Domain Empire

GoDaddy Will Start Masking Our WhoIs Info Jan 25th

Spaceship Spaceship
Watch

Ategy

Arif M, NameCult.com TheDomainSocial.comTop Member
Impact
17,389
I just got the following email quoted below

For standard domain owners this is probably good ... but for domainers who want to be found via whois this is might be something we might want to be opt out of.

I'm thinking the real question is what will the searches actually see?

@Paul Nicks .. could you fill us in on the specific details of the change. Like what the searches will actually see, and some examples of "authorised" bulk searches.

Thanks :)

WHOIS masking starts January 25.

This service will block some of your contact details through automated access points.

We're always looking for ways to protect your information online. To help slow the flood of spam that can occur when you register a domain without privacy services, WHOIS masking of certain personal data will be turned on for all domains on January 25.

This service will limit a potential spammer's ability to access your first name, last name, email and phone number through automated means (also known as Port 43 access). We'll continue to publish full WHOIS details to users of our CAPTCHA-protected, web-based WHOIS system, as required.

Here's how to opt out:

If you still want your information to be available via automated sources of public WHOIS data, you can opt out anytime using one of these options:


• Call us at 866-938-1119.

• Send your request to [email protected]. We may ask for additional information for verification purposes.

Domain Privacy still matters.

While we hope this service will help cut down on spam calls and emails, because registration information is still made available publicly, Domain Privacy is still the best way to maintain anonymity online. WHOIS masking will only restrict spammers through automated bulk access sources.

To learn more, check out this help article:
https://ca.godaddy.com/help/masking...hared-via-whois-automated-access-points-27421
 
5
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
They've been gradually restricting access to bots for a number of months now. Most tools, DomainTools included, now has great difficulty getting data from automated WHOIS lookups.

TBH people who know how to get WHOIS already will probably figure things out fine even with this "masking". Reducing the amount of domain-related spam is probably a good thing for ethical domainers.
 
0
•••
They've been gradually restricting access to bots for a number of months now. Most tools, DomainTools included, now has great difficulty getting data from automated WHOIS lookups.

TBH people who know how to get WHOIS already will probably figure things out fine even with this "masking". Reducing the amount of domain-related spam is probably a good thing for ethical domainers.
Actually, most, if not all of the workarounds will no longer work with all that information masked.

Previously GoDaddy would block full details once it decided you were a bot, but still provide some details like name and organization. This could be cross referenced and the email and phone blanks could be filled in.

Or you could use many different IPs to avoid detection.

Neither of these methods will work anymore for the whois archives unless they are given some sort of exemption - which I don't think godaddy is going to do - if they are serious about really hiding the personal info.

Only real way to get the information - if they are as serious as they say in the email - will be to have a program crawl their site and solve the captcha.
 
Last edited:
0
•••
For standard domain owners this is probably good ... but for domainers who want to be found via whois this is might be something we might want to be opt out of.
I think this is actually good for domainers. Whois is still available and accessible. Serious end-user buyers can access the whois via the web interface and reach out to domain owners. Spammers and data harvesters who use scripts/bots and other automated means will not be able to get it. Yes, they can still obtain the data manually but it is not going to be trivial, especially given the size of GD's domain pool.

It gives some amount of privacy without requiring whois privacy. The latter is still needed for those who want to completely hide their ownership for a domain.
 
0
•••
I look at whois and the website. I like to see if there is a live site, if not then I go to whois. No use going to whois if there is a live site because the domain is in use and that would be a waste of time.

As domainers we use both but in most cases end users will punch the domain in the address bar first. If it is not used they try to register it and then they might get a surprise because it may say taken. They don't always realize that a domain can be taken and not have a webpage.

I try to think like an end user first and a domainer second. That has served me well.
 
0
•••
I don't have time to type in a bunch of addresses, I check whois in a terminal

https://www.reddit.com/r/commandline/comments/6taq3k/why_is_whois_showing_no_registrant_information/

Seems now GD are making that more difficult though, this command now returns limited info:
whois -h whois.godaddy.com "godaddy.com"
I do the same and absolutely hate this behavior of GD... To add, it is further complicated by the fact that the captcha never shows up for me on Firefox which is my primary browser.
 
0
•••
Txt records would help here.
That or email validation...

(edit - wait.. email validation wouldn't work since they can't see the owner's email.)

But when it comes to txt records, that is not always an option when you aren't using nameservers you are in control of. (such as using a landing page service) Of course you can always setup forwards, or manual A records to the service's IP - but that can be a pain the butt - especially if the service changes their IP or url structure.


Am I the only one who looks at whois more than actual websites? Bad domainer habit I'm thinking? lol

Nope you're not alone. 95% of the times, I look up whois before I even visit the domain/website

I think it is mainly just a domainer habit, and one that I do personally.

End users probably wouldn't notice this change for the most part.
 
Last edited:
0
•••
But when it comes to txt records, that is not always an option when you aren't using nameservers you are in control of. (such as using a landing page service) Of course you can always setup forwards, or manual A records to the service's IP - but that can be a pain the butt - especially if the service changes their IP or url structure.
Yes it is a pain but it is a one time verification which is livable with. It is also extremely ironic that Afternic has so many issues with domain ownership verification. Previously verified domains go into review without any change of the domain settings (specifically whois) or they allow "superusers" to list domains without even verifying ownership.

I think it is mainly just a domainer habit, and one that I do personally.

End users probably wouldn't notice this change for the most part.
Agree on this point - I alluded to the same point in my first comment - end users will likely not see a major change
 
0
•••
People should be able to opt out of this.
 
0
•••
People should be able to opt out of this.

You can:

Here's how to opt out:
If you still want your information to be available via automated sources of public WHOIS data, you can opt out anytime using one of these options:

• Call us at 866-938-1119.

• Send your request to [email protected]. We may ask for additional information for verification purposes.
 
0
•••
0
•••
They are also providing access on request to the data, so in the case of marketplaces like SEDO I expect they wont have problems with running automated ownership checks.
 
0
•••
0
•••
Buyers can still find your whois. Your whois is not being hidden (privacy) or blocked. Automated whois information collection is being blocked

I think it is difficult for buyers to find my WHOIS details, because there is no email there and they have to know to search for a link which looks like this

http://who . godaddy.com/whoischeck.aspx?domain=..............
 
0
•••
No. The GD whois information externally returns a url directly to search for that domain's whois. For example:

upload_2018-1-13_0-51-27.png


Edit: The domain whose whois I looked up was GoDaddy
 
0
•••
In a way it's a good thing

Eg

It allows godaddy to sift through the spammers and gd to contact domain owners direct if an offer on their domain come in which saves domain name owners endless rubbish email offering seo etc and hosting etc and logos etc all of which are not needed by long term domain investors who just buy and sit on their domains and who could care less how long they own their domains etc

A search engine is more powerful than many people think

Especially in an era where people are working flexible lifestyles etc and more and more people searching for domains and the more people that buy from gd will put more $ in to gd pocket which in turn means gd will advertise more etc which will generate more people using gd search box trying to find their ideal domain etc

But whois although on some whois is blocked or hidden it still appears in gd whois
 
0
•••
great news but too late for us..
 
0
•••
I can understand this position. A week ago, I helped somebody I know offline to handreg a .com domain, it was very fast and we forgot to apply privacy immediately. Applied it on the next day. Already about a dozen of indian seo/design/logo emails received to my friends business email, and they are still coming to a private email which was shown in whois for a day or so. As a domainer I'm immune to these things, but an enduser was shocked. Thank goodness, privacy email @ the registrar in question is generic and does not forward anything, so hopefully the spam will soon decrease.

In related thread, Paul and Joe were of opinion that GD is in compliance with ICANN rules. I respectfully disagree, as there is nothing in ICANN rules or whois RFC that allows to limit whois output even today. Not sure what exact technical change will GD implement on Jan 25th, block any and all requests to port 43 whois if not from preapproved Ip ranges?

I am curious how is it possible for an ICANN accredited registrar not to follow the rules, even if the purpose is no doubts good and should be welcomed by any enduser.
 
Last edited:
0
•••
I just got the following email quoted below

For standard domain owners this is probably good ... but for domainers who want to be found via whois this is might be something we might want to be opt out of.

I'm thinking the real question is what will the searches actually see?

@Paul Nicks .. could you fill us in on the specific details of the change. Like what the searches will actually see, and some examples of "authorised" bulk searches.

Thanks :)


Hey Ategy, thx for tagging me.

Authorized usage of port43 access will be from other registrars as part of a domain transfer. Port43 was setup initially as a means to facilitate easy transfer between registrars so we'll continue to comply with those requests as normal.
 
0
•••
Port43 was setup initially as a means to facilitate easy transfer between registrars

After this happened, there was another development: actual Registrar Accreditation Agreement states that port 43 whois should be public, and free... See the quoted part above. I still do not see how the current (good and fine) behavior of godaddy port 43 whois can be in compliance with ICANN rules, most notably para. 3.3.1.7 and para. 3.3.1.8. of the Agreement...

Please enlighten me
 
0
•••
According to the current Registrar Accreditation Agreement:

(quote begin)

3.3.1 At its expense, Registrar shall provide an interactive web page and, with respect to any gTLD operating a "thin" registry, a port 43 Whois service (each accessible via both IPv4 and IPv6) providing free public query-based access to up-to-date (i.e., updated at least daily) data concerning all active Registered Names sponsored by Registrar in any gTLD. Until otherwise specified by a Consensus Policy, such data shall consist of the following elements as contained in Registrar's database:

3.3.1.1 The name of the Registered Name;

3.3.1.2 The names of the primary nameserver and secondary nameserver(s) for the Registered Name;

3.3.1.3 The identity of Registrar (which may be provided through Registrar's website);

3.3.1.4 The original creation date of the registration;

3.3.1.5 The expiration date of the registration;

3.3.1.6 The name and postal address of the Registered Name Holder;

3.3.1.7 The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and

3.3.1.8 The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name.

The agreement between the Registry Operator of a gTLD and Registrar may, if approved by ICANN in writing, state alternative required data elements applicable to that gTLD, in which event, the alternative required data elements shall replace and supersede Subsections 3.3.1.1 through 3.3.1.8 stated above for all purposes under this Agreement but only with respect to that particular gTLD.

(quote end)

@Paul Nicks - can you please confirm that there is an ICANN-approved agreement between GoDaddy and Verisign Registry, which includes current GoDaddy whois policies for .com and .net, which are obviously not the same as we see in para. 3.3.1 of Registrar Accreditation Agreement?
Neither @Paul Nicks nor I would like to interpret legal documents. We are not lawyers. As stated above we are in compliance with all ICANN regulations per the various attorneys and counsel we consulted. There are various ways for people to get whois information for names registered at GoDaddy as stated above by Paul and myself.
I also think it unwise to comment on a piece of a document without the context of the entirety. I do not think it is reasonable for you to ask us to comment on legal documents when we are not trained to do so. You are always free to contact our or ICANN's attorneys for legal clarification.
 
0
•••
I just got the following email quoted below

For standard domain owners this is probably good ... but for domainers who want to be found via whois this is might be something we might want to be opt out of.

I'm thinking the real question is what will the searches actually see?

@Paul Nicks .. could you fill us in on the specific details of the change. Like what the searches will actually see, and some examples of "authorised" bulk searches.

Thanks :)

For whatever reason half of my domains at Godaddy have already been masked (or severely limited WHOIS) for some reason, since early last year. Its significantly reduced incoming inquiries.
 
0
•••
I don't mind this as in 15 years of selling domains 90%+ of all of my offers/sales have generated from my own sales pages as that's where my domains point. Can recall 1 domain being sold by whois contact for $7500 but that buyer wouldn't be using an automated process to obtain my email so this should cut down on the junk in my spam box for web hosting, etc... which I do myself anyway as I have my own servers.

Sounds like a nice way to do it. I will probably need to go this route myself now.
 
0
•••
0
•••
If may not show if you are not in the US. If you pick US English from the top left side of the main GoDaddy page you can pick a main country for GoDaddy to show you on the website. If you do that please manually revert the country and language back to your home country because it will show the wrong currency etc.

Here is the opt out info if you want it:
Here’s how to opt out:


If you still want your information to be available via automated sources of public WHOIS data, you can opt out anytime using one of these options:



  • Call us at +1 (480) 505-8877.
  • Send your request to [email protected]. We may ask for additional information for verification purposes.

I am in the USA (north carolina) and have always USA - EN set as the language. But thank you for the instructions here!
 
0
•••
If may not show if you are not in the US. If you pick US English from the top left side of the main GoDaddy page you can pick a main country for GoDaddy to show you on the website. If you do that please manually revert the country and language back to your home country because it will show the wrong currency etc.
That's an absolute embarrassment. For a company the size of Godaddy to not be able to publish accessible information to non-US customers is just shameful. Sorry, but I work with global brands, many far larger than GD, and someone would have their rear handed to them if this happened in nearly all companies this size.

Perhaps it makes sense to duplicate the article you wrote here on NP so that non-US customers can access this information?
 
0
•••
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back