SiteHost

What real SiteHost communications look like

• The only genuine SiteHost website domains are sitehost.nz, sitehost.co.nz (redirects to sitehost.nz), site-host.com.au and sitehost-status.net (which never contains a login link). SiteHost states there are no other SiteHost websites or portals
• cp.sitehost.nz (the control panel) is the only place SiteHost asks for credit card details. cp.sitehost.nz and webmail.sitehost.co.nz are the only two places it asks you to log in
• If a message about renewals, invoices or payment doesn't feel right, don't click anything. Log in to cp.sitehost.nz yourself by typing the address or using your own bookmark, and check there
• Not sure about an email? Forward it to support@sitehost.nz (or submit a ticket from your account) and SiteHost will confirm whether it is genuine
• SiteHost has made two-factor authentication (2FA) compulsory on all accounts since March 2026

Common spoof patterns

• Fake domain renewal or expiry notices, such as "Your Domain Expires Soon – Renew Now", "Final Notice: Domain Expiry Alert" and "Renewal of your domain name failed !", linking to a fake login page
• Fake invoices from lookalike registrars (for example "DNRS New Zealand" / "DRNS"), with a "View Invoice" link or a PDF attachment named like Invoice_14041.pdf
• Fake payment demands such as "Your Service Will Be Suspended Without Payment", linking to a copy of the SiteHost billing page to harvest card details
• Fake account or compliance checks such as "Complete your verification process" and "Action Required: Verify your email for Domain ICANN Compliance", leading to a fake login or Roundcube webmail page
• Fake mailbox warnings such as "Your sitehost.co.nz Email Storage is Full!"
• Sender and link disguises: SiteHost has documented scam emails sent from unrelated domains (for example sitehost-service.com, dolphn.host, greenmail.ch and dnrsnz.com) with a friendly display name like "Support Team" or "Sitehost Registrar", and link text that pretends to go to sitehost.nz while the real destination is a different site

Note for NZ organisations

The Domain Name Commission warned all .nz registrars in February 2026 that scammers are impersonating registrars to target .nz domain holders, either to get them to click a phishing link to renew, or to pay a fraudulent invoice. A stolen control panel login can put your domain, DNS and email at risk, so a convincing renewal notice is worth checking before you act. If you entered your details on a page you're unsure about, change your SiteHost password straight away and make sure 2FA is on.