GoDaddy
GoDaddy is the world's largest domain registrar and one of the largest web hosting companies, managing roughly 81 million domains (about 21% of registered domains worldwide). It offers domain registration, website hosting, website builders, email services, and online marketing tools primarily targeting small businesses and individual users.
Score generated by AI agents based on publicly cited evidence and reviewed by the project maintainer. Not independently validated. Last assessed 2026-09-26. Score revised 2026-09-26: 65 → 55.
Score History
Timeline events are AI-curated from public reporting. Score trajectory is derived from documented events.
GoDaddy began selling domains as an ICANN-accredited registrar in 2000, pricing registrations far below Network Solutions. It was a founder-run private company competing on price, and the record shows little extraction in this period.
GoDaddy overtook Network Solutions as the largest registrar in 2005 and launched a decade of sexist Super Bowl advertising. Renewal prices crept up, drawing complaints by 2010, pre-checked add-ons such as a site builder appeared in checkout, and a 60-day transfer restriction stricter than other registrars' drew criticism. Founder Bob Parsons' elephant-hunt video in March 2011 set off a boycott.
KKR, Silver Lake and TCV bought 65% of GoDaddy for $2.25 billion, and Parsons stepped back. GoDaddy's support for SOPA in December 2011 cost it more than 37,000 domains before it reversed. Customers reported unrequested charges such as Premium CashParking billing in 2012, the company bought Afternic and Media Temple in 2013, and the sexist ads peaked with the 2013 'Kiss' ad.
The April 2015 IPO raised $460 million. GoDaddy bought Sucuri and Host Europe Group ($1.79 billion) in 2017 and sold security as paid add-ons. Its cart auto-added $7.99 privacy and defaulted to two-year terms, the 2018 DomainFactory breach exposed bank details, .com renewals rose to $17.99 in 2019, and GoDaddy injected a tracking script into US hosting customers' sites by default.
Aman Bhutani, formerly of Expedia, became CEO in September 2019, weeks before attackers began a breach campaign that lasted to 2022. GoDaddy bought Uniregistry and Neustar's registry in 2020, staff were social-engineered into handing over customer domains, and a fake holiday-bonus phishing test humiliated employees. Basic WHOIS privacy became free in 2020, but paid protection tiers replaced it, and the 2021 WordPress breach exposed 1.2 million customers.
Two months after activist Starboard Value took a 6.5% stake, GoDaddy authorized a $3 billion buyback (later $4 billion). It cut about 800 jobs in 2023, retired Media Temple, bought Dan and moved all its aftermarkets to commissions of up to 25%, and disclosed that attackers had re-entered its hosting through malware it had failed to remove. In December 2023 it barred Entri's DNS tool.
GoDaddy cut small accounts off its DNS API with little or no notice, breaking automated certificate renewals, then auto-enrolled Afternic sellers in a commission increase and retired Dan. Host Europe and DomainFactory forced paid Microsoft 365 email migrations, the FTC charged GoDaddy with misrepresenting its security (order final May 2025), and it terminated a $35 million TCPA settlement. Buybacks absorbed all of 2025's free cash flow.
GoDaddy rewrote its terms without notice to declare every customer a business, limiting consumer-protection law and moving disputes to costlier commercial arbitration. It also reversed two of the prior era's harms, halting Host Europe's forced email migration in February and reopening its DNS API to single-domain accounts in April 2026. Buybacks continue, a securities suit targets its undisclosed $4.99 .com promotion, and Gen Digital made a takeover approach in September 2026.
Alternatives
Domain registrar with flat pricing (.com about $11.08 a year to register or renew in 2026) and free WHOIS privacy, SSL certificates and URL forwarding on every domain. Switching is moderate effort: unlock your domain at GoDaddy, request an auth code, then start the transfer at Porkbun; under ICANN's transfer policy it usually completes within five to seven days, and domains registered or transferred in the last 60 days are locked. Catch: it is primarily a registrar, so sites built on GoDaddy's website builder have to be rebuilt elsewhere.
Registers domains at wholesale registry cost with no markup, about $10.46 a year for .com in September 2026, versus GoDaddy's .com renewals of about $18.99-$22.99. No upsells and free WHOIS privacy. Catch: domains must use Cloudflare's nameservers, it doesn't support every TLD, and it is not a hosting or email replacement, so it suits people comfortable managing DNS at Cloudflare.
Domain registrar and web host with free WHOIS privacy on every eligible domain and a lighter-touch checkout than GoDaddy's. A closer feature match to GoDaddy (domains, hosting and email), making it an easier transition for small businesses. Catch: like GoDaddy, it discounts the first year, so check the .com renewal price before buying. The transfer is the same moderate-effort process as any domain move.
Dimensional Breakdown
Summaries below were written by AI agents based on the cited evidence. They are editorial interpretations, not independent research findings.
Dimension History
Timeline (66 events)
GoDaddy becomes ICANN-accredited domain registrar
Jomax Technologies (later renamed GoDaddy) received ICANN accreditation and began offering domain registration at prices 70% below industry leaders like Network Solutions, which had held a near-monopoly. This aggressive pricing strategy disrupted the domain registration market and set the foundation for GoDaddy's growth-through-low-prices business model.
GoDaddy launches first sexist Super Bowl advertisement
GoDaddy aired its first Super Bowl commercial featuring provocative imagery of women, beginning a decade-long pattern of sexist advertising. The ads featured increasingly risque content and drew criticism from organizations like the National Organization for Women. The campaign ran annually through 2015, using female objectification to sell domain names to a predominantly male audience.
GoDaddy becomes world's largest domain registrar
GoDaddy became the world's largest ICANN-accredited domain registrar in 2005, taking the title from Network Solutions. It got there by pricing registrations far below incumbents (ICANNWiki cites roughly 70% below the industry leaders' prices), which set the growth-through-low-prices model that later shifted toward add-ons and higher renewals. Its 2006 IPO filing reported $139.8 million of 2005 revenue (up 92%), about 2.4 million customers at the end of 2005, roughly a third of all new registrations in the top five gTLDs in the second half of 2005, and 13.6 million domains under management by April 2006.
Customers protest GoDaddy domain renewal price increases
A March 2010 Warrior Forum thread documented a customer's shock at GoDaddy renewal bills: .net renewing at $13.17 and .org/.biz at $15.17, each up from under $11 the year before. Other users pointed to coupon codes that cut renewals to $7.49 or less, or recommended moving to Namecheap, showing that list-price renewals were set well above the discounted prices savvy buyers could get.
GoDaddy puts itself up for sale, then pulls out
In September 2010 the Wall Street Journal reported that GoDaddy had put itself up for sale with bank Qatalyst Partners, and could fetch $1 billion or more. In late October 2010 the company took itself off the market. The aborted sale preceded the private equity investment by KKR, Silver Lake, and TCV the following year.
Customers warn of pre-checked add-ons in GoDaddy checkout
A January 2011 Warrior Forum thread described a customer billed at renewal for a site builder they never knowingly bought, which they traced to a pre-checked add-on during a domain purchase. The poster warned others to manually uncheck GoDaddy's pre-checked boxes when registering domains.
CEO Bob Parsons posts elephant hunting video from Zimbabwe
GoDaddy founder and CEO Bob Parsons posted a video of himself shooting and killing an elephant during a hunt in Zimbabwe; the footage of villagers, many in GoDaddy caps, butchering the carcass was set to AC/DC's 'Hells Bells', TIME and HuffPost noted. PETA closed its GoDaddy account and urged others to boycott the company, and competitor Namecheap offered $4.99 transfers with a donation to Save the Elephants. Parsons defended the hunt as helping local farmers but faced widespread condemnation.
KKR, Silver Lake, and TCV acquire 65% of GoDaddy for $2.25 billion
Private equity firms KKR, Silver Lake Partners, and Technology Crossover Ventures acquired a 65% stake in GoDaddy for approximately $2.25 billion. Founder Bob Parsons retained a minority stake and stepped down as CEO to become Executive Chairman. The PE acquisition shifted GoDaddy's incentives toward financial optimization and margin expansion, setting the stage for more aggressive monetization practices.
SOPA support triggers massive customer boycott and domain exodus
GoDaddy's public support for the Stop Online Piracy Act (SOPA) triggered a Reddit-organized boycott. Wikipedia co-founder Jimmy Wales said Wikipedia's domains would leave GoDaddy. GoDaddy lost more than 37,000 domains within days and reversed its position on December 23, stating it would support SOPA 'when and if the Internet community supports it.' The boycott day was set for December 29, and transfers continued above normal rates.
Customer billed for Premium CashParking without permission
Blog Marketing Academy's founder, reviewing GoDaddy in 2012, reported that GoDaddy enabled 'Premium CashParking' on his account and billed $9.99 a month without his permission; support said it had been part of a domain club he had cancelled. The review also described a checkout that required repeatedly clicking 'No' through upsells.
GoDaddy creates process to lift its extra 60-day transfer lock after criticism
GoDaddy had long rejected transfers to other registrars if certain registrant information had been changed in the previous 60 days, a policy that went beyond other registrars' practice and drew years of criticism. In June 2012 it created a formal process to request removal of the lock, but only after reviewing the account for 'suspicious activity' and reverting the registrant name, which kept friction in the departure process.
Super Bowl 'Kiss' ad draws peak sexism criticism
GoDaddy's 2013 Super Bowl ad featuring supermodel Bar Refaeli kissing a stereotypical 'nerd' programmer generated over 7,500 #NotBuyingIt tweets calling out sexist content. Ms. Magazine ranked it among the top five most sexist Super Bowl ads. Etsy's female business owners reportedly pressured the marketplace to stop doing business with GoDaddy, contributing to an eventual advertising strategy shift under CEO Blake Irving.
GoDaddy acquires Afternic domain marketplace
GoDaddy acquired Afternic, one of the largest domain aftermarket platforms, from NameMedia for an undisclosed amount. Afternic had nearly six million domains listed for sale and sold about $1 million of domains in a typical week. CEO Blake Irving said at the time GoDaddy did not intend to change Afternic's 20% commission. This was the first of three domain aftermarket acquisitions that would eventually give GoDaddy control over most of the domain resale infrastructure, enabling later commission changes.
GoDaddy acquires Media Temple hosting provider
GoDaddy acquired Media Temple, a premium web hosting provider favored by designers and developers, promising to operate it as an autonomous business. The tech community reacted negatively, with prominent voices like Marco Arment warning of inevitable degradation. GoDaddy announced the brand's retirement in December 2022, began migrating accounts in February 2023, and fully retired the Media Temple brand in September 2023.
GoDaddy IPO raises $460 million on NYSE
GoDaddy priced its IPO at $20 per share, above the expected $17-19 range, raising $460 million. The stock rose more than 30% on its first day of trading. The IPO intensified pressure for quarterly earnings growth, accelerating the shift toward higher-margin products, upselling, and aggressive renewal pricing. KKR, Silver Lake, and TCV remained significant shareholders.
UX designer documents GoDaddy checkout dark patterns
A Medium analysis by UX designer Akash Chandan documented dark patterns in GoDaddy's domain checkout: 'sneak into basket' (privacy protection added automatically at $7.99 per domain) and 'hidden costs' (price shown for one year but registration defaulting to two), which together inflated the cart well above the advertised price.
GoDaddy acquires Sucuri security platform
GoDaddy acquired Sucuri, a website security company known for malware removal and DDoS mitigation. Rather than improving baseline security across its hosting infrastructure, GoDaddy packaged Sucuri's capabilities as premium paid add-ons, charging customers extra for security protections while failing to implement basic security measures on its own servers — a gap later exposed by the FTC.
GoDaddy acquires Host Europe Group for $1.79 billion
GoDaddy acquired Host Europe Group, including UK registrar 123 Reg (3 million domains), German host DomainFactory, and Heart Internet, for 1.69 billion euros ($1.79 billion). The acquisition made GoDaddy a major European hosting provider. Over the following years, service quality at these subsidiaries was systematically degraded, with price increases and forced migrations to GoDaddy infrastructure.
GoDaddy degrades Host Europe subsidiaries' independent operations
Following the 2017 Host Europe Group acquisition, users of the German hosts Host Europe and DomainFactory say the services declined in value and quality: features were dropped from standard plans, customers were moved to plans with fewer features, and items like SSL certificates and domains became paid extras billed on top, while prices rose. The pattern set up the forced email migrations that came later.
DomainFactory data breach exposes customer financial information
GoDaddy's German subsidiary DomainFactory disclosed a data breach dating to January 2018. An attacker accessed customer names, addresses, email addresses, phone numbers, dates of birth, bank account numbers (IBAN/BIC), and Schufa credit scores. The breach was only revealed when the attacker posted proof on DomainFactory's support forum after the company failed to respond to vulnerability reports.
Domain renewal prices raised 20% above 2018 levels
GoDaddy increased .com domain renewal pricing from $14.99 to $17.99 per year, a 20% increase over 2018, prompting customers to transfer domains elsewhere. The hike widened the gap between low promotional registration prices and renewal rates, and customers who registered at low prices faced escalating costs to keep their domains. By 2021 GoDaddy was advertising a first year for one cent with a two-year registration, according to The Internet Patrol.
GoDaddy injects tracking JavaScript into customer websites
GoDaddy automatically added a 'Real User Metrics' script to US cPanel shared and business hosting customers' websites to collect page-load data, without asking first. GoDaddy's own support page said the script could slow sites or leave them broken or inoperable; customers had to find a setting to opt out.
Dark-pattern analysis cites GoDaddy cart defaulting to two-year registration
A Pivotal IT article on deceptive design cited GoDaddy as its example of 'sneak into basket': the domain selection page shows one-year pricing, but the shopping cart defaults to two years of registration and adds items the buyer must specifically opt out of, inflating the price shown at checkout.
Review finds cart auto-adds privacy and a paid-after-trial site builder
Business.org's guide to registering a domain at GoDaddy found that the cart automatically added domain privacy and a free trial of the GoDaddy website builder, which begins charging after one month unless cancelled, and warned buyers to remove them. It described aggressive upselling throughout checkout.
Aman Bhutani takes over as GoDaddy CEO
Former Brand Expedia Group president Aman Bhutani became CEO on September 4, 2019, replacing Scott Wagner, who stepped down for health reasons (announced August 1). Bhutani went on to lead GoDaddy's aftermarket consolidation, its multi-billion-dollar buybacks and its 2023-2025 restructurings.
GoDaddy agrees to $35 million TCPA class settlement
GoDaddy settled consolidated class actions (Drazen, Bennett and Herrick) alleging it used automated dialing to send marketing calls and texts to consumers' phones between 2014 and 2016 in violation of the Telephone Consumer Protection Act, making up to $35 million available. The Eleventh Circuit vacated approval in 2022 over class members' standing, beginning years of further litigation.
Multi-year security breach begins with SSH credential compromise
An unauthorized attacker used compromised web hosting credentials to access GoDaddy hosting accounts via SSH in October 2019, compromising approximately 28,000 accounts. The attacker placed public keys on affected accounts to maintain persistent access even if passwords were changed. This was the first in a series of interconnected breaches spanning through 2022 that the FTC later cited as evidence of systemic security failures.
GoDaddy acquires Uniregistry registrar and marketplace
GoDaddy acquired Uniregistry's registrar, marketplace, and 350,000-domain portfolio for an undisclosed sum; its annual report later showed an aggregate $196.9 million for two February 2020 acquisitions, one of them the design startup Over. Combined with the 2013 Afternic acquisition, this gave GoDaddy control over two of the three major domain aftermarket platforms. The deal was expected to close in Q2 2020, alongside the Neustar registry acquisition that expanded GoDaddy's vertical integration.
GoDaddy acquires Neustar registry for $218 million
GoDaddy acquired Neustar's domain registry business for $218 million, taking over a portfolio including .us, .co, .biz, .in and .nyc and back-end registry services for more than 215 top-level domains, including end-to-end management of over 130 brand TLDs, according to GoDaddy's announcement. This vertical integration gave GoDaddy control at both the wholesale (registry) and retail (registrar) levels of the domain industry, raising conflict-of-interest concerns about self-preferencing and potential antitrust scrutiny.
GoDaddy makes basic WHOIS privacy free but upsells paid protection tiers
For years GoDaddy sold WHOIS privacy through Domains By Proxy as a paid add-on (priced at $7.99 per domain in 2016), while registrars such as Namecheap included privacy free. In 2020 GoDaddy made basic privacy free, showing only the registrant's organization, state and country. It then added paid 'Full Domain & Privacy Protection' tiers and upgraded domains that had used the paid service unless customers opted out; Domain Name Wire estimated the old paid service may have brought in about $180 million a year.
GoDaddy staff tricked into handing crypto firms' domains to attackers
Beginning around November 13, 2020, fraudsters social-engineered GoDaddy employees into transferring control of domains belonging to cryptocurrency firms including Liquid and NiceHash, letting them redirect email and web traffic. It followed a March 2020 voice-phishing attack on GoDaddy support staff that hijacked about half a dozen domains, including escrow.com.
Fake holiday bonus phishing test humiliates 500 employees
GoDaddy sent an email to employees promising a $650 holiday bonus. Around 500 employees clicked through and provided personal details, only to receive a follow-up email from the chief security officer informing them they had failed a phishing test. The test came months after company-wide layoffs and during a pandemic, drawing widespread condemnation for its cruelty. GoDaddy apologized, calling the test 'insensitive.'
GoDaddy deplatforms AR15.com without appeal process
GoDaddy removed AR15.com, one of the world's largest firearms forums, from its services following the January 6 Capitol breach, citing content that 'promotes and encourages violence.' AR15.com said it was not told which content violated the terms and was given no way to appeal; GoDaddy said it had flagged specific content and allowed 53 hours for removal. The dispute, along with the subsequent deplatforming of Texas Right to Life in September 2021, raised concerns about content moderation transparency.
Dark-pattern guide cites GoDaddy cart auto-adding privacy protection
Designmodo's guide to dark patterns used GoDaddy's checkout as its example of 'hidden costs': add a domain to the cart and privacy protection is added automatically unless the buyer opts out. The example shows how GoDaddy's cart added paid extras by default rather than letting buyers choose them.
GoDaddy launches $250 million accelerated share repurchase
GoDaddy announced a $250 million accelerated share repurchase agreement, signaling the beginning of an aggressive capital return strategy. This was a precursor to the much larger $3 billion authorization in February 2022, marking a strategic shift toward financial engineering and shareholder extraction over product reinvestment.
Breach exposes 1.2 million WordPress customer records
GoDaddy disclosed that an unauthorized third party accessed its Managed WordPress hosting environment using a compromised password, exposing data for 1.2 million active and inactive customers. Exposed data included email addresses, default WordPress admin passwords stored in plaintext, SFTP/database credentials, and SSL private keys. The breach went undetected from September 6 to November 17, 2021.
Starboard Value discloses 6.5% activist stake in GoDaddy
Activist investor Starboard Value disclosed a 6.5% stake in GoDaddy worth more than $800 million, saying it wanted the company to improve its performance. Starboard's pressure accelerated margin expansion initiatives including layoffs and share buybacks. In September 2023 Starboard said GoDaddy had denied its requests for a board seat over the previous 18 months and urged a sale if performance did not improve.
GoDaddy authorizes $3 billion share repurchase program
GoDaddy's board authorized a $3 billion share repurchase program (later expanded to $4 billion), one of the most aggressive buyback campaigns in the web infrastructure sector. The company entered into $750 million in accelerated share repurchase agreements with Goldman Sachs and Morgan Stanley. This massive capital return program coincided with deteriorating product quality and security failures.
Websites + Marketing subscription prices increased
GoDaddy raised prices across all three tiers (Basic, Standard, Premium) of its Websites + Marketing proprietary builder product in February 2022. The increase applied to existing subscribers, not just new sign-ups. Because the builder offers no export functionality, customers were locked in — they could either accept the higher prices or lose their entire website by leaving.
GoDaddy acquires DAN.com for $71.4 million
GoDaddy acquired Amsterdam-based domain marketplace DAN.com, completing the deal in July 2022 for $71.4 million in cash according to its 10-Q. DAN had undercut GoDaddy's Afternic with 9% commissions on landing-page sales. The deal completed GoDaddy's consolidation of the three major domain aftermarket platforms (Afternic, Uniregistry, and DAN), giving it control over most domain resale infrastructure.
Third breach in series compromises shared hosting via unremoved malware
GoDaddy's Shared Hosting environment was again compromised when attackers exploited a malicious file that GoDaddy had failed to remove during remediation of the previous breach. Attackers stole customer SSH credentials and installed malware that intermittently redirected random customer websites to malicious sites. GoDaddy disclosed the breach in February 2023, connecting all three incidents (2019, 2021, 2022) to the same threat actor.
Aftermarket commission rates raised to 25% across all platforms
GoDaddy announced new commission rates effective February 1, 2023 across Afternic, DAN, and Uniregistry: 15% for domains using GoDaddy-controlled nameservers, 25% for all others. Previously, rates ranged from 9% to 20% across the independently operated platforms. Domain investors protested that GoDaddy was leveraging its near-monopoly over aftermarket infrastructure to extract higher fees while forcing sellers onto its own landing pages.
Media Temple brand retired and customers forcibly migrated to GoDaddy
After acquiring Media Temple in 2013 with plans to operate it independently, GoDaddy announced in December 2022 that the Media Temple brand would be retired and began migrating accounts to GoDaddy in February 2023; the brand was fully retired in September 2023. The premium hosting brand that had served designers and developers for 24 years was dissolved, with customers losing the differentiated service level they had originally signed up for.
GoDaddy lays off 8% of workforce — 530 employees
CEO Aman Bhutani announced plans to reduce GoDaddy's global workforce by approximately 8%, eliminating about 530 positions from its 6,611-person team. The layoffs coincided with the retirement of the Media Temple and Main Street Hub brands. Affected US employees received 12 weeks of paid administrative leave. The cuts occurred while GoDaddy was spending billions on share buybacks.
Additional undisclosed layoffs across two business units
GoDaddy conducted another round of layoffs in October 2023, with a spokesperson confirming that 'we recently restructured teams within two business units' while declining to say how many employees were affected, where, or why. It followed the February 2023 cut of about 530 jobs, which included 35 at its Cedar Rapids, Iowa operations.
GoDaddy bars Entri's DNS tool from customer domains
After putting Entri's Domain Connect template requests on hold in August 2023 and seeking a licensing fee, GoDaddy in December 2023 adopted a policy that customers could not use Entri to change DNS on GoDaddy domains and told Entri's SaaS clients to stop, according to Entri's July 2024 antitrust complaint. The tool had let customers set DNS records from a SaaS provider's site.
Starboard Value pressures GoDaddy for deeper cost cuts and margin expansion
Starboard Value, holding more than 6% of GoDaddy, sent a letter urging the company to set 'prudent' guidance and target free cash flow of $9 per share this fiscal year and $14 by fiscal 2026 (versus $6.10 in the prior fiscal year), aiming for at least 40% combined growth and profitability by fiscal 2025. Starboard, which had said in September 2023 that GoDaddy was missing nearly every Investor Day target, kept pressing for cost cuts, including in technology and development, and continued buybacks.
DNS API access restricted, breaking Let's Encrypt certificate renewal
In early May 2024 GoDaddy restricted its DNS and domain-management APIs to accounts with 10 or more domains or a Discount Domain Club plan. One customer reported getting an email on April 30 for a cutoff on May 1; others said they received no notice at all. The change broke automated Let's Encrypt certificate renewal via DNS validation for smaller customers, who had to move DNS elsewhere or manage renewals by hand.
GoDaddy reports 180 layoffs as domain revenue grows
With first-quarter 2024 results, GoDaddy said it had laid off 180 employees in the quarter to cut costs, even as its domains business grew 7% and aftermarket revenue rose 12%. Restructuring across 2024 affected about 280 employees in total, per its annual report.
Afternic Boost auto-enrolls sellers in higher commissions
GoDaddy's Afternic announced Afternic Boost, extra promotion in GoDaddy search and email, for an added 5% commission: from September 4, 2024, rates rose from 15% to 20% for domains on Afternic landers and from 25% to 30% for others. Every seller was opted in and had to opt out to keep the old rates; Domain Name Wire noted sellers had little choice given Afternic's exclusive access to GoDaddy buyers.
GoDaddy retires Dan.com into Afternic
GoDaddy announced it was merging Dan.com, bought in 2022 for about $71.4 million, into Afternic. Domain investors noted that GoDaddy had now bought and retired two popular competing marketplaces, Uniregistry and Dan, leaving fewer alternatives to its own.
Court allows Entri antitrust lawsuit against GoDaddy to proceed
In Entri, LLC v. GoDaddy.com, LLC (E.D. Va.), a judge denied GoDaddy's motion to dismiss, finding Entri plausibly alleged that GoDaddy's 2023 policy banning DNS-configuration aggregators such as Entri Connect was a 'negative tie' violating Section 1 of the Sherman Act. Entri said GoDaddy used the policy to force users onto its own Domain Connect protocol and interfered with Entri's customer contracts.
GoDaddy terminates its $35 million TCPA class settlement
After the Eleventh Circuit vacated final approval of the TCPA settlement in May 2024, GoDaddy issued a notice terminating the class settlement on January 9, 2025. The district court denied the plaintiffs' motion to enforce it in February 2025, and the Eleventh Circuit agreed in September 2025 to hear their appeal, according to GoDaddy's annual report.
Host Europe and DomainFactory forcibly migrate email to Microsoft 365
GoDaddy's European subsidiaries Host Europe and DomainFactory began forcibly migrating customer email accounts to Microsoft 365, with no option to object other than removing the accounts. Many customers had chosen these hosts because packages included large numbers of mailboxes; after the migration each account carried extra fees, and customers objected to moving their mail to a US cloud provider. Long-time customers cancelled in large numbers.
FTC files complaint alleging systematic security misrepresentation
The Federal Trade Commission announced a proposed order against GoDaddy for unfair or deceptive acts. The FTC alleged that since 2018, GoDaddy failed to implement MFA, security event logging, file integrity monitoring, network segmentation, and software asset management while claiming 'award-winning security.' The FTC also alleged GoDaddy falsely represented compliance with EU-U.S. and Swiss-U.S. Privacy Shield Frameworks.
GoDaddy authorizes new $3 billion share buyback program
After completing the $4 billion buyback program begun in January 2022 (43.7 million shares at an average $91.45, cutting fully diluted shares by more than 25%), GoDaddy's board authorized a new $3 billion repurchase program through 2027, announced with Q1 2025 results. The company had generated $1.4 billion of free cash flow in 2024 and spent $668.1 million on buybacks that year, even as the stock fell about 40% through 2025.
FTC finalizes consent order requiring comprehensive security overhaul
The FTC finalized its consent order with GoDaddy in a 3-0 vote, prohibiting the company from misrepresenting security practices and requiring implementation of a comprehensive information security program. GoDaddy must hire an independent third-party assessor for initial and biennial reviews. The order stemmed from multiple breaches between 2019 and 2022 that the FTC attributed to 'unreasonable security practices.'
GoDaddy moves domain-investor tools into pricier Domain Pro tier
GoDaddy added a Domain Discount Club Pro tier at $359.88 a year, up from $239.88 for Premium, and moved investor tools such as Afternic self-brokerage, auctions membership and Domain Academy out of Premium into it. Premium members' .com price rose to $11.99; existing investor accounts were upgraded free for one renewal.
Entri regains DNS access at GoDaddy after antitrust settlement
GoDaddy and Entri, whose antitrust suit had been dismissed by agreement in February 2025 shortly before an April trial, announced a multi-year deal letting customers use Entri to update DNS on GoDaddy-registered domains again.
GoDaddy's proprietary website builder creates inescapable lock-in
GoDaddy's 'Websites + Marketing' builder, a proprietary SaaS product, offered no export functionality. Customers who built sites using the tool could not migrate content, design, SEO settings, or data structures to any other platform. The only migration path required opening every page, manually copying text, downloading each image individually, and rebuilding the entire site from scratch on an alternative platform — a process that effectively trapped non-technical small business owners.
GoDaddy terms declare every customer a 'business customer'
GoDaddy's revised Universal Terms of Service, effective immediately without an email notice, state its services are not for private, personal or household use and define almost any user, including job seekers and defensive registrants, as a business customer, a move that limits consumer-protection laws. Disputes moved to commercial arbitration (filing fees from $2,325 versus about $200), with a jury-trial waiver, a Maricopa County venue, cost-shifting after rejected offers and retroactive application.
GoDaddy spent all of 2025's free cash flow on buybacks
GoDaddy's full-year 2025 results showed it repurchased 10.2 million shares for $1.6 billion, equal to its $1.6 billion of free cash flow, and ended the year with $3.8 billion of debt. It guided to about $1.8 billion of free cash flow in 2026, and repurchased a further $851.8 million of stock through July 29, 2026.
Undisclosed $4.99 .com promotion sinks GoDaddy stock, prompting securities suit
GoDaddy disclosed that fourth-quarter 2025 bookings growth slowed to 5% after a promotional one-year .com price drew more demand than expected; shares fell 14.28% on February 25, 2026. Investors later sued (Johnson v. GoDaddy, S.D.N.Y.), alleging it concealed the $4.99 promotion while telling investors it had turned off front-end discounting.
Host Europe halts forced Microsoft 365 email migration
Host Europe stopped converting customer mailboxes to Microsoft 365 at about one euro per account per month and suspended the planned end-of-April shutdown of its Classic hosting, after a year of customer backlash. Customers who had already migrated or left got no remedy; those withdrawing cancellations were offered four months of free Classic hosting.
GoDaddy reopens DNS API to single-domain customers
GoDaddy dropped the DNS and domain-management API threshold from 10 domains to one, citing user feedback, restoring programmatic DNS access (and automated Let's Encrypt DNS validation) that small customers had lost in May 2024. The availability API still requires a larger portfolio.
Norton maker Gen Digital approaches GoDaddy about a takeover
The Financial Times reported that Gen Digital, owner of Norton, Avast and LifeLock, had made an early-stage approach to acquire GoDaddy, whose market value was about $12.8 billion. No deal terms were disclosed; GoDaddy shares rose about 5% and Gen Digital's fell about 9%.
Evidence (58 citations)
D1: User Value Erosion
D2: Business Customer Exploitation
D3: Shareholder Extraction
D4: Lock-in & Switching Costs
D5: Twiddling & Algorithmic Opacity
D6: Dark Patterns
D7: Advertising & Monetization Pressure
D8: Competitive Conduct
D9: Labor & Governance
D10: Regulatory & Legal Posture
Scoring Log (8 entries)
Checked 97 items + prose. 49 verified, 37 corrected (13 date-only), 8 re-sourced, 3 removed (2 invented, 1 duplicate). Invented: confirmshaming quote 'Your website will be unprotected!', '200-452%' hosting renewal figure, a 'viral' Hacker News case study (single comment), and WebDesignerDepot 'research' on GoDaddy's checkout. Fixed WHOIS privacy pricing (free basic tier since 2020), 2024 layoffs (~280, not 10%), 2024 FCF/buybacks, market share (21%, 81M domains), HEG customer count, Uniregistry price, FTC 'finding' vs allegation, 401(k) cut claim.
65->55. Since Feb 2026: ToS rewrite declaring all customers business customers (Feb 2), Host Europe halted forced M365 migration (Feb 25), undisclosed $4.99 .com promo + 14% stock drop + securities suit, DNS API reopened to 1-domain accounts (Apr 2026), 2025 buybacks = 100% of FCF ($1.6B) and $851.8M more through Jul 2026, CEO pay ratio 206:1, Gen Digital takeover approach (Sep 24). D1 7->5 (recalibration + event: API restored, Host Europe halt; core service works, complaints are pricing/upsell), D2 7->6 (correction: fact audit struck 200-452% hosting renewal figures; Afternic 20/30% commissions support 6), D3 7->6 (recalibration: recent layoffs ~100/yr, Airo investment; buybacks dominate but product not starved), D4 7->5 (recalibration: ICANN-standard transfers, strong competitors; builder/bundle lock-in; API and Entri blocks reversed), D5 6->5 (event: API reopened with public notice), D6 8->6 (correction: invented confirmshaming quote and five-year default removed; sneak-into-basket, opt-out defaults and support upsells remain), D7 6->5 (recalibration: paid product with no ads, basic privacy free since 2020). D8/D9/D10 unchanged. Eras: kept 2000/2005/2011/2015 (re-scored); re-dated 'Consolidation & Breaches' 2019-09-01->2019-09-04 (Bhutani CEO); re-dated 'Buybacks & Layoffs' 2022-01-01->2022-02-10 ($3B buyback); re-dated + relabeled 'FTC Enforcement Era' 2024-01-01->2024-05-01 'API Lockdown & FTC Order' (DNS API cut-off); re-dated + relabeled current 'Consent Order Fallout' 2026-02-12 (assessment date)->2026-02-02 'Business-Only Terms' (ToS rewrite). Added 14 historical events (pre-checked add-ons 2011, CashParking 2012, RUM script injection 2019, cart auto-adds 2019, Bhutani CEO, TCPA $35M settlement and its 2025 termination, 2020 domain hijacks via staff, Entri ban 2023, 180 layoffs 2024, Afternic Boost, Dan retired, DDC Pro, Entri access restored) and 6 window events.
Checked 3 alternatives, all active. Cloudflare: .com at-cost price updated to $10.46 (was '$8-10') and GoDaddy renewal range aligned with the record ($18.99-$22.99). Porkbun: replaced unverifiable 'no upsells' with its $11.08 flat .com price and free features. Namecheap: cut unverifiable 'no pre-checked add-ons', added first-year discount caveat. No typed-in site scores found.
Checked 19 removed/trimmed claims: 2 restored, 3 partly restored, 14 confirmed removed, 0 already present. Restored: AC/DC 'Hells Bells' soundtrack on Parsons elephant video (TIME/HuffPost/Phoenix New Times); Neustar portfolio incl. .in and 130+ brand TLDs (GoDaddy press release). Partly: 2005 scale figures replaced with S-1 numbers ($139.8M 2005 revenue, 2.4M customers, 13.6M domains Apr 2006); Afternic scale (~6M listings, ~$1M sales/week, DNW) instead of 'thousands of resales weekly'; penny first-year promo dated 2021 (Internet Patrol). Confirmed removed: HN 'viral case study', aftermarket terms imposition, WebDesignerDepot research, 2007 pre-checked SSL/$100+ cart, $1.17 promo/10x, $1.5-2B asking price, 'only one' 60-day lock quote (only an IT-firm blog), five-year default, 2020 builder date, Dan 17M listings/100k transfers, 'most-cited in UX education', DNS API forcing GoDaddy SSL, 25.14% share, skipped M365 mailbox items (the Feb 2026 pause is already present as its own event).
Triaged 2026-06-29; no rescore warranted (no material change since baseline, or changes sub-threshold).