OK, so I have a legitimate domain. I can add any subdomain I want without recourse.

projects.example.com or new.cool.thing.example.com

So nothing stops me from registering a legitimate domain, using it for a bit, then launching the subdomain `pay-your-tax.gov.uk.official.example.com`

It must be legit - it has the .gov.uk in it!