Domain Security
Protect Your Domain, Protect Your Business
Your domain is one of your most valuable digital assets. At UMVA, we take domain security seriously — offering free WHOIS privacy, free SSL certificates, domain lock protection, email authentication, account security, and proactive threat monitoring. Every domain registered through UMVA is protected by a comprehensive suite of security features designed to keep your online identity safe from hijacking, fraud, and cyber threats.
Free WHOIS Privacy Protection
Keep your personal information private — included free with every domain
What Is WHOIS Privacy?
Every domain registration requires you to provide accurate contact information — your name, address, phone number, and email address. By default, this information is published in the public WHOIS database, where anyone in the world can look it up. WHOIS Privacy Protection replaces your real contact details with anonymous proxy information, shielding your personal data from spammers, data miners, identity thieves, and unwanted solicitations.
How It Works
- Automatic activation WHOIS privacy is enabled automatically on all eligible TLDs at no extra cost when you register or transfer a domain.
- Anonymous proxy information Your real name, address, phone, and email are replaced with proxy data in the public WHOIS directory.
- Legitimate contact forwarding Legitimate inquiries (e.g., domain purchase offers, technical issues) are forwarded to your real email — you never miss important communications.
- ICANN-compliant Our privacy service fully complies with ICANN regulations, ensuring your domain remains in good standing while your data stays protected.
Why WHOIS Privacy Matters
Free SSL Certificates via Let's Encrypt
Encrypt your website traffic and build trust with every visitor
Automatic Encryption
Every domain registered or hosted with UMVA receives a free SSL certificate from Let's Encrypt — automatically issued and renewed. Your website traffic is encrypted end-to-end, protecting sensitive data like passwords, credit cards, and personal information from interception.
SEO & Trust Benefits
Google and other search engines give higher rankings to HTTPS-enabled websites. A valid SSL certificate also displays the padlock icon in browsers, reassuring visitors that your site is secure — boosting click-through rates, reducing bounce rates, and increasing conversions.
Auto-Renewal & Management
Forget about manual SSL renewals. Our system automatically renews your Let's Encrypt certificates before they expire, ensuring uninterrupted HTTPS protection. You can also manage certificates from your UMVA dashboard — issue, revoke, or reissue with a single click.
What SSL Does for Your Website
- Encrypts all data between your website and your visitors
- Displays the padlock icon in browser address bars — builds immediate trust
- Required for PCI DSS compliance if you accept online payments
- Improves Google Search ranking — HTTPS is a confirmed ranking signal
- Prevents "Not Secure" warnings in Chrome, Firefox, and other browsers
Domain Lock & Protection
Prevent unauthorized transfers and keep full control of your domain
Registrar Lock
Registrar lock is the most fundamental domain security feature. When enabled, it prevents any changes to your domain's registrar, nameservers, or contact information without explicit authorization. Any attempt to transfer your domain to another registrar will be automatically rejected. You can easily disable the lock from your UMVA dashboard when you need to make legitimate changes.
Transfer Lock
Transfer lock adds an additional layer of protection specifically against unauthorized domain transfers. Before any domain can be transferred away from UMVA, the registrar lock must be removed and a valid EPP (transfer authorization) code must be provided. We also send email notifications to the domain owner for any transfer request, giving you time to stop unauthorized transfers.
Transfer Alerts
You will receive email notifications whenever a transfer request is initiated for your domain. If you did not authorize the transfer, you can take immediate action to block it. Our system also alerts you to any changes to your domain's nameservers, contact details, and registrar lock status.
Grace Period Protection
Even if a domain is accidentally transferred or deleted, ICANN-mandated grace periods give you time to recover it. The Auto-Renew Grace Period (45 days) and Redemption Grace Period (30 days) provide a safety net. UMVA will notify you and assist with recovery during these windows.
Email Security — SPF, DKIM & DMARC Authentication
Protect your domain from email spoofing, phishing, and fraud
SPF (Sender Policy Framework)
SPF allows you to specify which mail servers are authorized to send email on behalf of your domain. When you set up an SPF record in your DNS, receiving mail servers can verify that incoming emails claiming to be from your domain actually originated from your authorized servers. This significantly reduces the risk of spammers forging your domain in their email headers.
DKIM (DomainKeys Identified Mail)
DKIM adds a digital signature to every email sent from your domain. This signature is verified against a public key published in your DNS records. If the signature matches, the email is confirmed to be authentic and unmodified in transit. DKIM ensures that your emails are not tampered with and that they genuinely come from your domain, improving deliverability and trust.
DMARC (Domain-based Message Authentication)
DMARC builds on SPF and DKIM by telling receiving mail servers what to do when an email claiming to be from your domain fails authentication checks. You can instruct servers to quarantine suspicious emails, reject them outright, or deliver them with no action. DMARC also provides reports showing you who is sending email from your domain, helping you detect abuse.
Why Email Authentication Matters
Email spoofing is one of the most common cyber threats. Attackers forge your domain in phishing emails to trick your customers, partners, and employees. With SPF, DKIM, and DMARC properly configured, you can dramatically reduce the risk of your domain being used for email fraud, protect your brand reputation, and improve email deliverability rates.
Account Security
Securing your UMVA account — your first line of defense
Two-Factor Authentication (2FA)
Add an extra layer of security to your UMVA account with 2FA. In addition to your password, you'll need a one-time code generated by your authenticator app (Google Authenticator, Authy, etc.) or received via SMS. Even if your password is compromised, 2FA prevents unauthorized access to your account and domains.
Strong Password Policy
UMVA enforces strong password requirements for all accounts. We recommend using a unique, complex password with a mix of uppercase and lowercase letters, numbers, and special characters. Use a password manager to generate and store secure passwords, and avoid reusing passwords across different services.
Account Monitoring
We monitor account activity for suspicious behavior, including multiple failed login attempts, login from new devices or locations, and changes to critical account settings. You'll receive email alerts for important account changes, and our security team may temporarily restrict access if suspicious activity is detected.
Login History & Sessions
Review your account login history from the UMVA dashboard. See all active sessions, including device type, browser, IP address, and last activity time. You can terminate any session remotely if you suspect unauthorized access. Regularly reviewing login history helps you detect potential security breaches early.
Security Notifications
Receive real-time email and dashboard notifications for critical security events — password changes, email address updates, 2FA status changes, new device logins, and domain transfer requests. Staying informed helps you respond quickly to any unauthorized activity.
Account Recovery Options
Set up account recovery options including backup email addresses and security questions. If you lose access to your account, these recovery methods allow you to regain control. We also recommend keeping your account profile information up to date to ensure you receive important security communications.
Anti-Phishing & Malware Monitoring
Proactive threat detection to protect your domain and your visitors
Phishing Protection
Phishing attacks use fraudulent websites and emails that mimic legitimate brands to steal sensitive information. UMVA actively monitors for phishing campaigns that abuse our domain platform. We also provide tools and guidance to help you protect your own domains from being used in phishing attacks.
- Proactive scanning for phishing websites using your domain
- Rapid takedown process for confirmed phishing sites
- Integration with global threat intelligence feeds
- Email authentication (SPF, DKIM, DMARC) to prevent email spoofing
Malware Monitoring
Malware can compromise your website, steal visitor data, and damage your reputation. UMVA's monitoring systems scan for known malware signatures and suspicious behavior patterns. If malware is detected on your domain, we alert you immediately and provide remediation guidance.
- Regular scanning for malware and malicious code injection
- Blacklist monitoring — Google Safe Browsing, Spamhaus, etc.
- Immediate alerts when threats are detected>
- Step-by-step malware removal guidance
If you suspect your domain has been compromised or is being used for malicious activity, report it immediately to our abuse team.
Report Security IssueDomain Security Checklist
Follow these best practices to keep your domain and online presence secure
Essential Security Measures
- Enable WHOIS Privacy Keep your personal contact information hidden from the public WHOIS database. Already included free with all UMVA domains.
- Enable Registrar Lock Prevent unauthorized domain transfers. Enable registrar lock in your UMVA dashboard — it stays on by default for your protection.
- Install SSL Certificate Encrypt your website traffic with HTTPS. Free Let's Encrypt certificates are available for every domain through your UMVA dashboard.
- Enable Two-Factor Authentication (2FA) Add an extra layer of security to your UMVA account. Use an authenticator app for the most secure setup.
- Use a Strong, Unique Password Create a complex password for your UMVA account and use a password manager to store it securely. Never reuse passwords across services.
Advanced Security Practices
- Configure SPF, DKIM & DMARC Records Set up email authentication to prevent spoofing and phishing attacks using your domain. Our support team can help you configure these records.
- Review Account Activity Regularly Check your login history and active sessions from your UMVA dashboard. Terminate any sessions you don't recognize.
- Keep Domain Contact Info Updated Ensure your email address and phone number on file are accurate. You need to receive security notifications and transfer confirmation emails.
- Enable Auto-Renewal Prevent accidental domain expiration by enabling auto-renewal from your User Balance. Expired domains can be hijacked or sold to third parties.
- Monitor Blacklists & Security Feeds Regularly check if your domain appears on security blacklists. Use tools like Google Safe Browsing and MXToolbox to monitor your domain's reputation.
Your Domain Deserves the Best Security
At UMVA, every domain comes with free WHOIS privacy, free SSL certificates, domain lock protection, and more — all included at no extra cost. Register your domain today and enjoy enterprise-grade security at affordable prices.