2540894
    Public key SHA-256 e6e4491b2894438e0b17ae9d897911d79adaa722234c8c3745d399d7c17efeae
    Brand
    GoDaddy
    Addresses
    184.174.96.89 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (184.174.96.89): a cloud provider. It rents servers and addresses to its customers.
    Domain
    sucuri-analytics.com
    Registered
    2026-03-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches GoDaddy when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Hosting & domains

All brands →