Latest news of the domain name industry

Recent Posts

Empty Whois a threat to the US elections?

Kevin Murphy, September 5, 2018, Domain Policy

Could a lack of Whois records thwart the fight against attempts to interfere in this year’s US elections?
That’s the threat raised by DomainTools CEO Tim Chen in a blog post, and others, this week.
Chen points to recent research by Facebook, based on an investigation by security company FireEye, that linked a large network of bogus news sites and social media accounts to the Iranian state media.
FireEye’s investigation used “historical Whois records”, presumably provided by DomainTools, to connect the dots between various domains and registrants associated with “Liberty Front Press”, a purportedly independent media organization and prolific social media user.
Facebook subsequently found that 652 accounts, pages and groups associated with the network, and removed them from its platform.
The accounts and sites in question were several years old but had been focusing primarily on politics in the UK and US since last year, Facebook said.
Based on screenshots shared by Facebook, the accounts had been used to spread political messages bashing US president Donald Trump and supporting the UK’s staunchly pro-Palestinian opposition leader Jeremy Corbyn.
Google’s research, also inspired by FireEye’s findings and Whois data, linked the network to the state-run Islamic Republic of Iran Broadcasting.
The actions by Google and Facebook come as part of their crackdown on fake news ahead of the US mid-term Congressional elections, this November, which are are largely being seen as a referendum on the Trump presidency.
Because the domains in question predate the General Data Protection Regulation and ICANN’s response to it, DomainTools was able to capture Whois records before they went dark in May.
While the records often use bogus data, registrant email addresses common to multiple domains could be used to establish common ownership.
Historical Whois data for domains registered after May 2018 is not available, which will likely degrade the utility of DomainTools’ service over time.
Chen concluded his blog post, which appeared to be written partly in response to data suggesting that GDPR has not led to a growth in spam, with this:

Domain name Whois data isn’t going to solve the world’s cyberattack problems all on its own, but these investigations, centering on an issue of global importance that threatens our very democracy, likely get severely impaired without it. And this is just the tip of the iceberg, a few uniquely important investigations among the hundreds of thousands of cyberattacks going on all day every day all over the globe by people and organizations that can now hide behind the anonymity inherent in today’s internet. It’s reasonable that domain names used for certain commercial or functional purposes should require transparent registration information. Whois is not a crime.

DomainTools is one of the founders of the new Coalition for a Secure and Transparent Internet, a lobby group devoted to encouraging legislatures to keep Whois open.
Representatives of Facebook and Iran’s government are among the members of the Expedited Policy Development Process on Whois, an emergency ICANN working group that is currently trying to write a permanent GDPR-compliant Whois policy for ICANN.

Donuts confirms six-figure .news buyer used a fake name

Kevin Murphy, July 16, 2018, Domain Registries

Mike Texas is in fact noted conspiracy theorist Mike Adams.
New gTLD registry Donuts confirmed with DI over the weekend that the buyer of six figures worth of “platinum” .news domain names used a fake name.
The company last week said that a company called WebSeed bought registry-reserved names including science.news, climate.news, medicine.news, health.news and pollution.news.
After a small amount of digging, I discovered that these sites were affiliated with a controversial site called Natural News, which is regularly criticized for spreading bogus, anti-science content.
I suspected that “Mike Texas”, the WebSeed CEO quoted railing against “fake news” in Donuts’ press release, was very probably a pseudonym for Natural News owner Mike Adams, who calls himself the “Health Ranger” but peddles theories often characterized as dangerous.
Yesterday, Donuts told us that, following DI’s coverage, it has managed to confirm with Texas that he is in fact Adams. The company has changed its press release accordingly.
I will note that the most compelling piece of evidence connecting Texas to Adams was a pre-GDPR Whois record.