A domain (websites address) is crucial for any online business. Perhaps this is why it’s one of the top targets for scams and phishing attempts. The following tips help you protect your domains privacy and security, to secure and protect your domain.
Domains are targeted by both companies and hackers. Some companies are using unethical spam-like tactics, as an attempt to manipulate you into transferring your domain registration. Hackers are also using similar methods in attempt to hijack your domain. In either option, you might receive an email, a call, or a post card that states your domain is about to be terminated. The following is an example of a spam message that you might receive.
EXAMPLE:
YOUR IMMEDIATE ATTENTION TO THIS MESSAGE IS ABSOLUTELY NECESSARY!
YOUR DOMAIN nameofyourdomain.com WILL BE TERMINATED WITHIN 24 HOURS
We have not received your payment for the renewal of your domain nameofyourdomain.com
CLICK HERE FOR SECURE ONLINE PAYMENT
The example above is a condensed version and might also be followed by a payment link or transfer option. So how do you determine the difference between spam or a hijack attempt versus something that is a legitimate notice from your domain registrar? A hijack attempt, also known as domain hijacking, is the process of changing the registration of a domain without a registrants permission. The following provides a few tips for awareness to help you in distinguishing the difference on malicious or unethical attempts (like above) as well as securing your domain.
Domain transfer awareness
If you receive something like the above example, instead of rushing to respond, we recommend to first check on the status of your domain and verify the validity of the inquiry. A legitimate notice would typically be phrased differently, such as a notice that your domain is about to expire or is close to its renewal date. To check on your domain, login to your registrar account, the website that you reserved your domain through. Your account will display the status of your domain, if it’s active and when it expires. When in doubt, you could always contact your registrar provider directly to help you determine the validity of any request that you have received.
Securing your domain
In order to secure your domain, we highly recommend having your domain configured with both privacy (whois privacy) and transfer lock (domain lock) enabled. In addition, it’s also good to have your domain set to auto-renew which requires you to ensure your payment details are current and remain up to date. These options will help secure your information, minimize spam and add an extra layer of protection against domain hijacking. Some domain registrars (such as hover.com), include whois privacy and transfer lock by default, while others might require an up charge for privacy. The configuration steps might be as simple as a flag setting or check box, depending on your domain’s registrar. We highly recommended having privacy configured for all domains, even if it requires an additional fee, for your privacy and security.
As a reminder, with any domain related notice, question and double check everything, especially before clicking on any links. In regards to emails, make sure to check the source (email address and name) to verify its validity and make sure its not a phishing attempt. It is our hope that these tips help you secure and protect your domain.
