• Home
  • About Us
  • Contact
  • Advertise
  • Awards
  • Privacy Policy
  • Twitter
  • Facebook
  • RSS
TheDomains.com

Apparently it’s not hard to get a .gov domain

November 27, 2019 by Raymond Hackney

Would you like a .gov address? It might be easier than you think to secure one, and that’s not a good thing.

KrebsonSecurity.com published an article about how a researcher filled out a form, grabbed some letterhead and impersonated a mayor of a small U.S. city. Basically they committed wire fraud to secure a .gov domain.

From the article:

“I used a fake Google Voice number and fake Gmail address,” said the source, who asked to remain anonymous for this story but who said he did it mainly as a thought experiment. “The only thing that was real was the mayor’s name.”

The email from this source was sent from exeterri[.]gov, a domain registered on Nov. 14 that at the time displayed the same content as the .us domain it was impersonating — town.exeter.ri.us — which belongs to the town of Exeter, Rhode Island (the impostor domain is no longer resolving).

“I had to [fill out] ‘an official authorization form,’ which basically just lists your admin, tech guy, and billing guy,” the source continued. “Also, it needs to be printed on ‘official letterhead,’ which of course can be easily forged just by Googling a document from said municipality. Then you either mail or fax it in. After that, they send account creation links to all the contacts.”

KrebsOnSecurity did get a substantive response from the Cybersecurity and Infrastructure Security Agency, a division of the U.S. Department of Homeland Security.

They go on to say, “The CISA said this matter is so critical to maintaining the security and integrity of the .gov space that DHS is now making a play to assume control over the issuance of all .gov domains.”

Read the full article on KrebsonSecurity.com

Hat tip to Lox

Filed Under: Domain Names

About Raymond Hackney

Raymond is a writer, domain trader and consultant based in Pennsylvania. Raymond is the founder of 3Character.com and TLDInvestors.com.

« Sedo weekly sales led by Buoy.com
An update on Pheenix »


Recent Articles

  • Security the biggest challenge in domain management according to new report
  • Sedo weekly domain name sales led by BetterCare.com
  • Radix registers over $2m in premium sales revenue for second half of 2020

Recent Comments

  • monte cahn on Right of The Dot to host a live auction
  • steve on Sedo weekly domain name sales led by HolyGround.com
  • Josh on Newz.com buyer revealed
  • Dennis Godbey on GoDaddy boots AR15.com
  • steve brady on GoDaddy boots AR15.com

Polls

How Many .Web Domains Will Be Registered 1 Year After Launch

View Results

Loading ... Loading ...
  • Polls Archive

Subscribe to Blog via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Categories

Archives

domain name news

Copyright ©2019 TheDomains.com — Published by Worldwide Media, Inc. — Site by Nuts and Bolts Media