• Home
  • About Us
  • Contact
  • Advertise
  • Awards
  • Privacy Policy
  • Twitter
  • Facebook
  • RSS
TheDomains.com

Apparently it’s not hard to get a .gov domain

November 27, 2019 by Raymond Hackney

Would you like a .gov address? It might be easier than you think to secure one, and that’s not a good thing.

KrebsonSecurity.com published an article about how a researcher filled out a form, grabbed some letterhead and impersonated a mayor of a small U.S. city. Basically they committed wire fraud to secure a .gov domain.

From the article:

“I used a fake Google Voice number and fake Gmail address,” said the source, who asked to remain anonymous for this story but who said he did it mainly as a thought experiment. “The only thing that was real was the mayor’s name.”

The email from this source was sent from exeterri[.]gov, a domain registered on Nov. 14 that at the time displayed the same content as the .us domain it was impersonating — town.exeter.ri.us — which belongs to the town of Exeter, Rhode Island (the impostor domain is no longer resolving).

“I had to [fill out] ‘an official authorization form,’ which basically just lists your admin, tech guy, and billing guy,” the source continued. “Also, it needs to be printed on ‘official letterhead,’ which of course can be easily forged just by Googling a document from said municipality. Then you either mail or fax it in. After that, they send account creation links to all the contacts.”

KrebsOnSecurity did get a substantive response from the Cybersecurity and Infrastructure Security Agency, a division of the U.S. Department of Homeland Security.

They go on to say, “The CISA said this matter is so critical to maintaining the security and integrity of the .gov space that DHS is now making a play to assume control over the issuance of all .gov domains.”

Read the full article on KrebsonSecurity.com

Hat tip to Lox

Filed Under: Domain Names

About Raymond Hackney

Raymond is a writer, domain trader and consultant based in Pennsylvania. Raymond is the founder of 3Character.com and TLDInvestors.com.

« Sedo weekly sales led by Buoy.com
An update on Pheenix »


Recent Articles

  • Will $15M seem like a steal or a huge overpay 5 years from now for NFTs.com?
  • Sedo weekly domain name sales led by Afloat.com
  • Galileo.net from $4,050 to $50K in a little over a month

Recent Comments

  • Rex on Will $15M seem like a steal or a huge overpay 5 years from now for NFTs.com?
  • Joe on Will $15M seem like a steal or a huge overpay 5 years from now for NFTs.com?
  • steve on Will $15M seem like a steal or a huge overpay 5 years from now for NFTs.com?
  • MarkMajor on Will $15M seem like a steal or a huge overpay 5 years from now for NFTs.com?
  • Jon on Will $15M seem like a steal or a huge overpay 5 years from now for NFTs.com?

Polls

How Many .Web Domains Will Be Registered 1 Year After Launch

View Results

Loading ... Loading ...
  • Polls Archive

Subscribe to Blog via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Categories

Archives

domain name news

Copyright ©2019 TheDomains.com — Published by Worldwide Media, Inc. — Site by Nuts and Bolts Media