Is www.dataentryresearch.com a fake website?

Honeypot fake website idea?

• I don't really understand the concept of having a fake website to see how hackers work and learn from it. How come all the traffic that comes to this website is suspect? So, lets say that CNN wanted to do this to learn from hackers, would they make a fake CNN.com? how would they do this? and what if i went to cnn.com when it was under a honeypot inspection or whatever, then would i be a suspect? If it was just like another fake url like lets say cnnnn.com then why would a hacker want to hack a random website? How do they make it look like the real cnn.com and what would attract only hackers to it? I really don't get it please explain as much as possible in plain english! thanks!

• Answer:

  A honeypot is an exploitable target that people WANT to be hacked. The idea is that it has easily targeted security holes and they, again, WANT people to get into it. But the hacker doesn't know that. The machine would have something like verbose logging on (logging everything that happens in detail). Once the hacker is in and does damage or whatever the honeypot has all of their information (ip etc), and the organization can prosecute or "learn" from what they did to get into it. Honeypots would be separated from the network on another subnet i assume. edit: the machine in question could be anything from a web server, file server, or just a run of the mill OS.