Case study: recover a typosquatted .app domain

Case study: recover a typosquatted .app domain. UDRP and ccTLD domain recovery and defense across .app. Email the firm to assess your case. Transparent fees, r…

A software company's brand name was one transposed letter away from a .app domain it did not own. The registrant – an entity with no apparent connection to the software sector – had pointed the domain at a pay-per-click landing page. Visitors who mistyped the brand's address arrived at a page monetizing their confusion. The company wanted the domain transferred. Fast.

To recover a typosquatted .app domain, a brand owner must satisfy all three elements of Paragraph 4(a) of the UDRP: confusing similarity to a mark the complainant holds, no legitimate interest in the registrant, and registration and use in bad faith. The .app zone operates under ICANN-accredited registrars, so the UDRP applies in full. A standard WIPO case takes approximately two months, with the registrant given 20 days to respond once the case commences.

This case study walks the situation, the strategy we used, and the outcome – and what it tells a brand owner facing a similar pattern in 2026.

The Situation: a typosquat engineered for click revenue

The domain differed from our client's registered mark by a single character – a classic transposition typosquat. The registrant had held it for just over a year. During that time the domain resolved consistently to a pay-per-click page carrying advertising links in categories that overlapped with the client's product area. There was no content, no business name, and no contact information suggesting any independent purpose. The client had not licensed the name to anyone.

Several factors complicated the picture. The client's trademark registration post-dated the domain registration by several weeks. That gap – even a narrow one – carries real weight under the UDRP, because element three requires bad faith at the time of registration, not only in subsequent use. The client also operated primarily in one national market, raising a question about whether the registrant could plausibly have had a different, legitimate target in mind.

We assessed the matter and advised that the three elements were nonetheless well-supported. The mark had been in commercial use, and documented in public filings, well before the domain was registered. The trademark application date preceded the domain. Registration post-dating the application but predating grant is a pattern panels have regularly treated as sufficient to satisfy the rights element where the mark was already in active use.

The Strategy: building the bad-faith record

Typosquat cases live or die on the bad-faith element. Confusing similarity is nearly automatic where a domain differs from a mark by one character – panels have consistently held that such variations are confusingly similar, particularly where the mark itself is distinctive. The harder work is the bad-faith record.

We assembled four categories of evidence. First, we documented the pay-per-click landing page through dated screenshots capturing specific advertising categories. Second, we pulled the domain's resolution history to show the monetization had been consistent from early in the registration term – not a recent development. Third, we produced the client's trademark application date, the application filing confirmation, and commercial-use evidence (press coverage, app-store listings, and customer-facing materials) predating the domain registration. Fourth, we produced a simple analysis of the transposition pattern itself: the character swap targeted precisely the most common typographical error a user makes on a mobile keyboard when entering the brand.

The absence of a response from the registrant – a default – simplified the procedural posture but did not change our evidentiary approach. Panels do not treat default as automatic proof of bad faith. The record had to stand on its own.

For a read on whether the three UDRP elements are met for your .app domain, reach us at info@cognomenlaw.com.

The Outcome: transfer ordered within the standard window

The panel ordered transfer. In a matter filed in winter 2025 involving a .app typosquat for a software brand, the decision issued roughly eight weeks after filing – within the standard two-month window for a single-member WIPO panel. The registrant did not respond. The WIPO filing fee for the single-domain complaint was USD 1,500 for the single-member panel.

The panel's reasoning followed the consensus line: one-character transpositions of a distinctive mark are confusingly similar; a pay-per-click page in a related category satisfies the commercial-gain bad-faith factor under Paragraph 4(b); and the absence of any plausible legitimate purpose, combined with the timing of registration relative to the mark's commercial debut, supported bad-faith registration. The domain was transferred to the client within days of the decision issuing.

What the case illustrates is the discipline the UDRP demands even when the bad faith is obvious. The evidence of use predating the domain registration was the load-bearing piece. Without it, the narrow trademark-registration gap would have created a genuine vulnerability – one we would have flagged as a reason to strengthen the record before filing rather than proceed immediately.

Related at COGNOMEN

• UDRP Recovery Service – how we assess, file, and pursue .com and gTLD complaints
• Alert: recovering domains in passive-holding configurations across jurisdictions
• Guide: domain assignment agreements and cross-border transfer mechanics