Phishing email warnings for MyHost customers

Protect youself

Stay Alert to Scams

Some simple steps can help you avoid phishers and scammers who want your data and your money.

Check suspicious emails with us

If you ever receive an email about your domain, web hosting, or MyHost account and it doesn't look quite right, we are here to help. Forward the email to [email protected] and we'll confirm whether it's genuine or not.

This also lets us identify phishing attacks and warn other customers.

Domain owners: Hide your contact details with privacy protection

When you register a domain, you are required to save multiple sets of contact details as part of that registration. Some of that contact information will become public information, available via a WHOIS lookup.

Some scammers harvest this contact information and then impersonate your domain provider (e.g. MyHost). You can hide your email address and other contact information by adding Privacy Protection to your domain. Read more in the blog or see how to add Privacy Protection to your domains.

Turn on two-factor authentication (2FA)

Even if someone gets their hands on your password, 2FA blocks them from logging in without an extra code from your phone. Learn how to enable 2FA in the Knowledge Base.

Check whether you're on a real MyHost web address

Some scams will spoof or impersonate our website. If they trick you into entering passwords or other details, that's a problem. Check the domain that you're on and make sure that it really is us:

myhost.nz
my-host.au
myhost-clients.com (this is the only domain where we collect credit card details)

Fake emails, real attacks

Known Phishing Attacks

Received a fishy email? Check whether it's listed here, or forward it to [email protected] and we'll let you know whether it's genuine.

February 2026: Renewal notification from "DNRS"

Date: 13-14 February 2026

Subject line: Renewal notifications for: www.example.com

Apparent sender: [email protected]

Link text: 'View Invoice'

Attachment (DO NOT OPEN): PDF file with a name like 'Invoice_14041.pdf'

Earlier attacks have come from names like "DRNS" and "DNRS NZ". This time around, a fake website has been created to make the sender look legitimate.

February 2026: Nationwide warning from the Domain Name Commission

Every .nz domain registrar has received this warning from the DNC:

The Domain Name Commission (DNC) is advising all .nz registrars to remain alert to phishing email campaigns that impersonate registrars and target domain name holders.

Two recent reports indicate that malicious actors are sending emails that appear to originate from legitimate registrars, often requesting .nz domain name holders to renew their .nz domain name via clicking on a phishing link or by paying a fraudulent invoice.

The reports indicate that the phishing emails may use branding, registrar names, or language designed to closely resemble legitimate registrar communications or even spoofed version of the registrar's website.

This is an unprecedented warning, and a sign that phishing is becoming a bigger problem for domain holders.