WPF Report: Call Don’t Click I – Why It’s Smarter to Order Federally Mandated Free Credit Reports via Telephone, not the Internet

The report Call Don’t Click: Why it’s smarter to order federally mandated free credit reports via telephone, not via the Internet was published February 24, 2005. It is the first report in a series of two on AnnualCreditReport.com and related issues.

Report author: Pam Dixon

You are at the report main page, where you can download the full report or navigate to parts of the report. The Background, Executive Summary, Index, and full report is in the text below.

Report Links:

Download the full report (PDF)
Read the Report Front Matter, Summary, Index, and the rest of the report below

Background of Report

This report focuses on annualcreditreport.com, and the issue of impostor “typo” domains that lead consumers to fraudulent websites, or websites charging a fee for what Congress has mandated should be a free credit report each year for consumers.

This report is Part I in a two-part series of reports concerning annualcreditreport.com. This report is available at www.worldprivacyforum.org, which is also where updates will be published.

About the World Privacy Forum

The World Privacy Forum is a non-profit public interest research and consumer education group focused on the research and analysis of privacy-related issues. The Forum was founded in 2003 and has published significant privacy research and policy studies in the area of health, online and technical, privacy, self-regulation, financial, and identity among other areas. www.worldprivacyforum.org

Summary

The World Privacy Forum urges consumers who qualify [1] to order a federally mandated free annual credit report [2] to call the toll free number (877-322-8228) instead of ordering their free credit report online. Calling the toll free number exposes consumers to fewer potential hazards than ordering online. [3] Consumers who try to use the official online site www.annualcreditreport.com may encounter numerous challenges, some of them potentially serious.

By calling the toll free number instead of visiting the online site, consumers are also protected from the potentially confusing sales and marketing information at the official free annual credit report site. [4]

Beyond issues with the annualcreditreport.com site, there are hazards posed by imposter Web domains. The World Privacy Forum has identified and confirmed 96 domain names that are close misspellings of the official site, annualcreditreport.com. At the time of writing, 50 of these imposter domains were active and luring unsuspecting consumers to questionable sites. Some of these deceptive imposter sites led consumers to official credit bureau sites – where individuals would have to pay a fee instead of being able to access a federally mandated free credit report.

The problem of the misspelled domain names is particularly troubling because the credit bureaus are refusing to allow legitimate news organizations, consumer groups, and other legitimate companies to link to the official free credit site. [5] Currently, only four sites are able to link to the official free credit report site: the Federal Trade Commission (FTC) and the three credit bureaus, Experian, Equifax, and TransUnion.

Unless consumers are clicking from one of these four sites, they must type in or copy and paste the free credit report site address. Given that numerous deceptive sites are actively misleading consumers by claiming to be the official site, and are typically only one letter or one easy typo away from the “real site,” it is altogether too easy for consumers to get trapped by an imposter domain.

One credit bureau apparently thought about this issue; Experian took out at least 28 known domains of common typos for annualcreditreport.com on July 27, 2004. However, Experian and the other credit bureaus left dozens of potential domain names up for grabs, many of which were picked up by “pay per click” companies. Consumers are now left to weed their way through a jungle of imposter sites whose only purpose is to gather “clicks” for money.

Meanwhile, various companies appear to be actively advertising commercial services through keyword advertising campaigns and or affiliate marketing programs. [6] The imposter domains can profit from these campaigns and programs. For example, an online ad or affiliate marketing campaign studied for this report included the keywords “free +credit + report + online.” This program sent consumers to Experian and other credit services via the imposter sites. [7] The Experian, TransUnion, and Equifax credit bureaus all have active affiliate marketing campaigns that encourage domain owners to send visitors to their commercial, for-pay service sites. [8]

If consumers do manage to find their way to the official annualcreditreport.com site, they still face challenges. TransUnion, for example, automatically selects consumers to receive marketing information through a small, pre-checked box at the bottom of a registration page. If the box is left checked, TransUnion may then share the consumer’s information with its business affiliates and partners.

Consumers also have up to four different privacy policies to read and understand. Additionally, one credit bureau, TransUnion, is requesting consumer email addresses in a way that does not indicate the submission of the information is voluntary and is not necessary for getting a free credit report.

Index

CALL, DON’T CLICK: WHY IT’S SMARTER TO ORDER FEDERALLY MANDATED FREE CREDIT REPORTS VIA TELEPHONE, NOT THE INTERNET

SUMMARY

Summary of findings regarding misspelled domains:
Summary of Findings from analysis of the actual AnnualCreditReport.com site:
Recommendations

DISCUSSION OF FINDINGS

Findings on Fraudulent, deceptive, or misspelled domains

Mispelled domains owned by Experian
Misspelled Domains Owned by Other Companies
Other Problematic Domains to be aware of:
How the Owners of the Misspelled Domains are Making Money on Consumer Confusion

FINDINGS ON OFFICIAL SITE ANNUALCREDITREPORT.COM

Blacklisting for those who link to AnnualCreditReport.com

TransUnion Marketing to Consumers and Email Collection

TransUnion “Auto-Opt In”
TransUnion Email Address Requests

Potentially Confusing Menu Bars at the AnnualCreditReport.com Site

Privacy Policies at AnnualCreditReport.com

Things to Be Aware of in the TransUnion AnnualCreditReport.com Privacy Policy
Archive of relevant AnnualCreditReport.com privacy policies:

RESOURCES

Credits

APPENDIX A: SOURCE CODE OF THE REDIRECTS AT MISLEADING DOMAINS

Keywords and Process for Imposter Sites: Example #1 21 Example #2: Ad campaign for Free Credit Report
Example #3: Deceptive coding of domain referrer

APPENDIX B: ADDITIONAL INFORMATION ON THE MISSPELLED DOMAINS

Experian Name Servers

Other Name Servers

Abbreviated Domain Information

Summary of findings regarding misspelled domains:

Ninety six (96) total domains with close or nearly identical spellings of annualcreditreport.com have been purchased. Of these, 28 domains are owned by Experian. Sixty eight (68) domains are owned by other individuals.
There are 50 known imposter domains that are “live.” Many of these 50 known imposter domains label their home pages as the official annualcreditreport.com site, even though they are not in fact the official site. There may be more imposter domains that have not been found yet.
The “live” imposter domains actively send consumers to commercial credit services and credit bureaus. The imposter domains get paid for doing this via “pay per click” online advertising and affiliate marketing schemes. Some pay per click schemes run through search engines. Pay per click schemes can also operate through affiliate marketing programs.
Experian, TransUnion, and Equifax are not allowing legitimate news, consumer, and other organizations to link to the official annualcreditreport.com Web site. This means that consumers have even a greater chance of misspelling domains because they must type the name in instead of click on a link. Meanwhile, the credit bureaus are allowing active links to their commercial service sites from affiliate marketing programs.

Summary of Findings from analysis of the actual AnnualCreditReport.com site:

TransUnion’s implementation of its free credit report system is problematic in several respects. When consumers use the official annualcreditreport.com site to order reports from TransUnion, they are automatically selected to receive marketing information and product offers from subsidiaries and affiliates. This is done via a check box that is already checked.
TransUnion requests an email address from consumers who want to order a federally mandated free credit report. But TransUnion does not state that submission of the email address is voluntary.
TransUnion requires consumers to register at its site prior to seeing their federally mandated free credit report. TransUnion is the only credit bureau with this requirement.
Two credit bureaus, Experian and Equifax, have employed potentially confusing menu formatting in their implementation of their free credit report offerings.
Consumers who use the official annualcreditreport.com site to order all three of their credit reports will be subject to a total of four different privacy policies.

Recommendations

The FTC needs to take down the misspelled domains that deceptively state on their home pages that they are annualcreditreport.com.
Those Web sites that state in their source code that they are referring consumers from a domain other than the actual domain should be held accountable for deceptive practices. This would apply especially to questionable sites that redirect consumers to legitimate businesses by altering the domain referrer information.
The FTC should require all three credit bureaus to cease and desist immediately from participating in any online keyword advertising or affiliate marketing campaign that contains the words “free credit report” or “annual credit report” if the campaign sends consumers to their for-pay commercial services. Additionally, the credit bureaus should be required to police their affiliates more closely for abuses.
The FTC needs to require the credit bureaus to immediately stop “blacklisting” legitimate non-profit organizations, news outlets, and other entities from linking to the official annualcreditreport.com site. Due to the 68 known imposter sites, there is a clear risk in not allowing Web linking to the official site from legitimate organizations.
Menu options at the credit bureau subsections of annualcreditreport.com need to be labeled conspicuously as either specifically for the federally mandated free credit report or for a commercial service unrelated to the free credit report.
TransUnion should not be allowed to automatically select consumers to receive marketing material and have their information shared with affiliates and partners. Further, TransUnion should not be requesting an email address to send marketing information to via a site designed primarily to allow consumers to get their federally mandated free credit report. If TransUnion is going to continue to request email addresses from consumers — information that is not required for receiving a free credit report — then the email address request should be clearly labeled as a voluntary submission at the time it is requested. Currently, it is not labeled as a voluntary submission.
Some attention needs to be paid to the fact that consumers will have to read four privacy policies in order to understand their rights at the official online site. If this process can be simplified or made clearer, then it should be.

Discussion of Findings

The report findings are divided into two sections: findings on fraudulent domains, and findings relating directly to the actual annualcreditreport.com site.

Findings on Fraudulent, deceptive, or misspelled domains

To date, 96 known misspelled domains are registered; [9] 28 of these domains belong to Experian, 68 of these domains belong to other individuals who are exploiting the misspellings with deceptive “pretender” domains and pay per click marketing schemes that lead consumers to for-pay services at Experian and other credit services such as “MyFico” at FairIsaac. Of the total number of typo domains, 50 are currently online and some of these domains are highly deceptive. Of the 50 active imposter domains, there are two primary methods by which consumers are misled.

A. The active imposter domains may incorrectly claim to be annualcreditreport.com on their home pages.

B. Some of the domains may correctly label their home pages, but then incorrectly include deceptive domain forwarding information within their source code. This deceptive information incorrectly identifies the domain to a search engine, or a credit bureau, or other ad partner or affiliate.

In the graphic below (Figure 1) , is an example of an imposter domain. Here, annualceditreport.com is claiming on its home page to be annualcreditreport.com, and boasting that it is “Your Access to Free Credit Reports.”

Figure 1.
An imposter domain. Note the misspelling of the URL in the address bar.

Misspelled domains owned by Experian

Experian purchased at least 28 domains on July 27, 2004. [10] Each domain is comprised of a close misspelling of annualcreditreport.com, the official free credit report site.

The Experian-owned misspelled domains are:

annualcreditrepot.com

annualreditreport.com

annualcredreport.com

annualcreditraport.com

annulcreditreport.com

annualcredtreport.com

annualcrditreport.com

annualcreditreporrt.com

annuallcreditreport.com

anuelcreditreport.com

annuelcreditreport.com

ennualcreditreport.com

ammualcreditreport.com

anyualcreditreport.com

annualcraditreport.com

annualcredatreport.com

annualcreditteport.com

annualcreditriport.com

annualcreditrepart.com

annualkreditreport.com

annualcredittreport.com

annualcreditreeport.com

annualcreditreportt.com

annualvreditreport.com

annualcredittreport.com

annualcreditrreport.com

annualcreditreeport.com

The Experian domains have name servers of ns03consumerinfo.com/ns04 consumerinfo.com. This is important, because even though these domains were registered to GoDaddy via Domains by Proxy, nameservers are unlikely to lie.

ConsumerInfo.com is an Experian company, and is an active domain. Its nameservers are ns03/ns04 consumerinfo.com, the same as the domains above.

Qspace.com, a domain receiving numerous “pay per click” flows from the parked domains mentioned in this report, is also registered to ConsumerInfo.com, and uses the ns03/ns04 consumerinfo name servers.

As of the report date, the 28 Experian domain names listed above did not have active Web sites.

Misspelled Domains Owned by Other Companies

Researchers found 68 misspelled domains owned by a variety of companies and individuals. The total known number of the misspelled domains known to be owned or hosted by pay per click companies is 68. Fifty of the domains are live, 18 have been taken out but were not online as of the time of writing. [11]

During research for this report, a number of the domains changed status. For example, one domain that was live in December still exists, but has been taken offline. Other domains that were not online now are.

There is a high possibility that more misspelled domains already exist, or will be taken out in the future. There is also the possibility that the live and non-live domains will continue to shift.

50 “live” imposter domains:

anulecreditreport.com

anualecreditreport.com

annualecreditreport.com

annuallecreditreport.com

anuallecreditreport.com

annuslcreditreport.com

annuolcreditreport.com

annialcreditreport.com

anialcreditreport.com

annualxreditreport.com

annualcteditreport.com

annualcrefitreport.com

annualcredditreport.com

annualcredittreports.com

annualcreditrreports.com

annualcreditreeports.com

annuallcreditreports.com

annualcreditreporrts.com

annualcreditrports.com

annualcredtreports.com

annualcrditreports.com

nnualcreditreport.com

nnualcreditreports.com

annualcreditroport.com

annualcreditrepirt.com

annualcreditrepprt.com

anmualcreditreport.com

annuilcreditreport.com

annuakcreditreport.com

annualcresitreport.com

annualccreditreport.com

annualcredditreport.com

annualcreditrepoort.com

annualcreditrepoorts.com

annualccreditreport.com

annualcrreditreport.com

annualcrreditreports.com

annualcredditreports.com

annuelcreditreports.com

annalcreditreports.com

annalcreditreport.com

snnualcreditreport.com

annualcreditreprts.com

anualcreditreports.com

annuacreditreport.comv

annualcreditrepports.com

annualcreditrepport.com

annualceditreports.com

18 purchased imposter domains not currently online:

Anuallcreditreport.com

aanualcreditreport.com

amnualcreditreport.com

annyualcreditreport.com

annyulcreditreport.com

annulecreditreport.com

annuulcreditreport.com

annualcrwditreport.com

annualcreditrepott.com

anualcreditreport.com

annualceditreport.com

annualcredotreport.com

annualcredutreport.com

annualcredirreport.com

annualcrediteeport.com

annualcreditreoort.com

annualcreditrwport.com

annualcreditrepoet.com

How the Owners of the Misspelled Domains are Making Money on Consumer Confusion

The deceptive and misspelled domains that are hosted at or owned by “pay per click” companies are highly problematic on a number of levels.

First, the misspelled sites are sending consumers to for-pay services at the credit reporting bureaus, and the owners of the misspelled imposter sites are getting paid to do this. They are getting paid because someone somewhere paid for a keyword or Internet marketing campaign. There is a possibility that the credit bureaus themselves are paying the misspelled sites or their partners because the imposter sites or their partners have joined one or more of the credit bureaus’ “affiliate” programs. [12]

What is most troubling is that the keyword phrase “free online credit report” is being used to target and send consumers to for-pay services at Experian and other sites instead of to the federally mandated free credit report site, annualcreditreport.com.

How the scheme works: the specifics

This is a simplified explanation of what is happening to consumers. For more details and examples of how the source code looks and operates, please see Appendix A.

1. An individual types in official annualcreditreport.com domain name with a misspelling. In this example the typo domain is annualcresitreport.com.

2. The annualcresitreport.com domain name is parked at or managed by a “pay per click” domain company, in this example, the annualcresitreport.com Web site is parked at DomainSponsor.com.

3. The annualcresitreport.com home page contains links to Free Credit Reports and similar topics. (PDF of home page).

4. Consumers who click on the “Free Credit Report Online” links will be taken to a page of “sponsored links.” The four sponsored links on the site in this example are “Free Credit Report Now,” Instant Credit Report, Online Credit Report, and Free Credit Report. (PDF of Sponsored Links page).

5. After clicking one of these sponsored links, individuals will be redirected through a series of Web sites. This will happen so quickly that most will never see the information flashing across the address bar. For example, say a consumer clicks on the sponsored link “Free Credit Report.” In this example, that link will take the consumer first to Information.com then to Google.com, then finally, the consumer will land on an Equifax credit bureau site that lets consumers check their credit — for a fee. All of this redirection will happen in the blink of an eye and will not be obvious to most consumers.

(PDF of ConsumerInfo via Qspace, arrived at via clicking on the imposter site link).

The reason this redirection happens is so that keywords or search terms can be passed along to advertising partners. This ensures that everyone in the chain gets a commission from the click. Meanwhile, ConsumerInfo.com/Experian gets customers. And the owner of the annualcresitreport.com domain gets a potential financial payout from the click-through.

Everyone makes money or gets a benefit, except for the consumer who did not make it to the real annualcreditreport.com site.

For the record, the annualcresitreport.com imposter site in this example had four “sponsored links” leading to the following sites:

Sponsored Link: Free Credit Report Service (An Experian Company)
Leads to:
<https://qspace.iplace.com/cobrands/370/order1_1.asp?p=1&sc=6088BJ07>
Sponsored Link: MyFICO.com, a division of FairIsaac
Leads to: <http://www.myfico.com/?lpid=GGLE1011>
Sponsored Link: ConsumerInfo.com, an Experian company
Leads to: < http://qspace.iplace.com/cobrands/457/default.asp?sc=6163GGMN>

Sponsored Link: CreditProtect by Identity Guard
Leads to: <http://www.identityguard.com/se/landing_se_cm_cptrial.asp>

Specific Pay Per Click Companies Involved in AnnualCreditReport.com misspellings

As previously stated, 68 of the 96 misspelled domains are registered to or somehow connected to pay-per-click companies. These companies specialize in creating hundreds and sometimes thousands of domains for the sole purpose of making money from keyword or search engine ad sales. Usually the only way these imposter sites make money in the context of the misspelled domains is when an individual misspells a domain and clicks all the way through to a final destination page, which in some cases only takes two or three exploratory clicks.

Many of the imposter domains are redirected by DomainSponsor, [13] a “pay per click” domain parking engine. This is revealed by the name servers of nsproredirect1/nsproredirect2, which are the well-known name servers Domain Sponsor allows domain parkers to use. [14] The domains parked at Domain Sponsor make extensive use of iFrames to disguise what is happening to consumers.

Imposter domains that were “live” at the time of writing were hosted by the following companies on the following name servers:

DomainSponsor
Name Server: NS1.PROREDIRECT.COM

Enom
Name Server: DNS1.NAME-SERVICES

GoDaddy
Name Server: PARK17.SECURESERVER.NET

Budget Names
Name Server: NS1.RENTALQUEUE.COM

Domain Hop
Name Server: NS1.DOMAINHOP.COM

Note: One misspelled domain that was live in December 2004 was hosted by Fabulous at Fabulous.com name servers, however, this domain was taken down and no other Fabulous hosted domains were found.

Consumers who mistype in annualcreditreport.com and land at one of these active imposter domains will be besieged by pop-ups, pop-unders, and persistent advertisement windows. [15] Researchers documented pop-up advertisements for Phoenix University, virus scanning software, a host of “free” items, and credit report advertisements.

Consumers who land on these domains should simply close their browsers and start over, or simply call the toll free number for their credit report.

Finally, some of these pay per click companies also own or are affiliated with search engine sites. For example, DomainSponsor is affiliated with Information.com.

Information.com in turn collects all of the information flowing into its site from the imposter domains and makes money by selling or sharing the information. [16]

(PDF of Information.com privacy policy.)

Based on the WHOIS registry information and information on Information.com and DomainSponsor, it is possible to go one step further. DomainSponsor.com is registered by Oversee.net, and Information.com is also registered by Oversee.net. Information.com states on its Web site that it is an Oversee.net company. It appears that Information.com uses its apparent DomainSponsor product to set up imposter domains and feeds the keywords and ad campaigns into its own search engine.

Findings on Official Site AnnualCreditReport.com

Blacklisting, or not allowing active Web linking to the annualcreditreport.com site is an ongoing issue. [17] But those consumers who do manage to land at the official annualcreditreport.com site have further challenges to contend with.

Namely, there are issues regarding automatic selection for marketing and information sharing, menu confusion, and up to four different privacy policies to read and understand. Additionally, one credit bureau, TransUnion, is requesting consumer email addresses in a way that does not indicate the submission of the information is voluntary and is not required for receiving a free credit report.

Blacklisting for those who link to AnnualCreditReport.com

As of December 1, 2004, this is the message consumers saw when they clicked a link to annualcreditreport.com from all sites but the FTC and the three credit bureaus:

Figure 2.
Original Black List Message from annualcreditreport.com.

It is intriguing that the credit bureaus are allowing imposter domains to help send them business via online ad links and affiliate marketing, while at the same time they are blocking legitimate organizations from sending consumers to the official free credit report site via online links.

The most current blocking message the credit bureaus are putting on the annualcreditreport.com site is as follows:

“For security purposes, www.AnnualCreditReport.com can be accessed by typing the web address “www.annualcreditreport.com“, or from links from the Federal Trade Commission (www.ftc.gov), Equifax (www.equifax.com), Experian (www.experian.com) and TransUnion (www.transunion.com) websites.

AnnualCreditReport.com is the only web source authorized by all three nationwide consumer credit reporting companies from which free annual credit file disclosures can be requested.” [18]

Again, it should be pointed out that the three credit bureaus allow affiliate marketing sites to actively link to the bureaus’ credit services. It is unknown how security risks are mitigated in the instances of affiliate marketing linking to credit bureaus’ commercial sites.

TransUnion Marketing to Consumers and Email Collection

If consumers use annualcreditreport.com to collect their federally mandated free credit report from the TransUnion credit bureau, consumers will run into two immediate issues. First, TransUnion pre-selects a checkbox that gives it permission to send consumers marketing and affiliate offers. Secondly, unlike the other two credit bureaus., TransUnion requests consumer email addresses at its registration page.

A third general issue to note is that TransUnion, unlike the other two credit bureaus, requires consumers to register at the TransUnion site in order to view their federally mandated free credit report. Registration requires consumers to provide more information than would otherwise be necessary.

TransUnion “Auto-Opt In”

On the TransUnion subsection of the official annualcreditreport.com site, consumers are automatically selected to receive marketing emails and have their information potentially shared with affiliates and partners. TransUnion accomplishes this by displaying a checked box on the bottom of the page on its site. If consumers do nothing, they will be effectively choosing to receive marketing and affiliate offers.

(PDF of TransUnion page with pre-checked box.)

The text of the TransUnion pre-checked offer states:

“You will receive a free monthly newsletter loaded with important credit education as well as valuable product offers provided by our subsidiaries and partners.” [19]

This pre-selection is problematic on a number of fronts. First, consumers should not be forced to de-select themselves from marketing and affiliate offers when they are going to the site specifically for collecting a federally mandated free credit report. It is important to note that in order to get those product offers from subsidiaries and partners, TransUnion may share consumers’ relevant information.

Secondly, the checked box is at the very bottom of the page, and may easily be overlooked by consumers.

In its annualcreditreport.com privacy policy, TransUnion states:

“Under the FCRA, we may provide information to companies that provide you with pre-approved offers of credit or insurance. 19 Text confirmed in December 2004.

If you indicated to us when you registered, placed an order or updated your account that you were interested in receiving information about other products and services, your name and email address may be shared with a third party in order to present these offers to you.” (PDF of full privacy policy.)

Because TransUnion requires consumers to register in order to access federally mandated free credit reports, then this statement about name and email address sharing with third parties will very likely apply to consumers who neglect to uncheck the box and who provide email addresses.

It is unknown if TransUnion’s auto-selection of consumers at annualcreditreport.com will override previous opt-outs consumers have made. For example, if a consumer has previously called to stop affiliate information sharing, will keeping the TransUnion checkbox checked reverse this choice? This is a question the FTC needs to address with TransUnion.

Also located in TransUnion’s annualcreditreport.com privacy policy is a statement specifically about signing up for the newsletter:

“TrueCredit Newsletter

You may sign up for TrueCredit’s free monthly newsletter by selecting “You will receive a free monthly newsletter loaded with important credit education and valuable product offers provided by our subsidiaries and partners.”

(PDF of full privacy policy )

There is a question here of the accuracy of the privacy policy, because consumers do not need to select anything to sign up for the TrueCredit newsletter, it has already been done for them if they visit the site.

Neither Equifax or Experian are automatically selecting consumers to receive marketing information and affiliate offers.

TransUnion Email Address Requests

On the same page where TransUnion automatically selects consumers to receive marketing offers, TransUnion also requests consumers’ email addresses. The email address is requested in the same space that requests information such as name and address and SSN. (Click here to see TransUnion email request PDF)

TransUnion does not specifically disclose that giving an email address is voluntary. If an individual clicks on a link under the email address request, a box pops up with an explanation of why TransUnion is asking for it.

This is the text of the TransUnion email explanation: “Why do you need my email address?

Your email address allows us to contact you with important information regarding your account and , if necessary, to help you login or confirm your identity.”

(Click here to see a screen shot of the email explanation box at TransUnion PDF )

In order to view a federally mandated free credit report online, there is no need for an individual to give a credit bureau an email address. The report displays online through the Web browser, and is not sent via email. The other two credit bureaus do not request email addresses from consumers as a prerequisite to viewing the free credit report.

Consumers’ email addresses are an additional and optional piece of information that TransUnion does not need to have.

TransUnion, in its privacy policy governing its activities at annualcreditreport.com states: “We may use information you provide to update our consumer credit database.” It is unknown if this statement applies to email addresses. However, if a consumer does not opt-out of the newsletter checkbox, the email address and name may apparently be shared with affiliates and partners.

It should be noted that Experian in its implementation of the federally mandated free credit report does give consumers an opportunity to provide an email address much later in the reporting process. This is done only if a consumer chooses to dispute an item in the credit report. The notification of why the email is requested is very clear, and it is made very clear that the submission of the email address is voluntary.

Potentially Confusing Menu Bars at the AnnualCreditReport.com Site

The three credit bureaus have been allowed by the FTC to advertise for their commercial services at the annualcreditreport.com site. Generally speaking, because of this, the menu design of the individual credit bureaus’ aspect of the annualcreditreport.com site is not optimal.

For example, when an individual is viewing their free credit report online via the annualcreditreport.com site, menu items for the free credit report show up. But menu items for commercial items also show up, and sometimes in a way that makes it look as if those commercial items are part of the free credit report. For example, the Equifax menu bar is all one color, and it is very difficult to differentiate between items that are part of the free credit report and items that are not.

(PDF of Equifax menu bar showing a commercial pitch.)

Experian’s menu bar is a little better, but not perfect. The Experian menu bar at the time of researchers’ visits were color-coded to differentiate the free materials from the for-pay materials, but there was still room for consumer confusion.

(PDF of Experian menu bar.)

The menu bar issue could be easily remedied by the credit bureaus by clearly labeling the for-pay menu items as “commercial services” and separating the for-pay menu items clearly from the free credit report menu items.

Privacy Policies at AnnualCreditReport.com

An individual who goes to annualcreditreport.com and orders credit reports from all three credit bureaus will be subject to four different privacy policies: the annualcreditreport.com policy, and the policies of all three credit bureaus. These policies will be in effect at different times of consumers’ visit and generally do not overlap.

Annualcreditreport.com is essentially a portal site that acts as a funnel to lead consumers to subsites at the three credit bureaus where they can access their free credit report at each separate credit bureau. Annualcreditreport.com has a privacy policy that covers its collection of information, but this policy only applies to the few pages of the annualcreditreport.com portal area; it does not apply to consumers after they have entered each of the three credit reporting sites from the portal. For that, each credit bureau has its own policy.

As soon as consumers enter the TransUnion, Experian, or Equifax subsection of the annualcreditreport.com site, then they are subject to the relevant credit bureau’s privacy policy.

Experian and Equifax did not display unique policies tailored to annualcreditreport.com. TransUnion, however, did. TransUnion apparently has a standard privacy policy on its main site, and a separate (and different) privacy policy for annualcreditreport.com.

Things to Be Aware of in the TransUnion AnnualCreditReport.com Privacy Policy

As discussed previously, consumers are asked for email addresses at the TransUnion section of the annualcreditreport.com site. Consumers are also automatically selected to receive marketing and affiliate offers.

To reiterate the previous discussion of TransUnion’s privacy policy, it is important to again note its privacy policy clearly states:

“We may use information you provide to update our consumer credit database.”

And it also states:

“Under the FCRA, we may provide information to companies that provide you with pre-approved offers of credit or insurance.

Archive of relevant AnnualCreditReport.com privacy policies:

TransUnion annualcreditreport.com site privacy policy: PDF TransUnion standard privacy policy: PDF

Experian annualcreditreport.com site privacy policy: PDF Experian standard privacy policy: same as above.

Equifax annualcreditreport.com privacy policy: PDF Equifax standard privacy policy: same as above.

Resources

Toll Free number for accessing federally mandated free credit report: 877-322-8228
For mailing, complete the Annual Credit Report Request Form and mail it to:

Annual Credit Report Request Service P.O. Box 105281
Atlanta, GA 30348-5281

The Annual Credit Report Request Form is available online at: <http://www.ftc.gov/bcp/conline/edcams/credit/ycr_free_reports.htm>

Federal Trade Commission page on Free Annual Credit Reports:

<http://www.ftc.gov/bcp/conline/pubs/credit/freereports.htm>

Credits

Dave Del Torto of Cryptorights.org was instrumental in the early stages of this research.

Daniel Brandt of Namebase.org provided information on the details of online ad campaigns and how the click flows work with affiliate marketing programs.

Gary Mittman of Nami Media provided information about the “pay per click” business model and world.

Daryl Swensson, Technology Research Fellow at the World Privacy Forum, assisted in the proofing of the early report drafts.

L.K. Davidson provided editorial proofing.

John Boak, Webmaster of World Privacy Forum, created the design for the report.

Jordana Beebe of Privacy Rights Clearinghouse and Daniel Brandt of Namebase.org provided particularly important feedback during the peer review process.

Tips provided by the Attorney General of Michigan’s February 2005 consumer alert were indispensable in thinking through the consumer information in the report.

Appendix A: Source Code of the Redirects at misleading domains

This appendix contains selected source code that resides within the framed templates of some of the misspelled domains and discusses how it operates .

Keywords and Process for Imposter Sites: Example #1

DomainSponsor pages are redirecting traffic with the key words “free credit report online.” Note the keywords bolded in red below from the source code of the page annualcresitreport.com. The relevance of the keywords is that their appearance in this code signals that someone paid for these keywords to lead to a specific domain. These keywords below were directed to Information.com, then to Google.com, then finally went to ConsumerInfo.com.

The deduction is that ConsumerInfo.com, an Experian company, or some other company, paid to send consumers who type in these keywords to their ConsumerInfo.com site, a for -pay credit report site.

For information directly from DomainSponsor about how its pay per click model works, check its FAQ at <http://www.domainsponsor.com/faq.html>.

</script>

Ideally, the free credit report online keywords should lead consumers to the federally mandated free credit report site, annualcreditreport.com.

Example #2: Ad campaign for Free Credit Report

In another example, the imposter site annualcreditroport.com is sending people forward tagged with the keywords or search terms free credit report. Looking within the frame, the source code reads:

</script>

Again, the terms free credit report should ideally lead consumers to the annualcreditreport.com site if these keywords have been purchased by a credit bureau.

Example #3: Deceptive coding of domain referrer

In a third example, if a consumer types in the domain < annuolcreditreport.com >

He or she will be redirected to this Web address:

http://apps5.oingo.com/apps/domainpark/domainpark.cgi?cid=SPOR8573&s=www.annualcreditrecord.com.

This URL change from the domain annuolcreditreport.com to a domain with the word “domainpark” in it is a sure sign that the consumer has landed on a parked domain or a “pay per click” scheme. This site did not hide its source code in a frame, and evidently found a way to give its domain more credibility, as it has a direct advertising relationship with Google.

This is important because it appears that Experian or another company has taken out a Google online ad campaign to bring consumers to an apparent Experian commercial site called “Free Credit Report in Seconds.com” via Qspace, a domain hosted on Experian name servers.

The code below states that the domain consumers are coming from is annualcreditrecord.com. This is actually not the domain consumers typed in, so this is problematic and deceptive. The site should state the actual URL in the code, which is annuolcreditreport.com. This would alert Google, Experian , and other companies that consumers are being misled.

Source code of annuolcreditreport.com:

Note the statements in red. The Googlesyndication code indicates this is a Google ad campaign. The domain name = annualcreditrecord.com in red indicates (falsely) to Google and other domains the site name, and adurl= Free-Credit-Report-in-Seconds.Com indicates the target, or final destination. Presumably, an individual associated with the final destination paid for the advertisement campaign, though this is not always the case.

href=”http://pagead2.googlesyndication.com/pagead/iclk?sa=l&ai=Blz9SmagbQpC AFsiesQGb5MxVh8r8CNPq- qEBwI23AeD6IBACGAIgjqmGAigKSME5mAHb24ICqgEjdGVzdF8wNjgrdGVzdF8w MzErdGVzdF8wNDArdGVzdF8wMDSyARZhbm51YWxjcmVkaXRyZWNvcmQuY29t yAEB2gEpaHR0cDovL2FubnVhbGNyZWRpdHJlY29yZC5jb20vLTYyNjAwODg3NW Q&num=2&adurl=http://Free-Credit-Report-in- Seconds.Com/index.php%3Fsrc%3D904&client=ca-dp- sportacle&domain_name=annualcreditrecord.com” target=”_top”>Free Credit Report Online</a><br><span>See Your Credit Report Credit Score or 3 Bureau Report Now!<br></span><a href=”http://pagead2.googlesyndication.com/pagead/iclk?sa=l&ai=Blz9SmagbQpC AFsiesQGb5MxVh8r8CNPq- qEBwI23AeD6IBACGAIgjqmGAigKSME5mAHb24ICqgEjdGVzdF8wNjgrdGVzdF8w MzErdGVzdF8wNDArdGVzdF8wMDSyARZhbm51YWxjcmVkaXRyZWNvcmQuY29t yAEB2gEpaHR0cDovL2FubnVhbGNyZWRpdHJlY29yZC5jb20vLTYyNjAwODg3NW Q&num=2&adurl=http://Free-Credit-Report-in- Seconds.Com/index.php%3Fsrc%3D904&client=ca-dp-sportacle&domain_name=annualcreditrecord.com” target=”_top”>Free-Credit-Report-in-Seconds.Com</a> </td></tr>

Appendix B: Additional information on the misspelled domains

This appendix lists abbreviated information on the misspelled domains and includes the nameservers, dates, and registrars of the misspelled domains. Several domains are self- explanatory, but a note should be added as to why some misspelled domain names are attached to the credit bureau Experian.

Experian Name Servers

Ennualcreditreport.com and 27 other misspelled domain names were registered by proxy, or anonymously. It is unknown who actually owns these domains. However, the name servers for these domains are “ns.consumerinfo.com.” ConsumerInfo.com is an Experian company, thus tying this domain to Experian. The name server information for ConsumerInfo.com is included in this appendix to show that the domain servers are the same for both domains. Qspace.com is also hosted on ConsumerInfo.com name servers, tying it to Experian as well.

Other Name Servers

The nameservers Fabulous.com, Proredirect.com, DomainHop.com, and Rentalqueue.com belong to Internet companies that park and redirect domains for the purposes of getting “ad clicks.”

Here are the other name servers that occur in this appendix, and the companies the name servers appear to belong to:

Domain Sponsor name servers:
Name Server: NS1.PROREDIRECT.COM

Enom name servers:
Name Server: DNS1.NAME-SERVICES

GoDaddy name servers:
Name Server: PARK17.SECURESERVER.NET

Budget Names name servers:
Name Server: NS1.RENTALQUEUE.COM

Domain Hop name servers:
Name Server: NS1.DOMAINHOP.COM

Abbreviated Domain Information

Note: information about ownership of the domains is not included in this appendix. To find domain ownership information, check the WHOIS directory. < http://www.internic.net/whois.html .>

Domain Name: ANNALCREDITREPORT.COM
Registrar: WILD WEST DOMAINS, INC.
Whois Server: whois.wildwestdomains.com
Referral URL: http://www.wildwestdomains.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 04-feb-2005
Creation Date: 29-nov-2004
Expiration Date: 29-nov-2005

Domain Name: ANNALCREDITREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANNUELCREDITREPORTS.COM
Registrar: STARGATE HOLDINGS CORP.
Whois Server: whois.stargateinc.com
Referral URL: http://www.stargateinc.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: ACTIVE
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALCEDITREPORT.COM
Registrar: WILD WEST DOMAINS, INC.
Whois Server: whois.wildwestdomains.com
Referral URL: http://www.wildwestdomains.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 04-feb-2005
Creation Date: 29-nov-2004
Expiration Date: 29-nov-2005

Domain Name: ANNUALCEDITREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANNUALCREDITREPPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANNUALCREDITREPPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUACREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANUALCREDITREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 29-nov-2004
Expiration Date: 29-nov-2005

Domain Name: ANNUALCREDITREPRTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: NNUALCREDITREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: NNUALCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 29-nov-2004
Expiration Date: 29-nov-2005

Domain Name: ANNUALCRDITREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANNUALCREDTREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALCREDITRPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALCREDITREPORRTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALLCREDITREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: AANUALCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 02-dec-2004
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANUALLCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: AMNUALCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNYUALCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNYULCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 02-dec-2004
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNULECREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANULECREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANUALECREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALECREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALLECREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANUALLECREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUSLCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 09-dec-2004
Creation Date: 09-dec-2004
Expiration Date: 09-dec-2005

******S****
Domain Name: SNNUALCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: PARK17.SECURESERVER.NET
Name Server: PARK18.SECURESERVER.NET
Status: REGISTRAR-LOCK
Updated Date: 05-feb-2005
Creation Date: 26-nov-2004
Expiration Date: 26-nov-2005

*****Domain Name: ANMUALCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.123COMMERCE.COM
Name Server: NS2.123COMMERCE.COM
Status: REGISTRAR-LOCK
Updated Date: 02-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

*****Domain Name: ANNUOLCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.123COMMERCE.COM
Name Server: NS2.123COMMERCE.COM
Status: REGISTRAR-LOCK
Updated Date: 02-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALCREDOTREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALCREDUTREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALCREDIRREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 10-dec-2004
Creation Date: 10-dec-2004
Expiration Date: 10-dec-2005

Domain Name: ANNIALCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANIALCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 02-dec-2004
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALXREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUALCTEDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUALCRWDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUALCREFITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUALCREDITEEPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 07-dec-2004
Creation Date: 07-dec-2004
Expiration Date: 07-dec-2005

Domain Name: ANNUALCREDITREOORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 09-dec-2004
Creation Date: 09-dec-2004
Expiration Date: 09-dec-2005

Domain Name: ANNUALCREDITRWPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUALCREDITROPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALCREDITREPIRT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUALCREDITREPPRT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUALCREDITREPOET.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUALCREDITREPOTT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: ACTIVE
Updated Date: 13-dec-2004
Creation Date: 13-dec-2004
Expiration Date: 13-dec-2005

Domain Name: ANNUULCREDITREPORT.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: REGISTRAR-LOCK
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALCRESITREPORT.COM
Registrar: STARGATE HOLDINGS CORP.
Whois Server: whois.stargateinc.com
Referral URL: http://www.stargateinc.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: ACTIVE
Updated Date: 01-dec-2004
Creation Date: 01-dec-2004
Expiration Date: 01-dec-2005

Domain Name: ANNUALCREDITREPOORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANNUALCREDITREPOORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALCCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANNUALCRREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANNUALCRREDITREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALCREDDITREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALCREDDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 13-dec-2004
Creation Date: 30-nov-2004
Expiration Date: 30-nov-2005

Domain Name: ANNUALCREDITTREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALCREDITREEPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

Domain Name: ANNUALCREDITRREPORTS.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PROREDIRECT.COM
Name Server: NS2.PROREDIRECT.COM
Status: REGISTRAR-LOCK
Updated Date: 19-feb-2005
Creation Date: 02-dec-2004
Expiration Date: 02-dec-2005

**rentalqueue.com
Domain Name: ANNUAKCREDITREPORT.COM
Registrar: COMPANA, LLC
Whois Server: whois.budgetnames.com
Referral URL: http://www.budgetnames.com
Name Server: NS1.RENTALQUEUE.COM
Name Server: NS2.RENTALQUEUE.COM
Status: ACTIVE
Updated Date: 10-dec-2004
Creation Date: 10-dec-2004
Expiration Date: 10-dec-2005

**domainhop***
Domain Name: ANNUILCREDITREPORT.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DOMAINHOP.COM

Name Server: NS2.DOMAINHOP.COM
Status: REGISTRAR-LOCK
Updated Date: 18-feb-2005
Creation Date: 25-nov-2004
Expiration Date: 25-nov-2005

Experian Domains:

Domain Name: ANNUALCREDITREPOT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITRAPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNULCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDTREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCRDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITREPORRT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALLCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANUELCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUELCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ENNUALCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: AMMUALCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANYUALCREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCRADITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status:REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDATREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITTEPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITRIPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITREPART.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALKREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITTREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITREEPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITREPORTT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALVREDITREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

Domain Name: ANNUALCREDITRREPORT.COM
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS03.CONSUMERINFO.COM
Name Server: NS04.CONSUMERINFO.COM
Status: REGISTRAR-LOCK
Updated Date: 10-nov-2004
Creation Date: 27-jul-2004
Expiration Date: 27-jul-2005

DomainSponsor and Information.com Information:

Domain Name: DOMAINSPONSOR.COM
Registrar: DOTSTER, INC.
Whois Server: whois.dotster.com
Referral URL: http://www.dotster.com
Name Server: NS1.OVERSEE.NET
Name Server: NS2.OVERSEE.NET
Status: ACTIVE
Updated Date: 01-aug-2004
Creation Date: 31-jul-2001
Expiration Date: 31-jul-2005

Domain Name: INFORMATION.COM
Registrar: DOTSTER, INC.
Whois Server: whois.dotster.com
Referral URL: http://www.dotster.com
Name Server: NS1.OVERSEE.NET
Name Server: NS2.OVERSEE.NET
Status: ACTIVE
Updated Date: 02-apr-2004
Creation Date: 02-jun-1994
Expiration Date: 01-jun-2009

Abbreviated Lookup information for Qspace:

; <<>> DiG 8.3 <<>> @(null) qspace.com any
; Bad server: (null) — using default server and timer opts ; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER< ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;; qspace.com, type = ANY, class = IN
;; ANSWER SECTION:
qspace.com. 2D IN NS ns04.consumerinfo.com. qspace.com. 2D IN NS ns03.consumerinfo.com.

_______________________________

Endnotes:

[1] Residents in Alaska, Arizona, California, Colorado, Hawaii, Idaho, Montana, Nevada, New Mexico, Oregon, Utah, Washington, and Wyoming can order a free report beginning December 1, 2004. Residents in Illinois, Indiana, Iowa, Kansas, Michigan, Minnesota, Missouri, Nebraska, North Dakota, Ohio, South Dakota, and Wisconsin can order a report beginning March 1, 2005. Residents in Alabama, Arkansas, Florida, Georgia, Kentucky, Louisiana, Mississippi, Oklahoma, South Carolina, Tennessee, and Texas can order a free report starting June 1, and residents in Connecticut, Delaware, Maine, Maryland, Massachusetts, New Hampshire, New Jersey, New York, North Carolina, Pennsylvania, Rhode Island, Vermont, Virginia, and West Virginia, the District of Columbia, Puerto Rico, and all U.S. territories can order their free reports beginning September 1, 2005. Source: < http://www.ftc.gov/bcp/conline/pubs/credit/freereports.htm>.

[2] For more information about why free credit reports have been mandated by the Federal government, see the discussion at the FTC pages. < http://www.ftc.gov/bcp/conline/pubs/credit/freereports.htm>.

[3] Michigan Attorney General Mike Cox has suggested in a February 2005 consumer alert several tips for consumers who phone in for their reports. First, request that only the last four digits of the SSN are shown on the mailed report, and send the report to a secured mail box. For the complete consumer alert, please see <http://www.michigan.gov/printerFriendly/0,1687,7-164-34391-111010– ,00.html>.

[4] Federally mandated credit reports may also be ordered by mail. See the Resources section of this report for directions on how to do this.

[5] See Figure 2 in this report. Also see EPIC’s letter to the FTC asking the agency to unblock Web links. “Free Annual Credit Report Site is Blocking Web Links,” December 7, 2004. < http://www.epic.org/privacy/fcra/freereportltr.html>

[6] Affiliate marketing programs are a common feature of the Internet at this point. The issue with affiliate marketing programs is that because they typically pay a commission to sites that bring in visitors through active links, some domain owners have abused the programs by creating thousands of phony or “typo” sites to bring in visitors for certain keywords. Some affiliate marketing programs are well-policed for abuses, others less so. For additional information about this subject, see Wired, “Shady Web of Affiliate Marketing,” Feb. 10, 2005, Ryan Singel. See< http://www.wired.com/news/privacy/0,1848,66556,00.html >.

[7] Online ad campaigns based on keywords and search engines can be dynamic and complex. For more on this, see Google AdSense and Overture as two examples of how these kinds of campaigns generally operate. Sites: < http://www.google.com/ads/> and < http://www.content.overture.com/d/USm/ays/ps.jhtml>.

[8] TransUnion’s TrueLink affiliate program is at:< http://www.truelink.com/affiliate/faq.html#1>; Equifax’s Link Partner Program is at < http://www.equifax.com/link_partners/ > ; Experian’s CreditExpert affiliate program is available at: <https://www.creditexpert.com/CE_site/Message.aspx?PageTypeID=Affiliate Program_CE>.

[9] For date, nameserver, and registration details on each of the registered domans, see Appendix B.

[10] This figure was determined by conducting DiG lookups and checking WHOIS registry information for the domains and then comparing the domain nameserver information with nameservers used to host other known Experian domains.

[11] Last check of the live domain names was conducted on February 21, 2005.

[12] For general information about how affiliate sharing can work, Wired Magazine has a good article on this subject. Wired, “Shady Web of Affiliate Marketing,” Feb. 10, 2005, Ryan Singel. See< http://www.wired.com/news/privacy/0,1848,66556,00.html >.

[13] <http://www.domainsponsor.com>

[14] A confirmation of this is the DiG lookup of proredirect.com: proredirect.com name servers are ns2.oversee.net and ns1.oversee.net. Oversee.net is the parent company for DomainSponsor.

[15] DomainSponsor, in its FAQ page, discusses the benefits of using pop-ups at sites parked at its service. See < http://www.domainsponsor.com/faq.html>.

[16] Information.com may make additional revenue from the incoming data, beyond affiliate marketing. This is hinted at in the Information.com privacy policy, which states: “Individual customers who reside in California and have provided their personal information to us may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes.” See: <http://www.information.com/help/privacy.html> Last visited February 24, 2005.

[17] The Electronic Privacy Information Center complained to the FTC about this practice December 7, 2004. To date, the credit bureaus are still blocking active Web links to the official annualcreditreport.com site.

[18] Source: < www.annualcreditreport.com >. Last accessed February 24, 2005.

[19] Text confirmed in December 2004.

Posted February 24, 2005 in AnnualCreditReport.com, E-mail, Web, and Social, Online Privacy, Report: Call Don't Click I - Why it's smarter to order federally mandated free credit reports via telephone, Reports, Scams

Global Visualization of Countries with Data Privacy Laws, Treaties, or Conventions

Background and Methodology: The conceptualization and initial research for this...
New Report: Risky Analysis: Assessing and Improving AI Governance Tools

We are pleased to announce the publication of a new WPF report, “Risky Analysis: Assessing and Improving AI Governance Tools.” This report sets out a definition of AI governance tools, documents why and how these tools are critically important for trustworthy AI, and where these tools are around the world. The report also documents problems in some AI governance tools themselves, and suggests pathways to improve AI governance tools and create an evaluative environment to measure their effectiveness. AI systems should not be deployed without simultaneously evaluating the potential adverse impacts of such systems and mitigating their risks, and most of the world agrees about the need to take precautions against the threats posed. The specific tools and techniques that exist to evaluate and measure AI systems for their inclusiveness, fairness, explainability, privacy, safety and other trustworthiness issues — called in the report collectively AI governance tools – can improve such issues. While some AI governance tools provide reassurance to the public and to regulators, the tools too often lack meaningful oversight and quality assessments. Incomplete or ineffective AI governance tools can create a false sense of confidence, cause unintended problems, and generally undermine the promise of AI systems. The report contains rich background details, use cases, potential solutions to the problems discussed in the report, and a global index of AI Governance Tools.
National IDs Around the World — Interactive map

About this Data Visualization: This interactive map displays the presence...

WPF Report: Call Don’t Click I – Why It’s Smarter to Order Federally Mandated Free Credit Reports via Telephone, not the Internet

Report Links:

Read the Report Front Matter, Summary, Index, and the rest of the report below

Background of Report

About the World Privacy Forum

Summary

Index

SUMMARY

Findings on Fraudulent, deceptive, or misspelled domains

Blacklisting for those who link to AnnualCreditReport.com

TransUnion Marketing to Consumers and Email Collection

Potentially Confusing Menu Bars at the AnnualCreditReport.com Site

Privacy Policies at AnnualCreditReport.com

Credits

Keywords and Process for Imposter Sites: Example #1 21 Example #2: Ad campaign for Free Credit Report Example #3: Deceptive coding of domain referrer

Experian Name Servers

Other Name Servers

Abbreviated Domain Information

Summary of findings regarding misspelled domains:

Summary of Findings from analysis of the actual AnnualCreditReport.com site:

Recommendations

Discussion of Findings

Findings on Fraudulent, deceptive, or misspelled domains

Misspelled Domains Owned by Other Companies

Other Problematic Domains to be aware of:

How the Owners of the Misspelled Domains are Making Money on Consumer Confusion

Specific Pay Per Click Companies Involved in AnnualCreditReport.com misspellings

Findings on Official Site AnnualCreditReport.com

Blacklisting for those who link to AnnualCreditReport.com

TransUnion Marketing to Consumers and Email Collection

TransUnion “Auto-Opt In”

TransUnion Email Address Requests

Potentially Confusing Menu Bars at the AnnualCreditReport.com Site

Privacy Policies at AnnualCreditReport.com

Things to Be Aware of in the TransUnion AnnualCreditReport.com Privacy Policy

Archive of relevant AnnualCreditReport.com privacy policies:

Resources

Credits

Appendix A: Source Code of the Redirects at misleading domains

Keywords and Process for Imposter Sites: Example #1

Example #2: Ad campaign for Free Credit Report

Example #3: Deceptive coding of domain referrer

Appendix B: Additional information on the misspelled domains

Experian Name Servers

Other Name Servers

Abbreviated Domain Information

DomainSponsor and Information.com Information:

Abbreviated Lookup information for Qspace:

Keywords and Process for Imposter Sites: Example #1 21 Example #2: Ad campaign for Free Credit Report
Example #3: Deceptive coding of domain referrer