How to recover a stolen .it domain under the applicable domain rules

How to recover a stolen .it domain under the applicable domain rules. UDRP and ccTLD domain recovery and defense across .it. Email the firm to assess your case.

A registrant logs in one morning to find the .it domain gone – transferred to an unknown party, pointing at a stranger's site, with the original credentials no longer working. The account was compromised, the transfer went through, and the window to act is narrow. Knowing which procedure applies to .it, and moving fast, is what determines whether the name comes back.

To recover a stolen .it domain you must work across two parallel tracks: an immediate registrar escalation to freeze the domain and document the unauthorized transfer, followed by a formal dispute under the Registro.it Reassignment procedure – the governing mechanism for .it theft and abusive-registration disputes. The Reassignment procedure applies Italian and EU rules, not the UDRP. Where the transfer involved criminal conduct or identity fraud, an Italian court action may run alongside or replace the administrative track. Speed matters: the further a domain travels from the original account, the harder reversal becomes.

This page covers the Reassignment procedure, the registrar-lock mechanics, the evidence that decides outcomes, the costs, and the realistic next step for a registrant or brand owner who has lost control of a .it domain.

What governs .it disputes and why the UDRP does not apply here

The .it country-code zone is administered by Registro.it, the Italian registry operated by the National Research Council. Registro.it has not appointed WIPO or any UDRP provider as its dispute-resolution body. The UDRP – the procedure that applies to .com, .net, .org, and many other gTLDs – has no jurisdiction over .it whatsoever. A brand owner who files a UDRP complaint against a .it domain will have that complaint rejected at the intake stage.

What applies instead is the Registro.it Reassignment procedure, a distinct Italian-law mechanism that assesses whether a domain registration or transfer was abusive, fraudulent, or in violation of the registrant's rights. The substantive test draws on Italian trademark law, the general principles of the Italian Civil Code, and EU intellectual property regulations. The procedure is conducted entirely in Italian, with Italian-law evidence standards. A party without Italian legal representation faces a meaningful procedural disadvantage.

That distinction matters for anyone advising a brand owner or a domain investor. Recovering a stolen .it requires Italian-specific strategy from the outset – not a UDRP template with the zone changed at the top.

How the Reassignment procedure works: the process from filing to decision

The Reassignment procedure is Registro.it's administrative dispute mechanism. It offers a faster and lower-cost path than Italian court litigation for cases where the core facts are clear. The procedure accepts complaints from rights holders and from registrants who have lost a domain to unauthorized transfer or identity fraud.

The process runs in broadly five stages. First, the complainant files a formal claim with one of the arbitral bodies accredited by Registro.it, accompanied by evidence of rights and evidence of the breach. Second, the respondent – typically the current holder of the domain – is served and given a defined period to respond. Third, a single arbitrator or a panel reviews the submissions and applies the applicable Italian and EU rules. Fourth, the arbitrator issues a decision: the available remedies include reassignment of the domain back to the legitimate holder, cancellation, or maintenance of the current registration. Fifth, Registro.it implements a favorable decision through a compulsory transfer or deletion of the domain.

The procedure is conducted under rules that look more like Italian administrative arbitration than the streamlined UDRP. Documentary evidence must meet local-law standards. The complaint must be filed in Italian. Timelines are typically longer than a comparable UDRP proceeding, though materially shorter than full court litigation in the Italian civil courts. In our practice, we work with Italian-qualified legal counsel to prepare the complaint and evidence package to the standard these arbitrators require – not simply translated from a common-law brief.

If your .it domain was transferred without your authorization, the time to act is now. Contact info@cognomenlaw.com for an immediate assessment of which track – Reassignment, registrar escalation, or Italian court action – fits your situation.

Registrar-lock and transfer-reversal mechanics: the first 48 hours

Before any formal procedure is filed, the most urgent step is stopping the domain from moving again. A stolen .it domain often changes registrar and registrant within hours of the initial compromise. Each hop makes evidence preservation harder and transfer reversal less likely.

The immediate actions on discovery of a theft are:

• Notify the losing registrar in writing, immediately, with the account compromise documented. Request an emergency hold on any further transfers. Many registrars will not act on a verbal report; put the notice in writing, timestamped, to the registrar's abuse or legal contact.
• File a formal dispute or report with Registro.it. Registro.it has a process for reporting unauthorized transfers. A timely report may trigger a registry-level hold pending investigation, preventing additional outbound transfers while the Reassignment procedure is prepared.
• Preserve all evidence of compromise: account access logs, phishing emails, fraudulent authorization notifications, authentication records, and any communication from the unauthorized transferee. This evidence is the foundation of both the administrative and the court track.
• Check the WHOIS/RDDS record immediately on discovery, and capture a dated screenshot. The registrant details shown at the moment of discovery may differ from those shown a day later if the new holder updates the record.
• If criminal conduct is apparent – identity theft, credential phishing, fraudulent documentation submitted to the registrar – consider a concurrent report to Italian law enforcement. A criminal complaint does not substitute for the Reassignment or court track, but it can support the civil or administrative record.

We regularly advise clients in the first hours after discovery, and we have seen cases where failing to request a registrar hold within the first day made a transfer irreversible at the registry level. Speed at this stage is not a formality. It is the difference between a recoverable and an unrecoverable situation.

What evidence decides the outcome of a .it Reassignment claim

The Reassignment procedure turns on documentary evidence. An arbitrator in this context cannot infer bad faith from a bare refusal to respond the way a UDRP panel might. The complainant carries the burden of proving, to the applicable Italian-law standard, that the current registration or the transfer through which it arose was unlawful or in violation of the complainant's established rights.

The evidence file should contain, at minimum:

• Proof of prior registration and use: the complainant's original registration confirmation, evidence of the domain's use in connection with a business or trademark, and a clear timeline of registration ownership.
• Trademark documentation: Italian, EU, or internationally recognized trademark registrations in the relevant name are the most direct form of rights evidence. The Reassignment procedure recognizes rights under Italian trademark law and EU Regulation, so a registered EU trademark (EUTM) can support a claim even without a domestic Italian registration.
• Evidence of unauthorized access or fraudulent transfer: authentication logs showing a login from an unfamiliar IP address, forged authorization codes, phishing emails or social-engineering records, or a fraudulent change of registrant documentation submitted to the registrar. Without this link between the transfer and unauthorized conduct, the claim looks more like a registrant-change dispute than a theft recovery.
• Correspondence with the current holder: if the domain was transferred to a known party and that party has refused to return it or demanded compensation, those communications are important evidence of knowledge and bad faith.
• Timeline of discovery and immediate response steps: showing that the complainant acted promptly on discovering the loss strengthens the credibility of the claim and undercuts any argument that the transfer was acquiesced to.

Where evidence is missing – for instance, where the registrar has not yet responded to log requests – that gap should be documented in the complaint with a request for the arbitrator to compel production. Italian procedural rules permit this in the arbitral context, and experienced practitioners use it rather than waiting for complete evidence before filing.

When does an Italian court action beat the Reassignment procedure?

The Reassignment procedure is not always the right primary route. There are four scenarios in which Italian court litigation – handled with local litigation counsel in the relevant jurisdiction – is likely a better or necessary choice.

First, where the theft involved provable criminal conduct. If the domain was stolen through identity fraud, forged documents, or computer intrusion, a criminal court proceeding in Italy may compel law enforcement to act on a faster timetable than an administrative arbitration, and may result in asset seizure or a criminal injunction that locks the domain immediately.

Second, where the complainant seeks monetary damages. The Reassignment procedure delivers only domain-level remedies: reassignment, cancellation, or status quo. It cannot award compensation for business disruption, lost revenue, or reputational harm. If the theft caused material financial damage, a civil action in the Italian courts is the only path to monetary relief.

Third, where the current holder is a corporate entity with attachable assets in Italy. A court judgment or interim injunction in Italy can support an attachment of the current holder's assets, creating settlement leverage that an administrative decision cannot.

Fourth, where the Reassignment outcome is adverse and the facts support an appeal. A losing party in the Reassignment procedure can challenge the outcome in the Italian courts. If a first-instance decision was reached on an incomplete record – or if new evidence emerged after the decision – a court challenge may be warranted.

In practice, the right structure for many stolen-.it cases is a parallel strategy: immediate registrar escalation, a concurrent Reassignment complaint to freeze the domain administratively, and an Italian court track held in reserve (or running simultaneously) if the facts suggest fraud or the domain is commercially significant enough to justify the higher cost of litigation.

If you are weighing the Reassignment procedure against Italian court action, or need both tracks running in parallel, email info@cognomenlaw.com. We assess which structure fits the facts and the timeline.

How .it domain theft differs from .com theft: the cross-zone comparison

The right route depends heavily on the zone. This matters when a brand holds both a .com and a .it pointing at the same business, and both are compromised in the same attack – a scenario we have handled. The two recoveries run entirely separately, under different rules, in different forums, with different evidence standards.

For the .com, the UDRP applies. The complainant files at WIPO, the Forum, or CAC. The standard filing fee at WIPO is USD 1,500 for a single-member panel. A standard case runs roughly two months. The respondent has 20 days to reply once the case commences. The only remedies are transfer or cancellation. The UDRP panel applies a global, English-language procedure under a uniform policy.

For the .it, none of that applies. The Reassignment procedure is an Italian-law proceeding. The complaint is filed in Italian. The arbitrators apply Italian and EU law. Timelines are typically longer than the UDRP. Fees are set by the accredited arbitral bodies under Registro.it's rules. A party who tries to approach a .it dispute as though it were a UDRP – relying on cybersquatting precedent, citing Paragraph 4(b) factors, or writing in English – will lose on procedural grounds before reaching the merits.

For a .de domain, the position is different again: there is no domain-specific administrative procedure at all, and disputes proceed through German courts, with a DENIC DISPUTE entry available to block transfers during litigation. For a .uk domain, Nominet's DRS applies, with its own mediation stage and a "registered or used abusively" test. Each ccTLD operates under its own national framework.

What this means for a brand owner managing a multi-zone portfolio: the recovery strategy for .it must be scoped and staffed separately from the .com recovery, even when the underlying attack was the same. We coordinate the multi-zone strategy and engage local Italian counsel for the Reassignment or court track as the facts require.

Cost structure: Reassignment fees versus Italian court litigation

The Reassignment procedure is materially less expensive than Italian civil court litigation. The official filing fees are set by Registro.it's accredited arbitral bodies and are published on the respective body's site. They are a fraction of court fees and court-stage costs. Legal fees for preparing and pursuing a Reassignment complaint – drafting in Italian, compiling the evidence file to local standards, managing the arbitral exchange – are additional and depend on the complexity of the factual record and the number of domains involved.

Italian court litigation involves court filing fees, local counsel time at Italian bar rates, and potentially multi-year timelines for a fully litigated matter. An interim injunction in the Italian courts – the typical first-stage step in a theft case with identifiable defendants – can move faster than a full trial, but still involves preparation and a judicial hearing.

The practical calculus for most .it theft cases: if the domain was recently stolen and the evidence of unauthorized transfer is clear, the Reassignment procedure is the faster and lower-cost primary route. If the domain has been transferred multiple times, the theft involved fraud with identifiable perpetrators, or the complainant needs damages or an urgent freeze, Italian court involvement – at a higher cost – is justified and sometimes essential. We present both cost structures clearly at the outset, without hiding fees, so the decision can be made on the actual numbers.

What a registrant should do right now

If you are reading this because a .it domain was transferred without your authorization, the steps in order are:

1. Capture and preserve a dated screenshot of the current WHOIS/RDDS record immediately.
2. Send a written notification of unauthorized transfer to your registrar's abuse contact today, requesting an emergency hold.
3. Report the unauthorized transfer to Registro.it through the registry's official channel.
4. Collect all evidence of compromise: phishing emails, access logs, authorization emails you did not send, any ransom or sale demands from the current holder.
5. Contact Italian law enforcement if the circumstances indicate identity fraud or computer intrusion.
6. Get qualified legal assessment of whether to proceed by Reassignment, court action, or both – before the evidence trail goes cold or the domain moves again.

Each day without a formal hold in place is a day the domain can be transferred again, WHOIS records updated, and the evidence trail degraded. The Reassignment procedure and the court track can both be triggered quickly when the evidence file is ready. Building that file is the work that needs to start now.

In a recent matter – a .it domain theft involving credential phishing, spring 2025 – we coordinated the immediate registrar escalation, the Registro.it report, and the Italian Reassignment complaint in parallel, securing a registry-level hold within days and a reassignment decision in the subsequent months. The complainant had acted on discovery within hours; that prompt response preserved both the evidence and the registry's willingness to impose a freeze.

In a separate matter – a .it domain held by a European brand for over a decade and transferred to a shell entity, autumn 2024 – the initial Reassignment track was supplemented by Italian court proceedings when it became clear the transferee had attachable assets in Italy and the brand owner sought damages alongside domain recovery. Both tracks ran concurrently, coordinated with local litigation counsel.

Related at COGNOMEN

• Court action and domain theft recovery across all zones and forums
• How to recover a stolen .cn domain: the step-by-step guide
• Defending a generic domain in the finance sector: UDRP analysis