secure server

Do not enter credentials at http://autodiscover.secureserver.net/; use the endpoint only when Outlook reaches it through automatic account configuration over HTTPS, the certificate is valid for that hostname, and GoDaddy is the actual email provider.

secureserver.net is associated with GoDaddy’s email infrastructure, so the hostname is not inherently malicious. However, that does not establish that it is the correct Autodiscover endpoint for every mailbox.

Check which email service you have

• GoDaddy Microsoft 365: Set up the account as Microsoft 365/Exchange and let Outlook discover the settings automatically. Microsoft 365 administrators can verify the expected Autodiscover CNAME under Microsoft 365 admin center → Settings → Domains → your domain → DNS records → Manage DNS. Microsoft recommends an Autodiscover CNAME for automatic Outlook configuration.^1^
• GoDaddy Professional Email/Titan: Use GoDaddy’s documented Outlook setup instructions rather than assuming this Autodiscover URL is correct.^2^
• Outlook.com or Microsoft 365 not supplied by GoDaddy: Do not approve this endpoint unless your email administrator confirms that your domain intentionally redirects there.

If Outlook displays a redirect or certificate prompt

1. Confirm the destination starts with https://, not http://.
2. View the certificate and confirm:
   • the certificate name matches the server;
   • it is issued by a trusted certificate authority;
   • it has not expired.
3. Cancel if Outlook reports a certificate-name mismatch or invalid certificate. Such a warning means the endpoint name Outlook expected is absent from the server certificate.^3^
4. Do not select Always allow until the endpoint has been confirmed for your mailbox.

Outlook’s documented Autodiscover process does not follow a nonsecure http:// redirect when retrieving configuration; redirected configuration URLs must use HTTPS, and Outlook additionally checks certificate information.^4^

In short: the domain can be legitimate GoDaddy infrastructure, but the exact http:// URL should not be treated as a safe login page. Verify your mailbox product and use Outlook’s automatic HTTPS configuration.

References

1. Connect your domain by adding DNS records - Microsoft 365 admin
2. Add my Professional Email powered by Titan to Outlook ... - GoDaddy
3. Resolve AutoDiscover mismatch warning in Outlook - Outlook
4. Outlook 2016 implementation of Autodiscover | Microsoft Support