【Service Overview】

【Background to the Service】

　In recent years, damage from unauthorized logins originating from phishing scams and the theft of authentication information has been spreading.
　According to the Council of Anti-Phishing Japan's "Phishing Report 2026^（※3）", the number of reported phishing incidents in 2025 reached a record high of 2,454,297 cases. In IPA's (Information-technology Promotion Agency, Japan) "10 Major Security Threats 2026," "theft of personal information through phishing" was selected as a threat to individuals for the eighth consecutive year^（※4）, and the tactics used continue to grow more sophisticated.
　These threats are also serious for corporate domain management. According to "The CISO Outlook 2026^（※5）"published by major security firm CSC (Corporation Service Company), the most common threat experienced by companies in 2025 was "domain and DNS hijacking and subdomain takeover attacks." On the other hand, only 14% of companies responded that they could handle attacks on their domains "with a very high degree of confidence."
　Particular caution is required because domain management accounts are highly privileged accounts that can lead to changes in website and email settings, meaning the impact of a breach is significant. Damage may spread to third parties through website tampering, email spoofing, and redirection to fake websites.Protecting a domain management account is not limited to protecting the account of the user themselves; it is also important from the perspective of reducing the risk that third parties—such as website visitors, email recipients, and business partners—will fall victim to fake websites or spoofed emails.
　A passkey is an authentication method in which, instead of the user entering a password they have memorized, login is performed by combining identity verification with authentication information held on the device itself. Because the authentication information itself is not entered on a website, passkeys are resistant to phishing-type attacks that lure users to fake websites to steal their information.
　Given this background, "Onamae.com" has begun offering passkey login authentication as an authentication method that helps reduce the risk of unauthorized logins.

【On the Safe Operation of Domains】

　Domains are important assets that companies and web services continue to use over the long term. As a business operator that protects domains, a critical piece of internet infrastructure, GMO Internet works on verifying registration information and monitoring for countermeasures against unauthorized use. In addition, through collaboration with JPCERT/CC, a neutral organization that responds to cybersecurity incidents in Japan, and participation in ICANN^（※6）meetings, GMO Internet continues its efforts to improve security across the industry as a whole.
　At the same time, in order to increase the effectiveness of account protection, it is important not only for business operators to take countermeasures but also to create an environment in which users can easily use highly secure authentication methods. The introduction of passkeys this time is aimed at reducing the burden on users of managing login authentication and strengthening account protection.
　GMO Internet will continue to fulfill its responsibilities as a business operator while working together with its customers to build a secure and trustworthy internet environment.

（※6）ICANN: A non-profit organization that manages internet domain names and other resources.

【About "Onamae.com byGMO"】

⦁With 27 years of experience as a domain registration service, we were the first ICANN-accredited registrar in Asia and have registered more than 42 million domains in total. We handle approximately 630 types of TLDs（※7）.
⦁ By using domains and rental servers together, seamless integrated management and operation is possible. We also offer "AI Homepage Pack," a rental server that allows anyone to create a professional-quality website without specialized skills.
⦁ We offer "Net de Shindan," a service that allows website vulnerability diagnosis with a single click, making security countermeasures easy.

（※7）TLD stands for Top-Level Domain, referring to the string of characters placed at the end of a domain name, such as "com," "net," or "jp."

【About GMO Internet, Inc.】

　GMO Internet, Inc. is a comprehensive internet company that operates internet infrastructure businesses, including domains, cloud/rental servers, and internet connectivity, as well as internet advertising and media businesses. Under the corporate catchphrase "Internet for Everyone," GMO Internet, as a company that supports social infrastructure, contributes to realizing a safe and secure internet society and to creating value that builds a new future with AI, and strives to deliver "smiles" and "excitement" to everyone involved.