Recover a .store domain from a serial cybersquatter: what panels actu…

Recover a .store domain from a serial cybersquatter: what panels actu. UDRP and ccTLD domain recovery and defense across .store. Email the firm to assess your…

A brand owner searches for its own name in a .store zone and finds the domain registered by a stranger. The registrant is not a retailer. It has filed no trademark, built no store, and offers no product. It has, however, registered dozens of other brand-name .store and .com domains in the same pattern – and it is waiting for an offer. That pattern is not coincidence. It is the signature of a serial cybersquatter, and it materially changes what a panel will do.

To recover a .store domain from a serial cybersquatter, a complainant must satisfy all three elements of Paragraph 4(a) of the UDRP: confusing similarity to a mark, absence of the registrant's rights or legitimate interests, and registration and use in bad faith. A standard case before WIPO runs approximately two months from filing, with the filing fee starting at USD 1,500 for a single-member panel on up to five domains. The only remedies are transfer or cancellation.

This analysis sets out the doctrine, the evidence pattern that decides serial-cybersquatter cases under the UDRP at .store, and the points where panels disagree – so that a brand owner or counsel can judge the realistic range of outcomes before filing.

Why .store is a UDRP zone and what that means for complainants

The .store new generic top-level domain (gTLD) is fully subject to the UDRP. Every ICANN-accredited registrar offering .store registrations operates under the standard UDRP agreement. That means the same three-element test, the same forum options – WIPO, the Forum, the Czech Arbitration Court (CAC), ADNDRC – and the same 20-day response window for the registrant apply here as they do in .com.

The choice of .store over .com is, in practice, a frequent cybersquatter tactic. New gTLDs are initially less monitored. Trademark Alert Watch services and brand-protection teams are calibrated primarily to .com. A registrant who builds a portfolio of abusive .store, .shop, or .online registrations can operate below a brand owner's radar for months, even years, before a complaint is filed.

What does not change is the governing standard. Panels apply precisely the Paragraph 4(a) test regardless of the TLD extension. The zone matters for strategy – it does not create a separate or lighter legal threshold. Complainants who have won .com recoveries using the same mark will find the analysis transports directly to a .store complaint.

WIPO and the Forum together handle roughly 97% of all UDRP proceedings. For new-gTLD disputes involving a registrant based in Europe or with no regional affiliation, WIPO is the most commonly selected forum. The CAC offers the lowest entry filing fee but has the lowest volume and the fewest published decisions on new-gTLD serial-squatter patterns – a consideration when the complainant wants predictable case law to rely on.

For an assessment of whether your .store domain dispute meets the UDRP threshold, contact info@cognomenlaw.com.

How do panels apply the three UDRP elements to a serial cybersquatter?

The first element – confusing similarity – is rarely contested in serial-cybersquatter cases. Panels treat it as an essentially technical comparison: if the disputed domain contains a registered mark in recognizable form, with only the TLD and perhaps a generic descriptor added, the element is met. A .store suffix adds no distinctiveness. Panels consistently hold that a TLD extension does not avoid confusing similarity; ".store" is generic and descriptive, so its addition to a mark does nothing to differentiate the domain from the mark itself.

The second element – absence of rights or legitimate interests – is where the serial-cybersquatter pattern begins to carry real weight. The complainant shifts the burden by making a prima facie case: the registrant was not authorized, is not commonly known by the mark, and is not making noncommercial or fair use. Once that case is made, the registrant must produce evidence rebutting it under the Paragraph 4(c) safe harbors. A registrant who holds dozens of brand-name domains across multiple zones produces nothing credible. Panels have consistently held that the sheer volume of abusive registrations, and the absence of any bona fide business tied to any of them, destroys any plausible safe-harbor claim.

The third element – registration and use in bad faith – is both the richest and the most litigated in serial-squatter matters. It has two limbs and both must be satisfied. Registration in bad faith asks whether, at the moment of registration, the registrant targeted the complainant's mark. A registrant with a documented pattern of registering brand names across dozens of domains almost never plausibly argues it did not know of the mark at the time. Use in bad faith covers a wide range of conduct under Paragraph 4(b): pointing the domain at a pay-per-click page exploiting the mark's recognition, parking it passively, or offering it for sale to the complainant at a price exceeding out-of-pocket costs – all qualify. The pattern of registrations itself is a Paragraph 4(b) factor, explicitly recognizing that a history of abusive registrations supports a bad-faith finding on the domain before the panel.

What evidence actually wins a .store serial-cybersquatter case?

Evidence decides the outcome. A complaint that pleads the right doctrinal framework but lacks supporting exhibits will fail or be dismissed on second element. The following categories of evidence carry the most weight in serial-cybersquatter disputes specifically.

Portfolio evidence. Panels examining a serial cybersquatter look at the registrant's full portfolio of domain registrations. A WHOIS or RDDS query revealing that the same registrant controls 20, 40, or over 100 domains that each replicate a third-party mark in a different TLD is the strongest contextual evidence available. Courts and panels use the term "pattern" precisely because a single registration might be coincidental; a pattern cannot be. Assembling portfolio evidence requires querying by registrant name, registrant organization, email address, nameserver configuration, and, where WHOIS privacy is deployed, by reverse-engineering the technical fingerprints of the registration record.

Prior UDRP or URS decisions against the same registrant. A prior panel decision finding bad faith, particularly one invoking the Paragraph 4(b)(ii) pattern factor, is directly admissible evidence in a later proceeding. Panels cite prior adverse rulings against the same registrant as strongly corroborating the current complainant's case. In our practice, assembling a record of prior adverse decisions – even where the prior complainant was a different brand in a different industry – has been decisive in eliminating any residual uncertainty on the third element.

Pay-per-click monetization and offer-to-sell evidence. Screenshots of the domain resolving to a pay-per-click landing page, particularly one displaying competitor links or the complainant's own products, satisfy the "use" limb of bad faith directly under Paragraph 4(b)(iv). Equally, any documented communication in which the registrant offered the domain for sale at above-cost pricing – an email, a landing-page "inquire" button, a marketplace listing – satisfies Paragraph 4(b)(i).

Trademark priority evidence. Panels require evidence that the complainant held rights in the mark before the domain was registered. Registration certificates, dates of first use in commerce, and country-of-registration details are fundamental. In cases where the brand owner held only an unregistered mark, the complainant must demonstrate sufficient secondary meaning predating the domain registration. In our experience, this is the element most often underdeveloped in self-drafted complaints.

Passive holding evidence. Where the domain resolves to nothing – no content, no PPC, no active site – panels have recognized passive holding as use in bad faith where, taken in context with the strength of the mark and the implausibility of legitimate use, there is no conceivable good-faith reason for registration. This doctrine is well-settled; it does not, however, eliminate the need to document the passive nature of the registration with dated screenshots and a DNS lookup showing no content.

In a recent matter involving a .store typosquat (autumn 2025), we assembled a portfolio record showing the respondent held more than forty brand-name domains across .com, .net, and multiple new-gTLD zones, with two prior adverse UDRP decisions. The complainant's mark predated all registrations by several years. The panel transferred the domain without a supplemental filing.

Where do panels disagree – and what is the minority view?

The consensus position is clear: a documented serial cybersquatter holding a brand-name .store domain that it neither uses legitimately nor connects to any bona fide business will almost always lose. But the consensus masks genuine disagreement on two points that matter at the margins.

First: the threshold for "passive holding." The majority view holds that passive holding in combination with a strong mark and an implausible registration story satisfies the use-in-bad-faith limb. The minority view – found in a small set of decisions, mostly older ones – holds that without active use (a PPC page, a sales offer, or identifiable harm), there is insufficient evidence of use. Most panels in recent years have adopted the majority approach, but a complainant should not assume passive holding alone closes the case. The record must still show why no legitimate use of this domain by this registrant is plausible.

Second: the risk of RDNH against a weak complainant. Reverse Domain Name Hijacking (RDNH) is a finding that the complaint itself was brought in bad faith – not to recover a genuinely abused mark, but to wrest away a domain the complainant simply wants. Panels have found RDNH where a complainant's mark postdates the domain registration by years, where the mark is highly generic, or where the complainant failed to disclose prior failed settlement negotiations. A brand owner confronting a serial cybersquatter should not assume that its commercial interest in the name overrides the evidentiary requirements. If the trademark registration is thin, narrow, or geographically limited, the complainant may face an RDNH finding even against a registrant with an ugly portfolio.

The RDNH risk is the contrary view that most complainants' counsel underweights. We have, in our respondent-side practice, obtained RDNH findings for registrants in cases where the complainant's trademark predated the domain registration by less than ninety days and the mark covered a descriptor term in the same TLD zone – a situation where the registrant had at least a colorable legitimate interest in a descriptive domain. The lesson for complainants: the quality of the trademark evidence matters as much as the size of the registrant's portfolio.

If a prior UDRP filing produced an adverse outcome or you received a complaint against a domain you legitimately hold, a focused review can identify what element was missed. Email info@cognomenlaw.com to discuss.

How does the .store dispute route compare to a court action or URS?

The right route depends on the zone, the goal, and the evidence available. Three realistic scenarios illustrate the choice.

If the domain is a .store gTLD and the goal is transfer to the brand owner, the UDRP is the standard and fastest path. Filing at WIPO with a single-member panel costs USD 1,500 in forum fees and produces a decision in approximately two months under the standard procedure, or roughly one month under WIPO's expedited option for single-panel cases of up to five domains. Transfer follows within ten days of a decision absent a court challenge by the registrant. Legal fees for a straightforward .store recovery, separate from forum fees, run in a market range of approximately USD 3,000–7,000, varying by complexity and evidence volume.

If speed matters more than transfer – for instance, a product launch is imminent and the domain is actively being used to divert customers – the Uniform Rapid Suspension (URS) applies to new gTLDs including .store. The URS delivers suspension, not transfer, at a lower filing cost and faster timeline. The evidentiary standard is "clear and convincing" – higher than the UDRP balance-of-probabilities standard – so it suits only the strongest of cases. Where the registrant's bad faith is clear and the brand owner can live with suspension for the registration term, URS is a legitimate option to run in parallel with or instead of a UDRP complaint.

If the complainant also wants monetary damages – compensation for diverted sales, lost profits, or statutory cybersquatting damages – neither the UDRP nor the URS can help. The UDRP's only remedies are transfer or cancellation. Damages require a court action: in the United States, US anticybersquatting litigation; in other jurisdictions, the applicable national law handled with local litigation counsel in the relevant jurisdiction. Court actions are slower and substantially more expensive, but they are the only route when the domain has caused measurable commercial harm and the brand owner wants more than the name back.

A second micro-case illustrates the route choice in practice. In a spring 2025 matter, a European brand owner held a registered EU trademark for a coined word. The respondent, a serial registrant, held the .store domain and pointed it at a pay-per-click page monetizing competitor links. The complainant had no US presence and no interest in US litigation. We filed a UDRP complaint at WIPO, assembled the portfolio record and the prior adverse decisions against the same registrant, and obtained a transfer order in under ten weeks. No court action was required. The domain pointed to a legitimate retail site by the end of the quarter.

What is the process, timeline, and realistic cost to file a UDRP over a .store domain?

The UDRP process for a .store domain runs through five stages: complaint drafting and filing, formal compliance review by the forum, commencement (which starts the registrant's response clock), panel appointment and deliberation, and registrar implementation of the decision.

The registrant receives 20 days from commencement to file a response. Default – no response filed – does not automatically mean the complainant wins. Panels still examine the record independently, and a poorly supported complaint can be denied on default. Serial cybersquatters frequently do not respond; they calculate that the domain's value in the portfolio exceeds the cost of a panel appearance. That calculation does not help them: a default record featuring a strong trademark, a documented portfolio, and passive-holding or PPC evidence will produce a transfer order without a response being needed.

End to end, a standard UDRP case before WIPO concludes in approximately two months from filing. A three-member panel, which either party may request, extends the timeline modestly and increases the forum fee. If the complainant requested a single panelist but the respondent requests a three-member panel, the parties generally split the higher three-member fee – at WIPO, USD 4,000 compared to USD 1,500 for a single-member panel on one to five domains.

Is the UDRP always faster than doing nothing? Yes – and waiting carries its own risk. A domain actively used to redirect customers, to host fraudulent content, or to build a pattern of consumer confusion creates harm that an eventual transfer order does not retrospectively undo. Early filing limits the damage window. It also preserves evidence: cached pages, WHOIS records, and landing-page screenshots are volatile and need to be preserved at the time of filing.

What do complainants most often get wrong in serial-cybersquatter cases?

Three failure patterns appear repeatedly in the .store serial-cybersquatter context.

Relying on portfolio evidence without the nexus. A registrant's broad portfolio is relevant evidence, but a panel will not infer bad faith from the mere size of a portfolio. The complainant must show that the registrant knew of this specific mark at the time of registration. Where the mark is well-known internationally, that inference is easy. Where the mark is a regional brand or a recently registered trademark, the complainant must put direct evidence in the record: the mark's Google search prominence, prior media coverage, or a Trademark Clearinghouse claim-notice record if one exists at the time of registration.

Ignoring the second element in draft. Many self-drafted complaints spend most of their word budget on the third element and give perfunctory treatment to the second. The second element requires a specific showing: authorization was never granted, the registrant is not commonly known by the domain, and no Paragraph 4(c) safe harbor applies. Underdeveloping this element risks a denial even where the bad-faith record is strong, because a panel that finds the evidence equivocal on legitimate interest will not supply the missing analysis itself.

Treating the serial pattern as self-proving. A pattern of abusive registrations is strong circumstantial evidence. It is not conclusive. Panels still require a fact-by-fact analysis of this domain, this mark, and this registrant's conduct. A complainant who submits only the portfolio evidence without the mark-specific trademark certificates, the domain-specific screenshots, and the transaction history for the specific .store domain at issue has not built the record the panel needs to transfer.

We regularly advise brand owners who filed a complaint without counsel and received a denial. In nearly every case, the denial resulted from an underdeveloped record on one of the three elements described above. The evidence existed; it was not presented in admissible, organized form.

What does a respondent facing an abusive complaint need to know about RDNH in .store cases?

Not every .store complaint against a domain investor or registrant is legitimate. Complainants sometimes pursue UDRP proceedings where the trademark is weak, where the domain was registered years before the complainant's mark, or where the registrant has a documented history of bona fide use of the name.

A respondent who holds a .store domain in good faith – as a descriptive or generic domain, as a domain acquired at auction with a clean chain of title, or as part of a portfolio used in a legitimate domaining business – has recourse. Under Paragraph 4(c) of the UDRP, three safe harbors preserve the domain: bona fide use or preparation before notice of the dispute, being commonly known by the domain, or legitimate noncommercial or fair use without intent to mislead.

An RDNH finding requires showing that the complainant knew it could not succeed on the evidence or used the process as a tool to acquire a domain it had no legitimate IP basis to claim. The standard is not merely losing; many legitimate complaints fail on the merits without an RDNH finding. RDNH is reserved for the demonstrably bad-faith complaint – one where the complainant's own trademark postdates the registration, where the complainant was told the domain was not for sale and filed anyway with a thin record, or where a sophisticated party clearly knew the doctrine and its own weakness.

In our respondent-side practice, we build the legitimate-interest record from the registration date forward: acquisition history, any prior use or business plan connected to the domain, and evidence that the mark, if it existed, was either unknown or geographically remote at the time of registration. We then, where warranted, seek an RDNH finding in the same proceeding. The finding carries no monetary penalty but is a public reputational record attached to the complainant.

Related at COGNOMEN

• UDRP Recovery Services – how COGNOMEN files and prosecutes a UDRP complaint through to transfer
• Confusingly similar trademark analysis – what the first UDRP element requires and how panels apply it
• Trademark Clearinghouse claims notice – how TMCH records interact with new-gTLD registrations and UDRP evidence