Registrar registering .uk without permission

[bluerock]

Refer to 2b on the third page within this document (and also 3c).

Interesting document, cheers.
1st stage: Is applicant the right-holder? If no then "Process ends"
This got to the last stage.

 

[invincible]

If you look at 2b in the document and refer to the part at the end in the box with a dashed rectangle around it, if the domain name is not authenticated within 7 days it is deleted. If it is authenticated, by you clicking the link in the email from Nominet, then it is delegated (into the .uk zone). This means it would be taken out of suspension (when a domain name is suspended it does not exist within the zone file so isn't delegated) and name servers can be added.

 

[invincible]

Interesting document, cheers.
1st stage: Is applicant the right-holder? If no then "Process ends"
This got to the last stage.

That's because whomever applied to register it said they were you, not anyone else.

There's never been anything stopping anyone registering a domain name in someone else's name and paying for it, AFAIK.

 

[invincible]

Thinking about it, since the domain name is legally registered to you or your company there might not be any harm in clicking the link. You'd have gained yourself a domain name gratis! All you need do is tag change it to your own tag for good measure. :-D

(from LG G3)

 

[retired_member36]

Thinking about it, since the domain name is legally registered to you or your company there might not be any harm in clicking the link. You'd have gained yourself a domain name gratis! All you need do is tag change it to your own tag for good measure.

But then has gained extra renewal costs that he wouldnt have had for the next 5 years.

 

[diablo]

I notice that the domain name hamlin.uk has now been suspended by Nominet.

(from iPad - K)

The domain name will be registered as long as the name and address match that of the rights holder, but my experience is that Nominet will email the rights owner asking for confirmation of registration if the .uk Registrar differs from the .co.uk Registrar. Until that authorisation is received, the name is put in a suspended state.

 

[invincible]

But then has gained extra renewal costs that he wouldnt have had for the next 5 years.

Correct. Swings and roundabouts. Maybe by then there'll be some way of getting others to pay renewal bills for us.


(from iPhone)

 

[BurtyB]

My personal view on this is to be vigilant.

Whilst I was sorting out the data for my .uk registration graphs I spotted a few .co.uk domains that had rights to the .uk initially but the rights had been lost. In one case I believe the .uk had been registered but there had been an issue with the authentication and when the .uk application was denied it was free to register. Where I had contact with the tag holder they was notified and the issue resolved with Nominets assistance I believe.

 

[invincible]

My personal view on this is to be vigilant.



Whilst I was sorting out the data for my .uk registration graphs I spotted a few .co.uk domains that had rights to the .uk initially but the rights had been lost. In one case I believe the .uk had been registered but there had been an issue with the authentication and when the .uk application was denied it was free to register. Where I had contact with the tag holder they was notified and the issue resolved with Nominets assistance I believe.

If that's really the case and if we find out that in seven days the domain name, that is the subject of this thread isn't verified so is deleted, becomes available for anyone to register I am sure that Nominet will be receiving complaints. Let's see what happens in one week.


(from iPhone)

 

[Retired_member41]

So I could log on to wdm and register .uks for anyone's co.uk

Anyone doing this should have their nominet membership taken away immediately.

 

[invincible]

So I could log on to wdm and register .uks for anyone's co.uk

Wow. A post where you haven't reminded us that you have "another half" aka "a numpty".

Yes, you could register 2LD .uk domain names in the name of any registrant on your registrar tag if you wished, just like you've always been able to register 3LD's in anyone else's name without verification, if you provided their exact matching details therefore the registration attempt passed along the flow diagram I have previously cited. It would eventually stall at the confirmation email part.

Anyone doing this should have their nominet membership taken away immediately.

Most registrars wouldn't choose to do this directly because they'd have to bear the cost. A third party customer of another registrar has provided the OP's details and therefore the registration attempt has moved further along the process. This is barely any different than me going to registrar as a customer and electing to register a .co.uk domain name in the name of Google or the BBC. As their customer I'd have to pay for it but if I could still do it.

 

[bluerock]

Correct. Swings and roundabouts. Maybe by then there'll be some way of getting others to pay renewal bills for us.


(from iPhone)

That would be nice

 

[bluerock]

Interesting reply from fasthosts:
Dear David,

Further to your recent query.

I tried to call blue rock this morning, as that is the only number I have been able to locate. (nobody called)

An account was opened by them (no it wasnt) yesterday and they ordered the domain hamlin.uk (no we did not)

Are you able to liaise with them in regards to the above matter? (I am them!)

Please note the invoice was processed using a paypal agreement attached to the person from blue rock who opened the account.(wrong)


Kind Regards

xxxxxxx
Fasthosts Customer Care

 

[ian]

When the .uk launched, I tried registering a corporate owned domain through Fasthosts and it allowed me to pay and complete the process, but the whois didn't register and naturally the domain wasn't granted.

However, what appears to have happened here is that someone has signed up for a Fasthosts account in your name, with your email address (or changed it afterwards) and then tried registering, therefore the whois applied your details but remained suspended until you confirmed.

Fasthosts are a nightmare, their system is open to go much fraud and their support is terrible.

Maybe this is stunt by someone to have the .uk cancelled, therefore being FTR and allowing them to register and try to sell to you!

 

[bluerock]

However, what appears to have happened here is that someone has signed up for a Fasthosts account in your name, with your email address (or changed it afterwards) and then tried registering, therefore the whois applied your details but remained suspended until you confirmed.

Maybe this is stunt by someone to have the .uk cancelled, therefore being FTR and allowing them to register and try to sell to you!

Your pretty much spot on. Ive had it confirmed that the domain will be cancelled today and the rights revert back to me.
It should not get to stage 4 of the registration process and this is the point Ive made to Nominet, who have been very good with this.
I think its the first time theyve come across it.

 

[bluerock]

Unbelievable from Fasthosts who quote:
"Im not a domain expert but I thought anyone could now register a .uk domain and the rights period was over."

I politely reminded him that there are still over 4 years to go!!

 

[Sam]

What a joke just goes to show they havent got a clue...

I have seen one like this person with the rights to the .co.uk someone has managed to register the .UK in another name and registrar...

Unbelievable from Fasthosts who quote:
"Im not a domain expert but I thought anyone could now register a .uk domain and the rights period was over."

I politely reminded him that there are still over 4 years to go!!

 

[mojoco]

What a joke just goes to show they havent got a clue...

I have seen one like this person with the rights to the .co.uk someone has managed to register the .UK in another name and registrar...

Is there the potential mass problem that some of our .uk domain names may already have been registered by another party, meaning we all need to do an actual check through our portfolio's ?

 

[spiderspider]

Is there the potential mass problem that some of our .uk domain names may already have been registered by another party, meaning we all need to do an actual check through our portfolio's ?

Not from my understanding, unless you have clicked a link in an email (like BlueRock had).

However, change BlueRock for some gullible Joe Public who is holding a domain he's had since year dot, and knows sod all about domains gets an email that says to confirm you own xxxx.co.uk click here, whats he gonna do? Potential for fraud is massive here.

 

[invincible]

Is there the potential mass problem that some of our .uk domain names may already have been registered by another party, meaning we all need to do an actual check through our portfolio's ?

If it could actually occur, and I've yet to see hard evidence suggesting it could, most AD members with portfolios need not be worried.

Looking at 3c here, and beneath "is the applicant the person the holds the rights?" the following is listed (my embolden):

Based on match of name, address and email
•100% character match
•Not case sensitive
•Address only looks at address 1, postcode and country codes

According to 3c the application will only proceed as far as "domain name is registered" if the applicant for the .uk 2LD submits their application using exactly the same name, address and email address used by the 3LD domain name with the Right. If not, it shouldn't be registered. This is what seemed to occur in the case of hamlin.uk. Even if the process gets as far as "domain name registered", as it did in this case, the registrant of the 3LD will receive an email from Nominet asking them to confirm the registration within seven days. The OP did receive this email. The domain name won't be delegated (remains suspended) until the link is clicked and after seven days should be deleted. I have seen no reason to believe that the .uk 2LD Right would not revert back as before once that occurred.

It's not usual for someone to come along and pay to register a domain name in someone else's name which they wouldn't be able to control. However this is what occurred in the case of hamlin.uk

If "Wizard" or anyone else believes there are other flaws in the system, and are suggesting it is possible to do other things outside of what is in the PDF, please let them provide full details here.