Security & Privacy

WHOIS privacy, locks, two-factor and the scams every domain owner should recognise.

1. What Is WHOIS Privacy and Do You Need It? →

   WHOIS privacy swaps your name, address, phone and email in the public domain record for a proxy's details. Here is what it hides, what it never hides, where it is not allowed, and how to switch it on.

   9 min read · Answers “what is whois privacy”

2. Domain Lock / Transfer Lock: What It Protects Against →

   The transfer lock is a registry status flag that makes a stolen auth code worthless. Here is what clientTransferProhibited blocks, what it cannot block, how it differs from the 60-day rule and Registry Lock, and how to verify it.

   9 min read · Answers “domain lock”

3. How to Stop Domain Hijacking →

   Hijacks use a password, an email account, a phone number or a support agent, never the registry itself. Here are the six routes into a domain and the free control that closes each one.

   10 min read · Answers “domain hijacking”

4. Domain Renewal Scam Letters and Emails: How to Spot Them →

   Slamming letters, fake expiry emails, SEO listing invoices and brand-protection bait all arrive timed to your public expiry date. Here is how each works, the sign that gives it away, and how to make the deadline disappear.

   9 min read · Answers “domain renewal scam”

5. What Is DNSSEC and Should You Turn It On? →

   DNSSEC signs your DNS records so resolvers can reject forged answers. Here is what it protects, what it leaves alone, the one mistake that takes domains offline, and how to enable it without downtime.

   10 min read · Answers “what is dnssec”

6. Typosquatting and Lookalike Domains: Should You Buy Them? →

   Which variants of your domain attackers actually use, which three to eight are worth registering, what to do about the ones already taken, and the controls that protect you from every variant at once.

   10 min read · Answers “typosquatting”

7. Registrar Account Security: 2FA, Recovery and Access →

   Every protection on a domain can be switched off from inside the registrar account. Here is how to lock that account down: app-based 2FA instead of SMS, a recovery path you control, and access per person instead of a shared password.

   9 min read · Answers “secure domain registrar account”

8. GDPR, RDAP and the End of Public WHOIS →

   Since 2018, domain lookups redact personal data and run over RDAP instead of port-43 WHOIS. Here is what changed, what is still public, how to verify a seller without a name, and what it means for your own privacy.

   9 min read · Answers “whois gdpr”

9. What Happens If Someone Steals Your Domain: Recovery Steps →

   The first 24 hours decide most stolen-domain cases. Here is how to contain the breach, prove ownership, work the registrar reversal process inside the 60-day window, and escalate to TDRP, UDRP or court if needed.

   10 min read · Answers “domain stolen what to do”