Unsecured domain names

Your domain name can be as important to your business as your physical address. If it isn't protected there's a risk online attackers could take over your domain name and impersonate your business.

1 min read

Please note this guide is for businesses that have a website and associated email system. It requires a moderate level of technical expertise. We recommend reading it but also checking with your IT or website provider where necessary.

What it is

are web addresses that you use to access a website or send emails to the right email server.  Essentially, it's the part of a web address that follows 'www.' Or the part of an email that follows '@', such as example.com or ownyouronline.govt.nz. 

The ' ' (DNS) converts domain names into (IP) addresses in the background. An IP address is a string of numbers (for example: 198.51.100.83) and easy for computers to read, where domains are words and easier for humans to read.

If you want to set up a website or a custom email address, you will need to purchase (register) a domain name from a . 

The .nz domain names and any registrars who offer it, are regulated by the Domain Name Commission (DNC) and InternetNZ. 

How it works

Your domain name will be unique to you and your customers associate your business with it. It's important to make sure others can’t use your domain name to pretend to be you or your business.

A cybercriminal using your domain name could target your customers which can have a severe impact on your business's reputation.

The risks

If your domain name does not have protections in place, online attackers  could take over your domain name. The DNS is like a chain, and you need to ensure each link is secure.

For example: 

  • Attackers may try to get your login details for the registrar and change all the records to theirs. 
  • Some DNS records can link to other DNS records. These referenced records or associated devices might be something attackers can control.
  • They may buy your domain name before you can re-register. 
  • They could also spoof your email and send emails to your customers pretending to be you.

This is not an exhaustive list. There are many ways attackers could exploit other weaknesses in your domain name set-up which is why having the right protections is important.

Protect your domain name

We have created a guide with the steps you can take to protect your domain name. The guide has advice at different levels of technical complexity. We recommend working with an IT provider if you don't feel confident.

Secure your domain name