Enjoy unlimited access to all forum features for FREE! Optional upgrade available for extra perks.

ref@gov.service.hmrc-tax-refund.org.uk

Discussion in 'Domain Name Scams' started by gimpydog, Aug 3, 2016.

  1. gimpydog United Kingdom

    gimpydog Active Member

    Joined:
    Aug 2004
    Posts:
    556
    Likes Received:
    45
    Just got an email from these jokers. Some kind of tax refund / phishing scam, no doubt.

    It's good to see that eNom have blocked the site.

    Nominet, of course, validated the registrant's questionable data without question. :rolleyes:


    Out of interest, what is their "3rd party data source"?

    http://www.nominet.uk/whois/?query=hmrc-tax-refund.org.uk#whois-results
     
  2. Domain Forum

    Acorn Domains Elite Member

    Joined:
    1999
    Messages:
    Many
    Likes Received:
    Lots
    IWA Meetup
     
  3. invincible

    invincible Well-Known Member

    Joined:
    Feb 2005
    Posts:
    4,203
    Likes Received:
    101
    A search using Google came up with this which seems to explain the methodology.

    I believe it simply checks the validity of the address, not whether the registrant exists at the address. Therefore if it's a valid address, it will be validated.

    If the registrant type was a company then that might be validated against companies house, however in the above example cited by you the registrant type isn't a company.
     
  4. pberry4032 United Kingdom

    pberry4032 Active Member

    Joined:
    Jul 2009
    Posts:
    213
    Likes Received:
    10
    If Nominet wanted to, surely they could ban any name being registered with certain words such as HMRC, PayPal, bank names etc. until further information was provided by the registrant?

    That could go a little way to helping reduce phishing.


    Sent from my iPhone using Tapatalk
     
  5. spiderspider

    spiderspider Active Member

    Joined:
    Feb 2013
    Posts:
    660
    Likes Received:
    48
    Your belief is correct.

    I can register domains to our virtual office address, with no issues. I can also register them in my name, at a family members address.

    I can also register them to an address I don't yet live at, and it gets verified. I've recently registered some to a new address (commercial property) that we only completed the sale last week for.

    To be honest, its not worth the pixels its printed on, as the verification takes place after registration, and any issues are only picked up on weeks later, and registrants then have a few weeks longer to amend or supply correct info, before they suspend the domain. This don't help with phishing.
     
  6. gimpydog United Kingdom

    gimpydog Active Member

    Joined:
    Aug 2004
    Posts:
    556
    Likes Received:
    45
    Evidently not.

    But wasn't "data validation" cited by Niominet as one of the reasons for higher costs & thus higher prices?

    If they aren't doing it properly, then we might just as well give it up & have lower prices. :D