Many Domains Registered With False Data 401
bakotaco writes "According to research carried out by the US Government Accountability Office (GAO) many domain owners are hiding their true identity. The findings could mean that many websites are fronts for spammers, phishing gangs and other net criminals. The report also found that measures to improve information about domain owners were not proving effective." From the article: "The GAO took 300 random domain names from each of the .com, .org and .net registries and looked up the centrally held information about their owners. Any user can look up this data via one of the many whois sites on the net. The report found that owner data for 5.14% of the domains it looked at was clearly fake as it used phone numbers such as (999) 999-9999; listed nonsense addresses such as 'asdasdasd' or used invalid zip codes such as 'XXXXX'. In a further 3.65% of domain owner records data was missing or incomplete in one or more fields."
And then there's outdated data (Score:5, Informative)
It doesn't happen as often now as it used to. Either businesses are getting better at remembering that their domain names need to be updated along with everything else, or the registrars are better at finding other ways to notify them of renewals.
But I ran into one case (with Network Solutions, IIRC -- it was a few years ago) where I personally updated the contact information associated with a role account and discovered, a year or two later, that the registrar had somehow resurrected the old, deleted contact info.
Comment removed (Score:5, Insightful)
Re:Or attempts at "Privacy" (Score:3, Interesting)
My site has photos of lots of quite expensive art that I own. I am not particularly happy that anyone who sees it can simply look up my name and address and find out where I live.
There needs to be something better.
Re:Or attempts at "Privacy" (Score:5, Insightful)
Re:Or attempts at "Privacy" (Score:3, Interesting)
And which country would pass (and enforce) these laws?
The large majority of the spam I receive isn't from my country... and, I really don't give a rat's ass about another country's laws.
I suspect people in other countri
Re:Or attempts at "Privacy" (Score:3, Insightful)
Re:Or attempts at "Privacy" (Score:2)
I agree with this completely.
I get an amount of spam from my domain, and it worries me that as a private domain owner, I'm required to have
Re:Or attempts at "Privacy" (Score:3, Interesting)
Please define, in advance and universally, who the "people who legitimately need this information" are. If I get a phishing expedition message that uses a compromised website as a hiding place, how does a registrar differentiate between my wanting to contact that person to inform them of the compromise, and Bob The Spammer's desire to send that
Re:Or attempts at "Privacy" (Score:3, Interesting)
Simple, when it's a personal domain, the tech contact and domain owner are, oddly enough, the same person.
At present, I have the choice, fill in bogus information, or provide my personal information (which I do).
Small/personal site owners don't necessarily want their private info out. And the amount of crap spam I get wh
Not dodging weirdos, just the spammers (Score:3, Insightful)
In my case, I take advantage of the registrar's confidentiality for my personal domain because I had started getting snail mail, email, and phone calls that resulted from the info presented in the domain registration record. I get enough of that crap without handing my info to those scum on a silver platter.
Re:Not dodging weirdos, just the spammers (Score:3, Insightful)
Re:And then there's outdated data (Score:2)
I want to register a domain name which was used by a business that went under. The whois data points to a nonexistant business. I called several registrars and explained the situation and they all told me that I will have to wait until the name expires (which is years from now).
Can someone help me out here?
Re:And then there's outdated data (Score:3, Insightful)
Piece of cake.
Re:And then there's outdated data (Score:2, Funny)
Rent the office where they used to be.
That'd be tough if they were in the World Trade Center.
Re: (Score:3, Insightful)
Re:And then there's outdated data (Score:2)
Re:And then there's outdated data (Score:4, Informative)
The article doesn't make much sense to me for several reasons: (1) it assumes anonymity on the internet is a bad thing, (2) it assumes the federal government should be getting involved in people's free speech activities, (3) as a gazillion slashdotters have noted, it ignores the legitimate reasons for doing this kind of stuff.
Personally, I use a single-purpose hotmail address for my domains, and I have a note on my calendar to log into that hotmail account once in a while so the account doesn't get canceled. It's a hassle, but it saves me the money of paying my registrar for privacy.
Re:And then there's outdated data (Score:2)
That's generally what would happen. They'd call us complaining their website was down, or they weren't getting any email, so we'd check the servers and see that everything was working fine, then we'd check WHOIS and find that the domain name had expired a couple of weeks ago and still showed the old address. (They'd send us the new address since we billed monthly.) In most cas
Been running into this for years (Score:5, Funny)
God forbid... (Score:2, Insightful)
Re:God forbid... (Score:5, Insightful)
Re:God forbid... (Score:2)
In other news..... (Score:2, Funny)
Re:In other news..... (Score:2)
Re:In other news..... (Score:3, Funny)
> I wasn't born to a human mother!
Macbeth better start worrying then. Got any twigs in your hat ?
Or not wanting spam and such (Score:5, Insightful)
No kidding -- the examples make this obvious (Score:2)
If the GAO's inquiry here results in some sort of crackdown
You Think? (Score:4, Funny)
Re:You Think? (Score:2)
-paul
It could also mean (Score:5, Interesting)
Or that a great many domain owners see no reason to post their personal data up on the web where it is available to spammers, phishers or other net criminals. Not to mention random psychos who have some beef with the site's contents.
Many registrars have this as an optional service (Score:5, Interesting)
Re:Many registrars have this as an optional servic (Score:3, Interesting)
B) why should the registrar or ISP get to make additional money on top of the already outrageous costs associated with registering a domain name just to protect my information that shouldn't be required anyway?
C) My domain information is fake. Fuck em.
Re:Do they check valid looking addresses? (Score:3, Funny)
Re:It could also mean (Score:2)
That's it exactly. I mean, hell, you can get that happening just on irc. You say something and someone floods you for hours. I don't want to have people showing up at my actual door, for sure - so I have masking turned on.
Legitimate reason to do it (Score:4, Interesting)
Re:Legitimate reason to do it (Score:2)
Re:Legitimate reason to do it (Score:2)
I have it activated on my domain and I don't get all the crap you're talking about...
Re:Legitimate reason to do it (Score:2)
I call BS - 3 pieces of junk mail 5 yrs (Score:3, Interesting)
I feel the benifits of having someone contact me due to forgoten registration/ problems and other reasons outweigh the anonymous aproach.
Re:I call BS - 3 pieces of junk mail 5 yrs (Score:2)
Re:I call BS - 3 pieces of junk mail 5 yrs (Score:2)
Re:I call BS - 3 pieces of junk mail 5 yrs (Score:3)
Either you're lucky or you have no presence on the web for your domains.
Re:I call BS - 3 pieces of junk mail 5 yrs (Score:5, Interesting)
I think it's pretty obvious that there are certainly spammers trolling the whois database. I ask you, WHY would they pass up that super easy source of email addresses? But hey, it's my anecdote vs. your anecdote, do they cancel each other out?
Re:Legitimate reason to do it (Score:2)
But I agree, if you are going to use a public medi
"Net Criminals"? (Score:3, Insightful)
What do you expect exactly? (Score:2, Insightful)
I will never use registrars who do not implement some form of anti-spam measures..
Just my $0.02...
I don't want ppl to know my real contact info (Score:5, Interesting)
where do I live? (Score:2)
\
and hey- it's accurate information!
Re:where do I live? (Score:2)
But the government wants to find you. (Score:5, Insightful)
Will the phone calls/letters ever stop! (Score:5, Funny)
Fuzzy math? (Score:2, Interesting)
How is 0.42 of a domain clearly fake?
Re:Fuzzy math? (Score:2)
900*0.0514 = 46.26.
Truth is, though, that the GAO report (highlights here, pdf: http://www.gao.gov/highlights/d06165high.pdf [gao.gov]
don't say that 5.14% of the sample used incorrect info -- the GAO estimates that 5.14% of all domains use false info.
The sample showed results of 45 false data sets (out of 900 domains), which is exactly 5%. Given the figures shown on the highlights I've linked above (especially the chart), I'm thinking that the 5.14% comes from having to
Re:Fuzzy math? (Score:2)
Or maybe... (Score:5, Insightful)
Pardon my English, but that sucks rocks.
Fortunately, some registrars offer privacy proxy services allowing you to list the registrar as the contact in the whois info. Unfortunately, not all registrars offer this service.
It may also be the case that people using obviously fake whois info do so for the legitimate purpose of free speech to avoid repressive governments or private institutions. The implication that all anonymous speech is fraudulent is unwarranted.
-Isaac
Re:Or maybe... (Score:2, Interesting)
step one: protect yourself (Score:4, Insightful)
or they could mean that many people - who dont run comercial businesses - do not want all of their personal contact information available to anyone on the internet. Just because you have a domain does not mean that you want everyone around the world to have your personal address and phone number.
You'd be a fool to put that much info in the public domain.
False data or laziness? or both? (Score:3, Interesting)
Also, why does everyone need to know that information? Is there a privacy concern here?
WHOIS guard (Score:3, Interesting)
This way my domains have valid info but at the same time not everyone out there can get my address or phone number.
I do that for privacy (Score:4, Insightful)
Would you want to publish your home address? (Score:2)
I certainly DON'T feel comfortable to publish my home address, name, phone, e-mail in a public way that closely relates me to my domain names or online identity on a public poster or a front page of my site. Even if I'm not doing any mischief. I JUST DON'T LIKE IT.
Re:Would you want to publish your home address? (Score:2)
Simple answer to this really (Score:2)
Re:Simple answer to this really (Score:2)
Re:Simple answer to this really (Score:2)
Look I'm not really against anyo
I would rather let the terrorists win... (Score:3, Funny)
Re:I would rather let the terrorists win... (Score:2, Insightful)
The only way to win the war on terror is to defeat it without giving up any of the rights that make this a great nation anyway.
Now excuse me, I have to go wave the flag a bit more, do an hour of saluting and play "God Bless America" on my electric guitar until the apple pies are done baking.
It's a 2-way street. (Score:5, Insightful)
I hide my mailing address and use a rarely-checked email address to reduce the SPAM and physical junk mail I have to deal with. The scammers/SPAMmers don't want me to know who they are...I want to limit the information they have about me. Go figure.
Why is this news? (Score:2)
Yeah, ok... (Score:2, Insightful)
Why is the GAO - Government Accountability Office, scanning the Internet for invalid phone numbers on domain names? Did they get too much mone
Re:Yeah, ok... (Score:2)
Because the House Subcommittee on Courts, the Internet, and Intellectual Property asked them to. The GAO is where House Subcommittees turn to when they need statistical information to compare to that provided to them by private sources.
Re: (Score:2, Insightful)
Some of these are easy to fix (Score:2)
Re: (Score:2)
Re: (Score:2)
Amusingly (Score:3, Interesting)
But what if your name really is (Score:3, Funny)
Can we trust people to identify themselves? (Score:2)
I think the government is really over-reacting to thi
Yeah but our real names subject us to mail spam (Score:2)
Many do this on purpose... (Score:2)
So, I can't say as I blame these people, at least, those of them that are in the right. Sure, it opens the door for phishish, scamming and all kinds of maliciousness, but there are also those people that are simply attempting to hide from the exploit
And why should our privacy be violated? (Score:3, Informative)
But there is a bigger issue: Why should those of use who buy domain names be forced to reveal our contact information to the world?
The reason is that the intellectual property industry, which dominates ICANN, forced this down our throats.
It is an ICANN rule that is in violation of the privacy laws of many countries.
Some lazy law enforcement types claim that they need an open "whois" to enforce the law. That is not true. Law enforcement types have tools (subpoenas) to open closed databases, and, moreover, allowing access to law enforcment does not require that the public be granted the same access 24x7x365.
There is a claim that "whois" data for DNS has operational value, yes it has some, but it is of much lower value operationally than the value of the whois data for IP addresses, a separate and disinct database.
The other week I met an attorney for a large company (very large) who routinly registers domain names anonymously - so as to avoid giving notice of the company's actions. Yet at the same time he watches new registrations and has a tool that automatically sends out cease and desist letters to names that offend his regular expression. Fair? Not really. An exercise in economic bullying? Yes.
if you want to be reachable... (Score:2)
I fail to see a strong valid argument why domains themselves should have publicly accessable contact information.
Sure the companies who register them should know who actually paid for the service, but that's all stored in their local databases anyhow (which can be kept private to the company). The only information I can see being useful in a WHOIS report is possibly when it was registered, when it will expire, and what company registered it.
There are a lot of
It's because of the spammers - not for them (Score:2)
I had to give up an email address because of spam. I started getting tons of (physical) junk mail.
THis was years ago before good spam filtering, and I just couldn't keep up.
I'd be much more tempted to use real info if it was harder for the spambots to find.
When do we start the death penalty for spammers?
Re:It's because of the spammers - not for them (Score:2)
These guys still live in the previous century, and publish lists of assigned numbers complete with e-mail address.
Copies of these lists also live on many systems (e.g.
I am buried under viruses and spam on the addresses once given to IANA and still valid (I had to make some invalid as well).
Indicative of the virus problem is the fact that I receive many viruses "from"
here's where to report domains with bad info: (Score:5, Informative)
Note that complete and accurate whois information is a prerequisite for maintaining a domain registration.
I had a stalker... (Score:4, Interesting)
thank God i set the address to an old address where i used to live. How do i know that he used that data?
in his emails to us, he talked about how he was watching our apartment and described the old apartment i used to work at perfectly.
so - get fscked if you think i'll ever use my real personal data for my domains.
In other news... (Score:3, Funny)
The problem is the registrars and ICANN (Score:2)
If a registrant uses a domain name protection service and then spams, then that information should me made public!
asdasdasd (Score:2)
The findings... (Score:2)
> phishing gangs and other net criminals.
The findings could mean any of a number of things, but choosing this one option and saying, "It could mean X" is extremely misleading.
At least in my case, my info is often blurred to avoid getting 100 letters from companies wanting to (a) list my domain on their stupid search engine, (b) transfer me to another registrar, (c) "renew" my domain with them (even though they aren't my registrar, th
Fronts for Spammers or just people avoiding them? (Score:3, Insightful)
Can you blame ME (Score:3, Informative)
If I were a smart spammer (Score:5, Interesting)
Re:film at 11 (Score:2)
Granted, I'm not trying to change the s
Re:film at 11 (Score:3, Insightful)
Re:You could go to jail (Score:3, Funny)
Re:Yet another wasted research grant (Score:2)
Business Plan (Score:2)
2. Find replies about people saying they only want to protect their privacy. Check their sig/profile for links to a personal website.
3. Report all bogus information to registrar. Snatch up domain when it returns to market
4. Disable question mark key to end another Slashdot cliche on the second to last step
5. Sell domain back to poor bugger you reported to begin with and profit!
Re:wow (Score:2, Funny)
Re:Calculations (Score:3, Funny)