What happens when you don't validate/scrub data on input from whois