Plenty of businesses end up owning more than one domain without planning it: the .com and the .com.my, a spelling variant, the domain from the old company name, a name bought for a campaign that ended long ago. Each is a perfectly good address, and the question is what should happen when someone types it. The usual answer is that one of them is the real home of your website and the others quietly send visitors there. This guide covers that set-up in practical order, from which extra domains are worth keeping to how to test the result. It is general information; the exact screens depend on where each domain is registered and where the website is hosted.
One main address, and the others forward to it
A domain name is only an address, not a website. A website lives on a hosting account, and any number of names can point at it. If all of them simply show the same pages, the same content exists under several addresses, people share whichever they happened to type, and your listings, name cards and email signatures drift apart.
The tidier arrangement is one canonical address, the single full web address you treat as the real one, for example https://yourbusiness.com. Every other domain you hold redirects (also called forwards) to it, so someone who types the typo, the other ending or the old name still arrives, and the address bar settles on the main one.
Other domain decisions have their own guides: .my or .com and whether the ending affects search cover choosing an ending, lookalike domains covers copies registered by other people, and changing your business name covers the one-off move to a new name. Here the question is how to make several domains behave as one.
Which extra domains are worth keeping
Every extra domain is a separate registration with its own yearly renewal, so each one should earn its place. Sort what you hold, or are about to register, into these groups.
| Type of extra domain | Example | Worth keeping when | Think twice when |
|---|---|---|---|
| Another ending of the same name | yourbusiness.com.my alongside yourbusiness.com | Customers might type either, or you used one in the past | You have never used it and nobody asks for it |
| A common misspelling | yourbusines.com | Customers, suppliers or staff really do mistype it | It is one of hundreds of possible typos and nobody has typed it |
| An old business name | oldname.com | It is on old name cards, invoices, links or email addresses people still use | It was never used and nothing points to it |
| A campaign or product name | springsale-yourbusiness.com | Printed material, posters or adverts still carry it | The campaign finished and nothing refers to it |
| A name held “just in case” | Several guesses at future names | There is a concrete plan to use it soon | The reason is a vague worry; the renewals add up with no benefit |
A useful test: has a real person ever typed, printed or linked that address? If yes, keep it and redirect it, because dropping it breaks something that exists. If no, you are paying a renewal for a precaution, which is allowed but should be deliberate. How far to go with defensive registrations is covered in the lookalike domain guide. Check eligibility before registering a new ending: .com.my has rules about who can hold it (see the .com.my requirements), and a name can clash with someone else’s trademark (see the trademark guide).

Choose the one main address first
Before touching any setting, write down the single full address everything will end up at. It has three parts:
- The domain: yourbusiness.com or yourbusiness.com.my, whichever is already on your name cards, invoices, Google Business Profile and email addresses.
- With or without www: both work. Neither is better in itself; pick one and stick to it.
- Secure: the main address should start with https://, and plain http:// versions should forward to it.
The decision might read: https://yourbusiness.com, no www. Put it in a note, because every later step refers back to it. The website itself should agree: its settings, internal links and sitemap should use the main address, which whoever built or hosts the site can confirm. Moving it to a different domain later means redoing every redirect and printed item, so choose the one people already see.
Redirect, park or leave alone?
An extra domain can be handled in four ways. They behave very differently for a visitor.
| Option | What a visitor sees | Use it for | Watch out |
|---|---|---|---|
| Permanent redirect (301 or 308) | Types the extra domain and ends up on the main address | Any extra domain you intend to keep long term | Browsers can remember it, so a mistake is slow to undo |
| Temporary redirect (302 or 307) | The same journey, but marked as short-term | A short, genuine trial or a move you may reverse | Left in place for years, it tells machines the arrangement is not final |
| Parking page | A plain page on the extra domain, such as “This address is not in use; visit our website” with a link | A domain you hold but have not decided about | A visitor has to click again, and some parking pages carry adverts you did not choose |
| Nothing set up | An error, a registrar’s default page or a blank screen | Nothing; this is the situation to avoid | Customers who mistype think your business has closed |
The numbers are HTTP status codes, the short messages a server sends to a browser. A 301 means “moved permanently” and 308 is a newer code with the same meaning. A 302 means “found, temporarily” and 307 is a newer code with the same meaning. Search engines read the permanent ones as “treat the new address as the real one” and the temporary ones as “the old address is coming back”. For a domain you are keeping as a permanent alias, the permanent code is the honest description, and it is the usual choice for consolidating addresses. Nobody can promise how quickly search engines react to a change, so treat this as the correct set-up, not a ranking tactic.
A parking page is a sensible resting place for a name you cannot yet decide about, but check what it shows: some default registrar pages display advertising, a poor look under a name that resembles yours.
Send people to the matching page, not only the homepage
A redirect can send every visitor to one fixed page, or it can carry the rest of the address across so that each page lands on its counterpart. The choice depends on what the extra domain has been used for.
| Situation | Better approach | Why |
|---|---|---|
| Typo domain that never had pages | Everything to the main homepage | There are no old pages to match, and a visitor only wants to arrive |
| Other ending, same site | Keep the rest of the address, so yourbusiness.com.my/contact opens yourbusiness.com/contact | People paste deep links; the same path should keep working |
| Old business name with an old site | Match page to page; send the rest to the closest page or the homepage | Old links and bookmarks point at specific pages |
| Campaign domain on printed material | The page the campaign was about, if it still exists | A poster that promised an offer should not land on a generic page |
The tool matters here. Some forwarding settings only send everyone to one fixed address, while others keep the path and add it to the destination. If a registrar’s simple option cannot do what you need, a rule on the hosting side usually can, so ask the provider which they offer. Never leave the destination as a page that no longer exists. If the site has several language versions, send each variant to its own language where you can; the multilingual website guide covers how those versions are set up.
Keep www, non-www and https consistent
This is where most set-ups quietly go wrong. Every domain you own can be typed in four ways: with or without www, and with http or https. A business with one main domain and four extras has five domains and therefore twenty addresses someone could type.
| Domain | http:// | http://www. | https:// | https://www. |
|---|---|---|---|---|
| yourbusiness.com (main) | forward | forward | final address | forward |
| yourbusiness.com.my | forward | forward | forward | forward |
| yourbusines.com (typo) | forward | forward | forward | forward |
| oldname.com | forward | forward | forward | forward |
| campaign-name.com | forward | forward | forward | forward |
Twenty addresses, one final destination, nineteen that must forward to it. Write the list down and tick it off. Two details are easy to miss:
- The www version of an extra domain needs its own record. Pointing yourbusiness.com.my somewhere does not automatically cover www.yourbusiness.com.my. Check both. How names are pointed at servers is explained in DNS explained.
- The secure version needs a valid certificate. When someone types https://oldname.com, the browser checks the certificate for oldname.com before it can follow any redirect. If the server answering for that name has no valid certificate for it, the visitor sees a security warning instead of your website. Ask whoever sets up each redirect whether the secure version of the extra domain is covered, and test it as described below.
Ideally the whole journey is a single hop: the visitor goes straight from whatever was typed to the final address. For example, http://www.oldname.com should go directly to https://yourbusiness.com, not first to https://www.oldname.com and then onward.
Avoid redirect chains and loops
A redirect chain is a series of redirects one after another: A sends to B, B sends to C. Each extra hop makes the page slower to appear and is another place for something to break. A redirect loop is worse: A sends to B and B sends back to A, so the browser gives up with an error such as “too many redirects”.
Chains usually build up over time: a domain was redirected to the website years ago, the website later moved and a second redirect was added on top, and someone then added an https rule. Loops usually come from two reasonable-looking settings, such as one rule sending the bare domain to the www version while another sends it back.
| What you see | Likely cause | Fix |
|---|---|---|
| Browser error about too many redirects | Two rules send the address back and forth, for example www versus non-www, or http versus https | Decide the canonical address once, then keep a single rule that enforces it |
| Address bar changes two or three times before settling | A chain: the old redirect still points at an earlier destination | Edit the old redirect to point straight at the final address |
| Secure warning before the redirect | No valid certificate on the extra domain’s secure address | Have a certificate covered for it, or confirm the provider handles it |
| Old result after you changed a redirect | The browser remembered a permanent redirect | Test in a private window |
Two rules prevent most of this. Redirect in one direction only: extras forward to the main address, and the main address never forwards back to an extra. Always point at the final destination: if the destination ever changes, edit every redirect that aimed at the old one rather than adding another on top. Keep redirects in one place where you can; rules scattered across a registrar panel, a hosting account and a website plugin are how loops are born.
Email is separate: a redirect does not forward it
A redirect only deals with people opening web addresses. The settings that decide where mail for a domain goes are separate from those that decide where its website goes, so a domain can redirect perfectly in a browser and still have no working mailbox behind it. Think through each extra domain:
- A typo domain. Someone may type the misspelling into an email address too. If nothing is set up, that message may bounce or vanish and you never learn of the lost enquiry. To catch it, the domain needs mail set up to deliver to a mailbox you read; whoever runs your email can tell you how.
- Another ending. Staff or customers might use [email protected]. Decide whether those addresses should work, and if so, forward them to the matching main addresses.
- An old business name. This is the one most likely to matter, because old contacts still write to old addresses. Keep mail working for a transition period; the rebranding guide covers moving mailboxes.
- A domain that will not be used for email. Record that as a decision, since lookalike mail is a risk covered in the lookalike guide.
Send mail from your main address only, so replies stay in one place. The background is in business email on your own domain. Setting up the website redirect and setting up mail are two jobs; finishing one does not finish the other.
Every extra domain still needs renewing
Here is the cost nobody mentions when a redirect is set up. A redirect works only while the domain it sits on is registered, and each extra domain is its own registration with its own expiry date. If one lapses, the redirect stops, and customers who typed it get an error or someone else’s page. Worse, an expired name can be registered by a stranger, so old printed material and links then lead to a site you do not control. What happens during and after expiry is covered in what happens when a domain expires.
The simplest defence is a short register with one line per domain: the full name, its purpose (other ending, typo, old name, campaign), the registrar account and that it is in your business’s name, the expiry date and whether automatic renewal is on, the final address it redirects to, and the date you last tested it.
A few habits keep it honest. Keep the extras in the same registrar account as the main domain, with the registrant recorded as your business, so one login covers all of them; who owns your domain explains why. Turn on domain lock for each one. Set reminders as described in how to never miss a domain renewal, and consider whether registering the keepers for several years suits you; 1 year or multi-year registration compares the options.
Gotka Technologies domain registration starts from RM10/year, but the price of a given ending can differ, so check each ending before you register it. If an extra domain is no longer worth keeping, retire it on purpose: remove it from printed material and listings, leave the redirect running while the last stragglers catch up, then decide not to renew.
How to test it
Do not trust the setting screen; trust a browser. Test every variant, and again after any change.
- Type each address by hand: every extra domain, with and without www, with http:// and https://. Note where each ends up and whether the address bar shows the canonical address.
- Use a private window. Browsers can store a permanent redirect and replay it, so a normal window may show an old result.
- Try a phone on mobile data, which shows what a customer outside your office network sees.
- Test a deep link, such as yourbusiness.com.my/contact, to confirm the path carries across.
- Count the hops. Free online redirect checkers, or the network tab in a browser’s developer tools, list each step; you want one hop from each variant. Look for certificate warnings on the secure versions too.
- Test email separately: send a message to each extra-domain address you meant to support.
- Test again the next day. Changes to where a domain points can take time to reach everyone.
Common mistakes
- Redirecting only the bare domain. The www and https versions of each extra domain are separate addresses needing the same treatment.
- Stacking a new redirect on an old one. That is how chains form; edit the old redirect to point at the final address.
- Sending everything to the homepage when pages used to exist, so old links land on something unrelated.
- Using a temporary redirect for something permanent. It works for visitors but describes the arrangement wrongly.
- Forgetting email, so the website works, the typo mailbox does not, and enquiries vanish.
- Letting an extra domain lapse, which stops the redirect and may hand the name to someone else.
- Testing only in your usual browser. Cached redirects and certificate quirks show up in a private window or on a phone.
- Printing the extra address. The canonical address goes on signs, cards and adverts; the extras exist for people who do not use it.
A short checklist
- Write down the canonical address: domain, with or without www, https.
- List every domain you hold and mark each keep or retire.
- Set each kept extra to a permanent redirect to the final address, to the matching page where pages existed.
- Cover the www and https versions of every extra in one hop each, and check the secure ones for warnings.
- Decide what happens to mail on each extra domain and set it up separately.
- Record every expiry date, with reminders and the registrant in your business’s name.
- Test every variant in a browser, a private window and a phone, then again the next day.
- Review the list once a year and retire anything nobody uses.
Where Gotka Technologies fits
Gotka Technologies provides the registration and hosting sides of this set-up. Domain registration starts from RM10/year and includes free transfer-in, domain lock and privacy protection, so the extra names can sit in one account beside the main one, locked against unauthorised transfer. Cloud hosting runs AI-powered cPanel plans on LiteSpeed servers with free SSL, daily backups, free migration, 24/7 support and a 99.9% uptime guarantee, from RM17.80/month for Go AI Lite on the 36-month plan; a specific tier price is always tied to its billing cycle, and hosting and domain are quoted separately. This guide stays general on purpose: how a redirect is created depends on where each domain is registered and where the site lives. If your domains and website are with us and you want to know what is possible for your set-up, ask the team before registering more names. If the main website needs building or rebuilding, web design covers that.
Key terms used in this guide
- Redirect (forwarding): a setting that sends a visitor from one web address to another automatically.
- Canonical address: the single full web address you treat as the real one, including https and whether it uses www.
- 301 / 308: status codes meaning a permanent move; the standard choice for a domain kept as a long-term alias.
- 302 / 307: status codes meaning a temporary move.
- Redirect chain: several redirects in sequence before the final page is reached.
- Redirect loop: redirects that send a visitor back and forth until the browser stops with an error.
- Parking page: a simple placeholder page shown on a domain that is registered but not in use.
- Certificate (SSL): what lets a browser trust a secure address; each domain name needs one covering it.
Can I point several domains at one website?
Yes. Choose one main address, then set every other domain to redirect to it, so a visitor who types a typo, another ending or an old name still arrives. A domain is only a name, so many names can lead to a single site. Each extra domain stays a separate registration that needs renewing, and the redirect works only while that registration is active.
Should I use a 301 or a 302 redirect for my extra domains?
For a domain you plan to keep as a long-term alias, use a permanent redirect (301, or its newer equivalent 308). It tells browsers and search engines that the main address is the real one. A temporary redirect (302 or 307) suits a short trial or a move you may reverse, and left in place for years it describes the arrangement wrongly.
Does redirecting a domain also forward its email?
No. A redirect only sends people who open the web address. Where email for a domain goes is controlled by separate settings, so a domain can redirect perfectly and still have no working mailbox. If customers might email a typo or old-name address, have mail for that domain set up separately and delivered to a mailbox you read, then send a test message.
Should the redirect go to the homepage or to the matching page?
Send visitors to the matching page where the extra domain ever had pages, or where people paste deep links, so an old or alternate address opens its counterpart on the main site. A typo domain that never had content can simply go to the homepage. Avoid sending everything to a page unrelated to what was requested, and never to a page that no longer exists.
What happens to the redirect if an extra domain expires?
It stops working. A redirect depends on the domain staying registered, so once an extra domain lapses, visitors who type it see an error or another page, and the name may be registered by someone else. Keep every extra domain in a register with its expiry date, turn on reminders, and retire a domain deliberately rather than letting it lapse.
How do I check that all my domains redirect correctly?
Type every variant yourself: each domain, with and without www, with http and https, plus a deep link such as /contact. Use a private window and a phone on mobile data, because browsers can remember permanent redirects. Check that each variant ends on the main address in one hop with no certificate warning, then test again the next day.
Is it worth keeping a typo domain?
Keep it if real customers, staff or suppliers do mistype your name, because redirecting it catches visitors who would otherwise find nothing. If nobody has ever typed it, it is a precaution that costs a renewal every year, and you can decide either way deliberately. There are hundreds of possible typos, so keep only the most likely and see the lookalike domain guide.
Domain Lock, Explained: The One Setting That Stops Unauthorised Transfers
Domain lock explained: what the clientTransferProhibited status actually does, how domain hijacking really happens, and exactly when it's safe to unlock it.
Domains.my vs .com: Which Domain Should a Malaysian Business Register?
A .my domain signals you are local; a .com is the one people type by habit. How to choose between them, and when registering both is the sensible answer.
DomainsLookalike Domains and Typosquatting: How to Spot and Respond to a Fake Copy of Your Business Domain
Someone registered a domain that looks like yours? How lookalike domains and typosquatting work, how to check for them, and what to do first to protect customers.


