The short version
Who owns my website? Two things decide it. The domain belongs to the organisation named as registrant in MYNIC's record. Anyone can read that name at mynic.my/whois. Control sits with four logins: the registrar account, the DNS, the hosting and your Google accounts. The public record names the registrar and the name servers. It hides every person behind them. Across 32 Malaysian insurance firms, 31 domains carried the firm's own name or its group's. The name is usually right. Whose login runs it is the question worth asking.
What the registry shows about a .com.my domain
This is the public record for our own domain, read from MYNIC on 22 September 2026. The navy lines are public. The grey lines have been hidden since 8 November 2022.
- Registrant Organization
- Upcial Marketing
- Whose name the domain is in
- Registrar
- Exabytes Network Sdn Bhd
- Where the account lives
- Registry Expiry Date
- 2028-06-12
- When it must be renewed
- Domain Status
- clientTransferProhibited
- Locked. A move needs the lock lifted first
- Name Server
- charles.ns.cloudflare.com
- Who runs the DNS, which points your website and email
- Admin Name
- REDACTED FOR PRIVACY
- The person who can transfer or delete the domain
- Tech Name
- REDACTED FOR PRIVACY
- The person who can change the name servers
- Billing Name
- REDACTED FOR PRIVACY
- The person who handles renewal payments
What each hidden contact can do comes from MYNIC's own page on managing a domain. The administrative contact matters most. MYNIC lets that person appoint the other contacts, change the registrant's record, and transfer or delete the domain.
What we found across 32 Malaysian insurance firms
On 22 September 2026 we read the public record for every .my domain on our list. The list covers Malaysian insurance brokers, loss adjusters and Labuan insurers. The firms stay unnamed.
The name was right almost everywhere. That is the half the public record can show. The other half is who holds the logins, and only the firm can answer that. A transfer lock adds one step before a domain can move: whoever holds the registrar account lifts it first.
Two more addresses on the list are open for anyone to register today. Both were printed as firms' websites in the 2025/2026 directory. The firms may have moved to another address. The public record only shows that the printed one is free to buy.
The four logins that decide who controls your website
A firm owns its website when its own people hold all four. Each one can take the site or the email down on its own.
Scroll the table sideways →
| The login | What it controls | Where to find who holds it |
|---|---|---|
| The registrar account | Renewing, transferring and deleting the domain, and naming its contacts | The registrar named in the public record |
| The DNS | Where your website and your email point | The company named in the Name Server lines |
| The hosting | The website's files, and the security settings they are served with | Whoever sends the hosting invoice |
| Your Google accounts | Search Console, which shows who finds you, and your Business Profile on Google Maps | Search Console: Settings, then Users and permissions. Business Profile: its settings, then People and access |
The two Google accounts are the ones we most often find in a supplier's name. They tend to be opened in a hurry at launch, by whoever was building the site that week.
How to check who owns your domain, in a minute
Five lines of the public record answer most of it, and anyone can read them.
- Open mynic.my/whois and type your domain, such as yourfirm.com.my.
- Read Registrant Organization. Your firm's name, or your group's, means the domain is in your name.
- Read Registrar. That is where the account lives. Ask who at your firm can log into it.
- Read Name Server. That company runs your DNS. Ask the same question.
- Read Registry Expiry Date. Put the renewal in the diary a month early.
If the only login belongs to someone who has left, close that gap while the domain is live. The name on the record carries real weight. MYNIC's transfer policy puts the registrant's instruction above the administrative contact's when the two disagree.
When a .my domain lapses: up to 80 days, in three stages
This is MYNIC's own lifecycle for a domain past its expiry date. The website and email go dark at stage two, which is usually when a firm first notices.
Scroll the table sideways →
| Stage | How long | Your website and email | What renewing costs |
|---|---|---|---|
| 1 · Renewal grace | Up to 45 days | Up to the registrar: running or suspended | The normal renewal price |
| 2 · Redemption | 30 days | Stopped | A redemption fee plus one year |
| 3 · Pending delete | 5 days | Stopped | Renewal is closed |
| Released | Day 81 at the latest | Gone | Anyone may register it |
A domain can be paid for up to 10 years ahead. Ours runs to June 2028. The morning check on every site we maintain reads the expiry date and the transfer lock. The retainer is on website maintenance.
What firms ask us about owning their website
Who owns my website?
Two things decide it. The domain belongs to the organisation MYNIC's record names as the registrant, and the public lookup shows that name. Control sits with four logins: the registrar account, the DNS, the hosting and your Google accounts. Your firm owns the website when its name is on the domain and its own people hold those four logins.
How do I check who owns a .com.my domain?
Open mynic.my/whois and type the domain. The line called Registrant Organization shows whose name the domain is in. The same record names the registrar, the expiry date, the transfer lock and the name servers. It takes about a minute, and the page is open to anyone.
Why does the MYNIC lookup say REDACTED FOR PRIVACY?
Since 8 November 2022, MYNIC hides the name, address and email of every person on a .my record. It did so in line with the Personal Data Protection Act. That covers the registrant's contact person and the administrative, technical and billing contacts. The organisation's name, the registrar, the dates and the name servers stay public. MYNIC's Domain Contact Request form passes a message to the contacts when you have a legitimate reason.
Our old web designer set up our domain. Is it ours?
Read the lookup first. If Registrant Organization shows your firm's name, the domain is in your name, whoever set it up. Then ask which email is the administrative contact, because under MYNIC's rules that person can transfer or delete the domain. Ask for it to be handed to someone at your firm. If the lookup shows another company's name, the administrative contact can change the registrant in MYNIC's SELFCARE portal.
How do I transfer a .com.my domain to another registrar?
Ask your current registrar for the domain's authorisation code. MYNIC's transfer policy says it must be provided as soon as the registrant asks. Give the code to the new registrar, and confirm the request in writing as the registrant or the administrative contact. The transfer then completes within five calendar days. The current registrar may refuse only on grounds the policy lists. They include unpaid fees, a dispute over identity, and a domain under 60 days old. Where the registrant and the administrative contact disagree, the registrant's instruction wins.
What happens if a .com.my domain expires?
MYNIC allows up to 45 days to renew at the normal price. The registrar decides whether the site keeps running in that time. Then comes a 30-day redemption period: the website and email stop, and renewing costs a redemption fee plus a year. After 5 more days the domain is deleted and anyone can register it.
How much does a .com.my domain cost?
MYNIC and SSM gave the usual retail price as RM 80 a year when they launched a joint offer in July 2025. Under that offer, a business newly registered with SSM could get one for RM 60 a year. Registrars set their own prices, and a .my domain can be paid for up to 10 years ahead.
Who can register a .com.my domain?
A .com.my is registered to an organisation. MYNIC asks for its registration documents, such as a company's SSM forms. Its FAQ lists the documents it accepts for companies, businesses, foreign companies and other bodies.
Who owns the website after Upcial builds it?
You do, outright. Your firm pays for the domain, and it stays registered to your firm. Every build closes with a handover pack. It covers the code, the hosting and DNS arrangement, and how to run it.
Where this comes from
Section A and the 32 records in section B were read from MYNIC's WHOIS service on 22 September 2026. Section B covers every .my domain on our working list of Malaysian brokers, adjusters and Labuan insurers. That list is drawn from the Malaysian Insurance Directory 2025/2026. Two more addresses printed for firms on the list came back as available to register. Section B reports them separately. Every firm stays anonymous.
The privacy change is MYNIC's announcement of 8 November 2022. What each contact can do is from MYNIC's page on managing a domain. The transfer rules are from MYNIC's Transfer Registrar Policy, effective 27 March 2025, summarised here in our own words. The stages in section E are MYNIC's .MY domain name lifecycle overview. The documents MYNIC accepts are listed in its domain FAQ. All were read on 22 September 2026.
The RM 80 and RM 60 prices are from Bernama's report of 1 July 2025 on the MYNIC and SSM joint offer. The Google menu names are from Google's help page on Business Profile owners and managers. This page explains how the registry works. For a disputed domain, MYNIC's own customer care is the authority.