Thứ Năm, 20 tháng 6, 2019

Stop malware and phishing scams: Tools to help identify shady websites

Read more useful articles at: Tech Deeps

Have you ever visited a website and wondered where that site and its owners are located? Shopping sites are particularly of interest, because most people want to know who the seller is and where the seller is located. Casual online browsers may also find themselves on sites that dump malware onto unsuspecting PCs, plant malicious pop-up ads, or phish for private information. Others may stumble upon sites that push conspiracy theories, hate rhetoric, or violence, which they may want to avoid or expose.

Wouldn't it be great if there were a service that revealed this information? Well, there is, and here's how to use it.

Using WHOIS to sniff out shady sites

Many sites and organizations provide identifying site information for free. The most notable is ICANN (Internet Corporation for Assigned Names and Numbers), a private non-profit corporation that allocates space for IP addresses and manages domain names (among other things). The service is called WHOIS, and it provides a long list of biographical information for every website in the world. 

ICANN emails website owners (or administrators) of new sites and owners of modified existing sites requesting that users verify and update the information on all of their websites. Many people ignore these emails, but new ICANN rules demand that you respond, or ICANN will suspend your domain name (thereby, your website) for 72 hours to 15 days. To avoid suspension, add ICANN to your email whitelist. If you are suspended, visit the ICANN website to discover how to reactivate your website.

ICANN's diligence is good news for most legitimate websites, but not so good for sites that prefer to remain anonymous. Not all anonymous sites are unscrupulous. Many site owners need to protect their privacy from fans, stalkers, professional competition, or other risks.

01 icann warning message JD Sartain / IDG Worldwide

ICANN warning message

Similar sites such as WhoIsHostingThis and Whois.net, and dozens of others are just as reliable. Your own host provider may even offer this service.

Keep in mind, however, that many websites use a domain privacy service (aka proxy protection service) like WhoIsGuard, Proxy Protection, or Domains by Proxy to protect users' private information from being displayed on the Internet. These sites mask the site owner's information and replace it with the host provider's or proxy service's information. 

So, how does one discover the hidden information on a protected website? As of this writing, you cannot legally access protected information without a valid subpoena from a law enforcement agency or representative thereof. There are workarounds, such as querying a passive DNS/WHOIS server (as opposed to a live WHOIS database server) using programs such as SecurityTrails, SurfaceBrowser, Deteque, DomainTools, and dozens more. These programs use a variety of techniques, such as cross-checking data from different datasets, studying WHOIS historical records, or researching associated domains, to name a few. None are simple, easy solutions, which is why most everyday web surfers don't use these methods.



PCWorld News

Read more useful articles at: Tech Deeps

Không có nhận xét nào:

Đăng nhận xét