Short answer
Send the full phishing URL, screenshots of the live page and your official site to GoDaddy through its abuse email [email protected].
Who this is for: Teams that found a phishing copy of their site on a GoDaddy domain.
Where to report a domain to GoDaddy
| Abuse page | supportcenter.godaddy.com/AbuseReport |
|---|---|
| Phishing report form | legalportal.godaddy.com/abuse/phishing |
| Abuse email | [email protected] (its abuse contact in registration data) |
| IANA ID | 146 |
Not sure the domain is with GoDaddy? Check it in our abuse contact lookup: it reads the registrar from RDAP.
What GoDaddy asks for
- Your email address.
- The brand that is impersonated.
- The phishing URL or domain.
- Whether you saw it on a mobile device, and the country you viewed it from.
- A description; it can include the phishing email with full headers and your official site.
- A confirmation that the report is made in good faith.
Take full-page screenshots that show the address bar before you report: the page may be gone or hidden from you later. Our takedown request template covers all of the above.
What to expect
GoDaddy's abuse page states no processing time.
GoDaddy's abuse page leads to its legal portal, which has a separate form for phishing. You can follow a report at legalportal.godaddy.com/abuse/status.
Accredited registrars of generic domains must act on actionable evidence of phishing under their ICANN contract. If nothing happens, see how to escalate to ICANN.
Report it here too
- The host. The registrar controls the domain, the host controls the site. The lookup shows when the site sits behind Cloudflare.
- Browsers. Google Safe Browsing and Netcraft make browsers warn visitors, often before the domain is suspended.
- Wallets. See how to report a phishing site to wallets.
Sources
Frequently asked questions
How do I know a domain is registered with GoDaddy?
Look the domain up in RDAP: our free abuse contact lookup or ICANN Lookup shows the registrar, its IANA ID and its abuse contact.
What if GoDaddy does not act on my report?
Reply with new evidence, then file a DNS abuse complaint with ICANN Contractual Compliance and attach your report. Meanwhile report the site to Google Safe Browsing and Netcraft so browsers warn visitors.