Whois Display Issue at GoDaddy Poses Legal Risk

I discovered an issue with the way Whois records are displayed at GoDaddy that could be problematic for domain investors. I was made aware of this when DomainTools detected a Whois change for one of my domain names that hadn’t undergone any Whois updates. This is an issue GoDaddy is aware of, and I hope the company remedies it ASAP.

All of my domain names are registered / owned by my company, Top Notch Domains, LLC. Within the individual settings page, I can see the Whois information correctly shows my company name and other contact information. You can have a look at how I would like the Whois record to look for SelfCare.com:

If you were to visit GoDaddy and use their Whois search tool, you will notice something slightly different. My company is not listed in the Whois record for no good reason:

If someone were to do a Whois search for this domain name or likely any domain name in my portfolio that doesn’t have Whois privacy enabled, it would look like I personally own the domain name.

There are at least a couple of reasons why this is problematic. For one thing, it looks like there was a Whois change from my company to me. If companies are monitoring any of my domain names for Whois changes, this could be a trigger. A Whois change on one of my domain names is what initially made me aware of the issue. I wouldn’t put it past some companies to use this as an excuse to file a UDRP.

Perhaps more importantly, if there were ever any type of legal action, a cybersquatting lawsuit for example, it looks like I personally own these domain names even though my company is the actual registrant. My business is entirely separate from me personally.

I imagine there are many companies that own domain names but have an employee as the administrator. This could be problematic.

There is a solution to the issue, but it’s not one that can be easily addressed for portfolio owners. GoDaddy customers can click through to their individual domain name, click the “Change” button on the Domain Privacy section, and then select the toggle to Publish Organization in RDDS/WHOIS. This will allow customers to correctly display the company name.

However, this solution is not available in bulk. Users can not make this selection by selecting all of their domain names and clicking the Domain Privacy toggle as the toggle does not appear there. To my knowledge, and after talking this through with various GoDaddy representatives, making this change in bulk is not currently an option.

I am unsure if GoDaddy intends to implement a fix to enable portfolio owners to display their company name / organization on Whois records. Hopefully, the company will implement this change and do it quickly, as I see no reason for it not to be an option.

Elliot Silver
Elliot Silver
About The Author: Elliot Silver is an Internet entrepreneur and publisher of DomainInvesting.com. Elliot is also the founder and President of Top Notch Domains, LLC, a company that has closed eight figures in deals. Please read the DomainInvesting.com Terms of Use page for additional information about the publisher, website comment policy, disclosures, and conflicts of interest. Reach out to Elliot: Twitter | Facebook | LinkedIn

4 COMMENTS

  1. “If someone were to do a Whois search for this domain name or likely any domain name in my portfolio that doesn’t have Whois privacy enabled, it would look like I personally own the domain name.”

    Domain registrars are required to collect a “name” and “organization”. They have no idea whether the domain name is registered on behalf of the individual named or the organization. In fact, GoDaddy made this clear during the GDPR discussions at ICANN some time ago. When it was proposed that redaction of WHOIS was not required for domains registered to corporations instead of individuals, GoDaddy’s position was that they cannot tell which ones are or are not intended to be registered to the identified organization, which might simply be there for identification purposes. That’s kind of interesting, when you consider that a basic requirement of a contract is to know who the parties are to the contract. One way to avoid ambiguity is to use a “role” account for the name – i.e. “Domain Administrator” which identifies the person who is the domain administrator for that Organization’s domain name (and identifies them as “Domain Administrator”). But, there is nothing inherent in having a “name” and “organization” in the whois data which distinguishes the domain name as being registered to the named individual or the organization as the “owner” (and, again, “owner” is a difficult term, since what you have with the registrar is a service contract, not a title document).

  2. With all due respect to John Berryhill, Registrars are NOT simply required to collect a “name” and “organization.” What Registrars are REQUIRED to do is: “6.1. Registrar MUST collect or generate … 6.1.9. Registrant Name” …. AND
    6.5. Registrar MUST provide the opportunity for the Registered Name Holder to provide values for the following data elements. If provided by the Registered Name Holder, Registrar MUST collect the following data element values:
    6.5.1. Registrant Organization…. 6.6. If the Registered Name Holder enters a value for the Registrant Organization data element, Registrar MUST inform the Registered Name Holder that: 6.6.1. The Registrant Organization will be published in RDDS if the Registered Name Holder agrees to the publication of the value; and 6.6.2. The Registrant Organization will be considered the Registered Name Holder. 6.7. Registrar MAY collect additional data elements as required by its Registry-Registrar Agreement and/or the Registry Operator’s Registration Policy….
    see https://www.icann.org/en/contracted-parties/consensus-policies/registration-data-policy#collection-registration-data . GoDaddy is not unique in converting a simple task into a very complicated process. ICANN specializes in that and in allowing SLOPPY practices of registrars to continue in violation of the intent or explicit language of ICANN Policy. Overpaid ICANN management and staff are too lazy or inept to do their jobs competently. Registrars have FORMS that do NOT ask for identification of the full, correct, and legal Name of Registrant (e.g., if the registrant is an individual, list the full correct legal NAME of the individual; if a legal entity, list the full correct legal name of the legal entity, etc.) Instead, the idiotic GoDaddy FORM apparently only seeks “contact info” i.e., a “name” and “organization” as contacts for the “Registrant.” In your particular case, GoDaddy has apparently decided (without your consent) that a contact “name” = “registrant” (even though you listed your LLC as “organization”) according to GoDaddy’s “Raw Registrar RDAP Response” for selfcare.com at https://lookup.icann.org/en/lookup . Many registrants, myself included, have tried repeatedly to get this MESS corrected at ICANN and have given up. ICANN is beyond INEPT. I would not follow John Berryhill’s suggestion to replace your name with “Domain Administrator” as too many have followed that practice and somebody named “Domain Administrator” must be listed as “Registrant” of millions of domain names worldwide according to the “Raw Registrar RDAP Responses” of like-minded registrars! The quick FIX is just list your LLC twice (as “name” and “organization”) on the IDIOTIC FORM. The real FIX for this “MESS” (and GoDaddy is only one of many registrars failing in this regard) is for ICANN to strike the words “or generate” from its policy and simply REQUIRE Registrar to COLLECT the “Registrant Name” from the registrant or its duly authorized officer or agent, i.e., put the burden on the REGISTRANT to correctly identify itself in accordance with ICANN Policy. It is OBVIOUSLY beyond the competence of most ICANN-accredited registrars to correctly identify (“or generate”) the Registrant Name in accordance with existing ICANN Policy!

    • “6.6.2. The Registrant Organization will be considered the Registered Name Holder.”

      “Will be considered the Registered Name Holder” by whom is the interesting question.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Recent Posts

When Whois Contacts Fail, I Use GoDaddy DBS

4
One of the things I enjoy most about domain investing is the negotiations. Most don't work out, but I enjoy the thought and effort...

Experimenting with Spaceship SellerHub

6
I've been impressed by the growth of Spaceship and its recently launched SellerHub. The sister company to Namecheap has shown a great willingness to...

Afternic Allows Early LTO Payoff / Payout

2
A few years back, I glanced at my phone and saw more than ten consecutive emails from Dan.com. For a moment I was baffled...

WSJ Reports on $1.5 BILLION PE Acquisition of Namecheap

9
Richard Kirkendall is one of the hardest working executives in the domain name space as the Founder and CEO of Namecheap. He has built...

Domain Summit Asia 2025 Coming in November

1
Fresh off a successful Domain Summit conference in London earlier this month, conference organizers announced a new event coming to Hong Kong later on...