Step-by-step: recover a typosquatted .com domain

Step-by-step: recover a typosquatted .com domain. UDRP and ccTLD domain recovery and defense across .com. Email the firm to assess your case.

A stranger registers a one-letter transposition of your brand as a .com – swapping two characters, dropping a vowel, doubling a consonant – and points it at a pay-per-click parking page or a counterfeit storefront. Your customers land there by accident. Your reputation takes the damage. The question is not whether to act. It is which step to take first, and where the process hides its traps.

To recover a typosquatted .com domain you must satisfy all three elements of Paragraph 4(a) of the UDRP: the domain is confusingly similar to a mark you own, the registrant has no legitimate rights or interests in it, and the domain was registered and is being used in bad faith. A standard WIPO case runs approximately two months from filing to decision, with a filing fee starting at USD 1,500 for a single-member panel. Transfer or cancellation are the only available remedies.

This guide walks each step in sequence, names the trap each one hides, and shows how to weigh WIPO against the alternatives before you commit resources.

Step 1: Confirm the domain actually qualifies as a typosquat under the UDRP

Typosquatting is a recognised bad-faith pattern under the UDRP, but panels do not apply a single threshold definition. The first question is whether the variation between your mark and the disputed domain is close enough to be confusingly similar under Paragraph 4(a)(i) – and close enough to infer bad-faith intent under Paragraph 4(a)(iii).

Confusing similarity under the first element is assessed against the mark on its face. Common typosquat patterns – transposed letters, an omitted letter, a repeated letter, the substitution of a phonetically similar character – routinely satisfy the first element. Panels assess similarity between the domain (stripped of the ".com" suffix) and your mark. A one-letter transposition of a distinctive coined mark will almost always meet the threshold. A variation of a generic or highly descriptive term is harder to frame as a typosquat because the domain may have been registered for its dictionary value rather than to target you.

The trap at Step 1: brand owners sometimes conflate "looks like my mark" with "qualifies under the Policy." Slight variations can go either way. Before investing in a filing, map the variation precisely – character by character – against the mark as registered, not as commonly used. The mark on the registration certificate governs, not the stylized version on your website.

Step 2: Establish that your trademark rights are in order

The UDRP requires that you hold rights in a mark. A registered trademark is the clearest proof, but panels have accepted unregistered (common-law) rights where the complainant demonstrates secondary meaning through evidence of long use and market recognition. In our practice, unregistered-rights cases require a substantially heavier evidentiary investment than cases resting on a live registration.

For a .com typosquat dispute, the jurisdiction of trademark registration is not dispositive – the Policy does not require a registration in any particular country. A US registration, a European Union trademark, a UK registered mark: all are equally valid anchors under Paragraph 4(a)(i).

The trap at Step 2: check that the registration is live, not expired, and not encumbered by a pending cancellation proceeding. A lapsed registration handed to a panel carries real risk. Registrations that postdate the domain registration present a separate problem – panels examine whether the registration was merely a tactical move to manufacture standing, though there are recognized exceptions when the mark predated the domain in the marketplace even without a registration.

For a read on whether your trademark rights are sufficient to anchor a UDRP complaint, reach us at info@cognomenlaw.com.

Step 3: Document the registrant's bad faith before you file

The second and third elements – no legitimate interest, and bad-faith registration and use – are where most complaints succeed or fail. Assembling the evidence before filing, not after, is the difference between a clean record and a supplemental-filing scramble.

For the bad-faith element, the UDRP lists non-exhaustive circumstances at Paragraph 4(b). Typosquatting itself is widely treated as evidence of bad faith, because the act of registering a near-identical variation of a well-known mark is difficult to explain innocently. Panels frequently find that the registrant must have known of the mark – particularly where the mark is distinctive and the typographical variation precisely mirrors common keyboard errors or speech patterns.

Evidence to gather before you file:

• A full WHOIS/RDDS record of the domain, including registration and last-updated dates, captured at the time of discovery.
• Screenshots of what the domain resolves to – a parking page, a pay-per-click landing page, a counterfeit shop, a competitor's site, or a blank page. Date-stamp the captures.
• Evidence that your mark predates the domain registration: the trademark certificate, priority date, first-use date, and any press coverage or marketing spend that places the brand in the market before the registration date.
• Any communications from the registrant – a demand to sell, an offer to "help you" acquire the domain, a message claiming to hold the name "for development." Each of these may map onto a Paragraph 4(b) factor.
• Evidence of a pattern: if the same registrant holds multiple variations of your mark or similar marks owned by third parties, that pattern is independently relevant as a Paragraph 4(b)(ii) factor.

The trap at Step 3: passive holding – a domain that resolves to nothing at all – does not automatically defeat a bad-faith finding. Panels have consistently held that passive holding is capable of constituting bad-faith use in the right factual setting, particularly when the mark is well-known and the registrant offers no innocent explanation. But the evidence record for passive-holding cases must be built with more care, because there is less on the page to point to.

In a recent matter (a .com typosquat targeting a consumer-brand registrant, spring 2025), we assembled three years of archived screenshots alongside trademark registration records and a parking-page revenue estimate from public ad-network data. The panel found bad faith on the basis of both intentional confusion and passive holding – a result that depended on the documentation being complete before the complaint was filed, not improvised afterward.

How do I choose between WIPO, the Forum, and other providers?

The UDRP is administered by four accredited providers: WIPO, the Forum, the Czech Arbitration Court (CAC), and the ADNDRC. All four apply the same Policy and Rules. The choice of provider affects practical factors: panelist pool, decision style, procedural defaults, and cost.

WIPO and the Forum together handle approximately 97% of all UDRP proceedings. For most .com typosquat complaints, the decision between them comes down to three considerations.

First, cost. WIPO charges USD 1,500 for a single-member panel covering one to five domains. The Forum's entry fee is approximately USD 1,300 for one to two domains on a single-member panel. The CAC is lower still, beginning around USD 500 – 800, though it is the least frequently used of the four. For a single typosquat domain, the cost differential between WIPO and the Forum is modest; for a portfolio of ten or more domains, the comparison matters more.

Second, panelist pool and consistency. WIPO's panelist list is large and international; the Forum's is weighted toward US practitioners. For disputes involving a US-registered trademark and a US-based registrant, either provider is equally well-suited. Where the registrant is in a jurisdiction where the Forum's panelists are less familiar with local context, WIPO's broader geographic roster can be an advantage.

Third, speed. WIPO offers an expedited procedure delivering a decision in approximately one month, available for single-panel cases of up to five domains. Where the typosquat is actively diverting traffic or revenue, that one-month reduction in timeline may justify WIPO as the first choice.

What if the same registrant holds both a .com typosquat and a matching ccTLD variation – say, a .co.uk or a .eu? A single UDRP complaint can cover multiple domains only if the registrant is the same holder across all of them. But the ccTLD zones operate under separate procedures. A .uk typosquat goes to the Nominet DRS, not to WIPO under the UDRP – it uses a distinct "abusive registration" test and begins with a free mediation stage. A .eu domain goes through EURid's ADR.eu procedure, administered through the Czech Arbitration Court. Filing a UDRP complaint does not automatically protect the ccTLD variants; each zone requires its own filing under its own rules.

To weigh UDRP against a court action for your case, or to plan parallel filings across zones, email info@cognomenlaw.com.

Step 4: Draft and file the UDRP complaint

The UDRP complaint is the formal document that sets out your case on all three elements of Paragraph 4(a). It must be filed with the chosen provider – WIPO, the Forum, CAC, or ADNDRC – and accompanied by the filing fee. The provider reviews the complaint for formal compliance before commencing the case.

The complaint must cover:

1. The domain(s) in dispute and the registrar of record.
2. The complainant's trademark rights – registration details, priority date, goods and services covered.
3. Why the domain is confusingly similar (the character-by-character analysis from Step 1).
4. Why the registrant has no rights or legitimate interests – factual evidence discharging the complainant's prima-facie burden, shifting the onus to the respondent to come forward with an explanation.
5. Why the domain was registered and is being used in bad faith – the specific Paragraph 4(b) circumstances, supported by the screenshots and records assembled in Step 3.
6. The remedy requested: transfer to the complainant, or cancellation.

The trap at Step 4: the complaint is not a court pleading, but it functions like one at the panel level. An underdeveloped bad-faith argument – one that says "it is obviously a typosquat" without pointing to the specific evidence that demonstrates knowledge of the mark at the time of registration – leaves the panel with nothing to work from if the registrant submits a plausible innocent-use story. Panels decide on the record. Build the record in the complaint, not in a supplemental submission that the panel may decline to admit.

Step 5: Manage the 20-day response window

Once the provider formally commences the case, the respondent has 20 days to file a response. That deadline is set by the UDRP Rules and is firm; extensions require consent or a panel order. Default – no response filed within the window – does not automatically produce a transfer. The panel still examines the complaint on its merits.

For the complainant, the response window is not dead time. It is the period to:

• Monitor whether the registrant has changed the domain's content – a sudden redirect to a legitimate business site is worth documenting immediately, as the registrant may attempt to argue legitimate use.
• Consider whether to request a three-member panel. If the case involves a high-value mark, a genuinely contested bad-faith analysis, or an opponent who appears resourced, three panelists reduce variance. Under the Rules, if you requested a single panelist but the respondent requests a three-member panel, the parties generally split the higher three-member fee.
• Prepare for a possible supplemental filing – rare, and panels set a high bar for admitting them, but available where genuinely new evidence emerges after the complaint.

The trap at Step 5: typosquat registrants frequently default. A default may feel like a win in waiting, but panels in default cases scrutinize the record independently. A complaint with a weak bad-faith record can still fail on default. We have seen brand owners assume a non-responding registrant means an automatic transfer, only to receive a denial. There is no such thing as an uncontested UDRP case; the panel always reads the complaint.

Step 6: Understand what the panel decision can and cannot do

The UDRP delivers one of three outcomes: transfer of the domain to the complainant, cancellation of the domain, or denial of the complaint. There are no monetary damages. There is no costs award. There is no injunction. If you need money – for the revenue your business lost to the typosquat, for reputational harm, or for the registrant's profits – the UDRP cannot deliver it. That remedy belongs in court, through US anticybersquatting litigation or the applicable national action.

A secondary outcome worth understanding is Reverse Domain Name Hijacking (RDNH). A panel may find that a complaint was brought in bad faith – typically where the complainant knew its case was weak but filed anyway, or where the complaint was clearly an attempt to pressure a legitimate registrant. An RDNH finding carries no monetary penalty, but it is a reputational consequence published in the public decision record. Filing a borderline complaint against a registrant who can document good-faith registration risk producing an RDNH finding. That risk is not hypothetical; panels issue such findings with some regularity.

In a recent matter (a .com dispute, autumn 2024), a brand owner filed a complaint based on a trademark registered well after the domain had been in active use by the registrant for a different line of business. The panel denied the complaint and issued an RDNH finding, reasoning that the complainant could not credibly have believed its case was well-founded at the time of filing. The result was a public record of the failed complaint and no recovery of the domain.

What are the realistic alternatives if the UDRP is the wrong tool?

The UDRP is the right tool for most .com typosquat recovery cases. It is not always the right tool. Understanding the alternatives before you commit to filing avoids a misdirected spend.

If you need money damages in addition to transfer, US anticybersquatting litigation is the route. It is substantially more expensive and slower than the UDRP, and it requires the registrant to be within reach of US jurisdiction or the domain to have a connection to the US. But it reaches remedies the UDRP cannot. We handle these matters with local litigation counsel in the relevant jurisdiction when a US court action is the right answer.

If the typosquat domain is a new-gTLD (not a .com), the Uniform Rapid Suspension procedure (URS) is available at lower cost and with faster turnaround, but it only suspends the domain for the registration term – it does not transfer ownership. Where the goal is simply to stop the harm quickly and the registrant is unlikely to re-register, URS is worth considering as a complement to or substitute for a full UDRP complaint.

If the typosquat domain is in a ccTLD, a zone-specific procedure applies. For .uk, Nominet's DRS applies the "abusive registration" standard and includes a free mediation stage. For .eu, EURid's ADR.eu procedure has its own eligibility rules and remedies. For .de, there is no equivalent to the UDRP; the dispute proceeds through the German courts, with a DENIC DISPUTE entry available to block any transfer of the domain while litigation proceeds. Each of those routes has its own timeline, its own cost structure, and its own substantive test – and none of them is resolved by filing a UDRP complaint.

The practical decision tree looks like this. If the domain is a .com and you want it transferred, the UDRP at WIPO or the Forum is almost always the fastest and most cost-effective path. If you need damages, supplement the UDRP with a court action or choose court alone. If the registrant holds the typosquat across multiple zones, file the UDRP for the .com and a parallel ccTLD complaint for each national variant under that zone's own rules. If the registration is very recent and appears to be a reaction to a product launch or press coverage – a tell-tale bad-faith indicator – file quickly, before the registrant has time to construct a legitimate-use narrative.

Related at COGNOMEN

• UDRP domain recovery services – how COGNOMEN handles complainant-side filings across gTLDs
• Recovering domains from serial cybersquatters – strategy and evidence for multi-domain patterns
• FAQ: defending a legitimately held domain against an abusive complaint

About COGNOMEN

COGNOMEN is an independent boutique focused exclusively on domain-name disputes. We recover, defend, and transact internet domains across generic and country-code zones, before WIPO, the Forum, CAC, ADNDRC, and national procedures, and in court where arbitration cannot reach. We act for brand owners, domain investors, and registrants – including respondent-side defense and reverse domain name hijacking. Our practice covers typosquat recovery, ccTLD filings, UDRP respondent defense, domain theft recovery, and pre-acquisition due diligence. To discuss a domain, contact info@cognomenlaw.com.

By Cordelia Roe | UDRP complainant practice and gTLD domain recovery

Disclaimer: This article is general information about domain-name dispute procedures and does not constitute legal advice. Outcomes depend on the specific facts, the zone, and panel or court discretion. For advice on your domain, contact info@cognomenlaw.com.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Related

• Udrp Recovery
• Serial Cybersquatter Mx
• Faq Defend Investment Domain De

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.