Domains
Domain security: lock down the asset everything depends on
Lose your domain and you lose your website, your email and the trust you’ve built. Here’s how domains are lost, and how we protect yours.
The short answer
Domain security is about making sure nobody can take, transfer or redirect your domain without your permission. Most domains are lost through lapsed renewals, out-of-date contact details or stolen account logins, not clever hacking. Simple controls stop nearly all of it.
How businesses lose their domains
A missed renewal
The card expired or the reminder went to an old email. After the grace period, anyone can register it.
The wrong registrant
A former designer or staff member registered it in their own name. Legally, it's theirs.
A stolen login
Someone gets into the account where the domain is managed and moves it or changes DNS.
A fake renewal invoice
Paying a look-alike notice can authorise a transfer to another company.
How we protect your domain
- Transfer lock on. Your domain can’t be moved without unlocking it first.
- Registered to your business. We check the registrant is you, not a person or supplier.
- Renewal monitoring. Auto-renew, early reminders and an eye on cards that are about to expire.
- Current contacts. Approval emails go to an address you control.
- Changes by request. DNS and transfer changes are confirmed with you first.
DNS hijacking and email spoofing
Even without stealing a domain, attackers can misuse it. If they can change your DNS, they can send your visitors to a fake site or intercept your email. If your email isn’t authenticated, they can send messages that look like they came from you.
Business email compromise was the most commonly reported cybercrime type for businesses in the ASD’s 2024-25 report. Correct SPF, DKIM and DMARC records make your domain much harder to impersonate. See domain and DNS management for how we set these up.
Five-minute domain security check
Step 1
Look up the owner
Check the WHOIS record shows your business as the registrant.
Step 2
Check the expiry date
Make sure auto-renew is on and the card on file is current.
Step 3
Check the contact email
It should be an address that will exist in five years' time.
Step 4
Turn on the lock
Make sure the transfer lock is enabled.
Get a free domain health check
We’ll check ownership, expiry, locks and email records, and tell you exactly what needs fixing.
Emergencies, 24/7: 0426 833 422
Domain security FAQs
How do I know who owns my domain?
Look up the domain on a WHOIS service. For .au domains, the registrant name and ABN or ACN are shown. If it isn’t your business, it’s worth fixing.
What is a domain transfer lock?
A setting that stops your domain being transferred to another provider until it’s turned off. It should stay on unless you’re moving the domain.
Can someone steal my domain?
It’s rare, but it happens through stolen logins, lapsed renewals or fake renewal invoices. Locks, correct ownership and auto-renew prevent most cases.
Can I hide my details on a .au WHOIS lookup?
The .au WHOIS already hides the street address and phone number. It shows the registrant name, eligibility details and a contact name.
What should I do if my domain has been moved without permission?
Contact us or your provider straight away. The sooner it’s reported, the easier it is to reverse.
Domain security guides
Practical guides from our blog on the same topic.
