On a Wednesday afternoon in May 2026, a peptide store’s .com stopped working. GoDaddy had suspended it, and the store’s address vanished from the owner’s GoDaddy account. The owner kept the domain in the end, but only by moving it to another registrar that same day. This post covers what happened, why we now move peptide clients before they need it, where Cloudflare falls short, and how to transfer domain from GoDaddy to Cloudflare step by step.
We build and host peptide stores, and we aren’t lawyers. The client is unnamed here, the timeline comes from our own messages with them, and we checked the outside sources on November 3, 2026.
What happened when GoDaddy suspended a peptide store’s domain?
GoDaddy put the domain on hold under its prescription drug rule. The store stayed dark for less than an hour, then moved to Cloudflare that evening.
Here’s how the day went, in Eastern time:
| Time | What happened |
|---|---|
| About 2:00 PM | The domain disappears from the GoDaddy account. Public records show it on clientHold, with transfers blocked. |
| 2:11 PM | We tell the owner to buy a spare domain at Cloudflare. |
| 2:25 PM | The owner buys the spare domain. |
| 2:43 PM | The store is live on the spare domain. |
| 3:12 PM | The owner forwards us GoDaddy’s written notice, and we say to request a transfer. |
| 3:42 PM | The domain is released and ready to move. |
| About 7:00 PM | The domain is moving to Cloudflare and the store is back on its original address. |
GoDaddy’s Content Safety Unit said the domain “may be associated with the sale or distribution of prescription medication and/or controlled substances without requiring a valid prescription.” It cited Section 5 of its Universal Terms of Service, which bars use of its services in any manner “as determined by GoDaddy in its sole and absolute discretion” that breaks the Ryan Haight Online Pharmacy Consumer Protection Act or sells prescription medication without a valid prescription.
The notice gave two ways out. The owner could send “government-issued documentation that verifies authorization to sell and ship prescription products” to every location the store served. Otherwise, GoDaddy would “temporarily reactivate the domain name to allow the domain to be unlocked and transferred to another provider.” The owner chose the transfer.
ICANN’s status code guide explains why a hold is so disruptive. clientHold tells the registry not to activate your domain in the DNS, so it won’t resolve. Your website stops loading, and email addresses on that domain depend on the same DNS.
Can you lose a domain GoDaddy suspends?
Yes, it can happen. Our client was offered a transfer, but in an older case GoDaddy refused one and ICANN declined to step in.
That older case is public. A seller’s domain was suspended in December 2015 under the same Section 5 language, and the seller asked to move it elsewhere. In the emails the seller filed with ICANN, GoDaddy wrote that the domain “cannot be reactivated” and “will remain suspended until its expiration date.” ICANN’s written decision says GoDaddy “had not violated any contractual obligation” and that ICANN would take no further action.
That case is about a decade old, and our client’s 2026 notice offered a transfer, so GoDaddy’s handling may vary. You just don’t get to choose which outcome you get on the day it happens. If you move while your domain is in good standing, GoDaddy’s decision never comes into it.
Why do we move peptide clients from GoDaddy to Cloudflare?
Cloudflare sells domains at cost, renews a .com for about half GoDaddy’s price, and says legal process should settle content disputes.
Price is the easy part. Cloudflare says it doesn’t mark up domains at all. When we compared the two on November 2, 2026, a .com renewed at $11.17 a year on Cloudflare and $22.99 on GoDaddy.
The bigger reason for a peptide store is how each company has behaved when complaints arrive. On domain disputes between owners and third parties, Cloudflare’s registrar abuse page says it “will not intervene” until a dispute resolution expert instructs it to, although that language covers trademark disputes specifically. In a 2022 post about an exceptional shutdown, Cloudflare also wrote that legal process is “still the correct way” to deal with potentially illegal content.
Our own experience matches that so far. Complaints about one client’s store reached Cloudflare in August and September 2026, and the domain stayed active both times. That’s one client and two complaints, so treat it as a data point. A second peptide client moved after we raised the risk on an onboarding call, and that transfer finished two days later, before anything had gone wrong.
| GoDaddy | Cloudflare | |
|---|---|---|
| .com renewal | $22.99 a year | $11.17 a year |
| Can suspend? | Yes, at its discretion | Yes, at its discretion |
| Our clients | Domain suspended, with a transfer or government documents required to get it back | Domain stayed active, but one store got a site-wide warning page |
| Outside DNS | Allowed | Not allowed |
Is Cloudflare completely safe for a peptide domain?
No. Cloudflare’s contract lets it suspend registrations at its sole discretion, it can act on court orders, and it restricted one client’s storefront after a complaint.
Read Section 4.3 of Cloudflare’s registration agreement before you treat it as untouchable. It reserves the right to cancel, suspend or transfer a registration “as deemed necessary in the unlimited and sole discretion of Cloudflare.” The listed grounds include court orders, requests from law enforcement and activity contrary to applicable law. That’s as broad as GoDaddy’s wording, so the difference between them is how they’ve used the power, and that could change.
We’ve also been on the wrong end of Cloudflare. In September 2026, a brand-protection firm working for a drugmaker filed a report about a client’s store. It was filed as phishing, although what it described was a complaint about the products. Cloudflare put a “Suspected Phishing” warning on every page and forwarded the complaint to the hosting company. We disputed the label and asked for a review, and Cloudflare removed the warning within an hour of our report.
Cloudflare’s abuse policy says it forwards reports to the hosting provider and website operator, and hosts can act fast. An earlier report on the same store got us 24 hours from the host to remove the site. Moving your domain does nothing about that, which is why hosting that can move quickly matters just as much.
A registrar also can’t change whether what you sell is legal. Moving your domain buys you some protection from a quick decision by one company, and it does nothing about the FDA, state regulators, a court order or a drugmaker’s lawyers. Legality depends on the product and how you market it (we cover what the FDA’s 2026 warning letters cite in is it legal to sell peptides), so talk to an attorney who works in this area. Our guide to starting a peptide business covers more of that ground.
How do you transfer a domain from GoDaddy to Cloudflare?
Add the domain to Cloudflare, switch your nameservers, unlock it at GoDaddy, copy the authorization code, enter it at Cloudflare, then approve the transfer.
These steps follow Cloudflare’s transfer guide and GoDaddy’s transfer instructions, plus a few things we’ve learned doing it for clients:
- Export your DNS records from GoDaddy, and keep a copy. Your email records (MX, SPF and DKIM) are the ones you can’t afford to lose.
- Check for DNSSEC at GoDaddy. If it’s on, remove the DS records and wait at least 24 hours before changing nameservers.
- Add the domain to Cloudflare and review the imported records. Remove any old NS records, and we’d leave the proxy off until everything is confirmed working.
- Change the nameservers at GoDaddy to the two Cloudflare gives you, then wait for the domain to show “Active.” That usually takes minutes and can take up to 24 hours.
- Test your website and send a test email in both directions. We’ve seen a brief SSL error during this switch, so check again before you worry.
- At GoDaddy, unlock the domain, turn off Domain Privacy and set Domain Protection to none. GoDaddy’s transfer checklist can do this for you.
- Open the domain in your GoDaddy portfolio, choose “Transfer to Another Registrar,” verify your identity and copy the authorization code.
- In Cloudflare, go to “Transfer domains,” select the domain, enter the code and make sure your payment method is valid.
- Confirm your contact details and select “Confirm transfer.”
- Approve the transfer from GoDaddy’s email or dashboard so you aren’t waiting on the clock.
Once it lands, look the domain up in ICANN’s lookup tool and confirm the registrar shows Cloudflare. Then turn on two-step verification on the Cloudflare account that now holds it.
How long does it take, and what does it cost?
Plan on about a week and $11.17 for a .com at Cloudflare, which adds one year to your current expiration date.
Cloudflare says your active work takes about 30 minutes and the whole process can take up to 10 days, with most registrars approving within 5 business days. GoDaddy says transfers typically take 5 to 7 days and that you can speed them up by approving. Public records show our client’s transfer went through the same evening, after GoDaddy released the domain, so that one ran far faster than normal. Don’t count on the same timing.
GoDaddy’s instructions don’t list a fee for leaving. You pay Cloudflare’s price for the added year, which was $11.17 for a .com in our November 2 price check. Your expiration date moves out a year, so you don’t lose the time you’ve already paid for.
Why can’t I transfer my domain away from GoDaddy?
Usually it’s a 60-day lock or a protection setting. A suspended domain also needs GoDaddy to lift its hold before it can move.
- The domain was registered or transferred in the last 60 days. GoDaddy’s rules say the same for a contact change if a 60-day lock was applied when it was approved.
- It was part of a bundle, which carries a 120-day restriction after a new registration.
- It’s still locked, or Domain Protection is still on.
- It recently expired and renewed. Cloudflare says to wait at least 45 days after the original expiration date.
- It’s suspended. ICANN’s guide says a domain with clientTransferProhibited can’t move until the registrar removes that status.
The 60-day rule is the best argument for doing this early. A store that buys a new domain at GoDaddy today can’t move it for two months, even if a suspension arrives next week. If you’re buying a domain for a new store, buy it at Cloudflare from the start.
What else should a peptide store set up besides Cloudflare?
Keep a spare domain, off-server backups and a second host ready, and make sure the business owner controls the registrar login.
Our client’s store came back 18 minutes after the spare domain was bought. That only worked because we already had access to the server and the owner could reach Cloudflare right away. Buying the spare ahead of time removes one more step from a bad afternoon, and it also covers an outage that has nothing to do with a complaint, like the Namecheap outage in August.
A spare domain is for a disputed complaint or a technical failure. It won’t get you out of a court order or a regulator’s action. In those cases, call your attorney first. Our guide to selling peptides online covers the hosting, backup and payment side.
Domain transfer FAQ
What should I do if my domain is suspended by GoDaddy right now?
Read the notice and reply to the address it gives. If you have no way to meet its demands, ask whether GoDaddy will release the domain for transfer. While you wait, put the store on a spare domain at another registrar, and call your attorney if you dispute the claim.
What does clientHold mean?
clientHold is a status your registrar sets that tells the registry not to activate your domain in the DNS, so it stops resolving. ICANN says it’s usually used during legal disputes, for non-payment, or when a domain is subject to deletion. Only your registrar can remove it.
Will moving from GoDaddy to Cloudflare take my site or email down?
It shouldn’t if your DNS records are copied correctly. The risky moment is the nameserver change, so check your website and email records before you switch and test both right after. The registrar transfer itself comes later and doesn’t change your DNS.
Do I have to host my website on Cloudflare?
No. Your website can stay on any host. Cloudflare Registrar does require Cloudflare for your DNS, so you can’t use another DNS provider while the domain is registered there.
Is my domain safe once it’s at Cloudflare?
It’s better placed, in our experience, but it isn’t guaranteed. Cloudflare’s agreement lets it suspend a registration at its sole discretion, including for court orders or illegal activity. Keep backups, a spare domain and a second host ready either way.
The short version
GoDaddy suspended a peptide client’s domain on a Wednesday afternoon, and the owner only kept it by moving it to Cloudflare that day. Cloudflare costs about half as much to renew and has been the steadier registrar for our clients, though its contract gives it the same power to suspend and it has restricted one client’s store. Move while your domain is in good standing, keep a spare domain and backups ready, and get legal advice on what you sell.
Still on GoDaddy? Tell us about your store or call us at (919) 444-2005. We’ll move the domain with you at our $50 hourly rate and check the rest of your setup while we’re in there.
