How to recover a typosquatted .store domain

A registrant adds a single transposed letter to your brand name, registers the result as a .store domain, and points it at a competing storefront or a phishing page. Your customers type the wrong URL. Your reputation takes the hit. The question is not whether to act – it is how fast you can move and what the process requires.

To recover a typosquatted .store domain you file a UDRP complaint before WIPO or another accredited provider. The .store registry operates under the standard UDRP, so all three elements of Paragraph 4(a) must be proved: confusing similarity to your trademark, no legitimate interest in the registrant, and registration and use in bad faith. A standard case runs about two months, the WIPO filing fee starts at USD 1,500, and the only remedies are transfer or cancellation – no damages.

This page sets out the test, the evidence that decides .store typosquat cases, the choice of forum, and what happens next.

Why .store typosquats are a distinct enforcement problem

The .store gTLD was introduced to signal a retail or e-commerce presence, which means a typosquat there carries immediate commercial credibility. A consumer who lands on a misspelled .store domain is primed to transact. That context matters when building the bad-faith element of your complaint.

Typosquatting – registering a domain that differs from a protected mark by a character transposition, omission, or addition – is one of the most well-documented bad-faith patterns under the UDRP. Panels have consistently held that deliberate misspelling of a mark to capture misdirected traffic is strong evidence of bad faith under Paragraph 4(b)(iv): attracting users for commercial gain by creating a likelihood of confusion with the complainant's mark. The retail association of .store makes the commercial-gain inference even more direct than in a generic extension.

We regularly advise brand owners who discover .store typosquats only after a customer complaint or a fraud report. Acting quickly matters. The longer a typosquat operates – accumulating backlinks, email traffic, or payment credentials from confused users – the more damage is done, even if the domain is eventually transferred.

What legal test applies to recover a typosquatted .store domain?

The UDRP governs .store, so the three-element test of Paragraph 4(a) applies in full. Each element is mandatory; a complaint that fails on any one of them fails entirely.

Element 1: Confusing similarity. For a typosquat this element is almost always the easiest to satisfy. The domain differs from the mark by one or two characters. Panels conduct a straightforward side-by-side comparison, stripping the extension, and routinely find that a transposed or missing letter preserves the visual and phonetic impression of the mark. A registered trademark is the cleanest evidence, but panels have also credited well-established unregistered marks where the complainant demonstrates sufficient secondary meaning.

Element 2: No rights or legitimate interests. This element shifts the burden in practice. Once the complainant makes a prima facie case – which a typosquat typically establishes on its face – the respondent must come forward with evidence of a legitimate interest. The Paragraph 4(c) safe harbors include: a bona fide offering of goods or services before notice of the dispute; being commonly known by the domain name; or legitimate noncommercial or fair use. A stranger who registered a misspelling of your brand name for a commercial purpose will find it very difficult to qualify under any of these. We have yet to encounter a persuasive legitimate-interest defense in a pure transposition typosquat of a distinctive mark.

Element 3: Registration and use in bad faith. The UDRP requires both registration and use in bad faith – a cumulative standard, not an alternative one. Typosquatting satisfies the registration prong because the choice of a misspelled mark implies awareness of the original. Use in bad faith is shown by pointing the domain at a competing site, a pay-per-click parking page monetizing brand confusion, a phishing or credential-harvesting page, or even by passive holding where the circumstances overwhelmingly imply opportunistic intent. Panels have found passive holding sufficient in strong-mark typosquat cases where there is no plausible good-faith use for the domain.

For a read on whether the three UDRP elements are met in your .store situation, reach us at info@cognomenlaw.com.

Which forum should you use to file the complaint?

WIPO and the Forum together handle approximately 97% of all UDRP proceedings, and both accept .store complaints. The choice between them – and, in principle, the Czech Arbitration Court (CAC) as a lower-cost option – turns on practical factors rather than substantive legal differences.

WIPO is the default for most brand-owner complainants. Its case management is consistent, its published record is searchable, and panelists drawn from its list tend to have strong trademark backgrounds. The WIPO filing fee for a single-member panel covering one to five domains is USD 1,500. A three-member panel costs USD 4,000. If you need a decision quickly and the case involves a single domain of clear-cut facts, WIPO offers an expedited option delivering a decision within about one month.

The Forum begins at approximately USD 1,300 for one to two domains on a single-member panel. It is a legitimate choice and handles a substantial volume of cases. Panelist quality is comparable. For straightforward typosquat matters the differences between WIPO and the Forum are marginal.

CAC offers the lowest entry point – around USD 500–800 – and is worth considering where cost is a primary driver. It is the least-used of the three major providers, and its panelist pool is smaller.

The right path if the typosquat is a .store domain is therefore: file a UDRP complaint, most likely at WIPO or the Forum, with a single-member panel unless the case has complexity that warrants three panelists. If an identical or near-identical domain also exists as a .com or another gTLD in the same registrant's portfolio, a single complaint can cover multiple domains against the same holder.

What is the UDRP timeline for a .store typosquat case?

A standard .store UDRP case proceeds through five stages – complaint filing, formal compliance review, response window, panel appointment, and decision – and is normally complete within about two months of filing.

The compliance review confirms that the complaint meets the formal requirements of the Rules. If there are deficiencies, the provider returns it for correction, which can add days to the clock. Once the case commences, the registrant (the respondent) has 20 days to file a response. A respondent who files nothing defaults; the panel then decides on the complaint and whatever record is before it. Default does not mean automatic transfer – the complainant still carries the burden on all three elements – but a well-constructed complaint against an obvious typosquat almost always succeeds on default.

After the response window closes, a single panelist is appointed. The panelist reviews the record and issues a written decision. Implementation follows: the registrar locks and transfers the domain, typically within a few business days of the decision and after a brief implementation hold period.

In a matter we handled in early 2025 – a .store typosquat by a character transposition of a retail brand's registered mark, pointing at a pay-per-click parking page – the transfer order issued approximately seven weeks after filing. The respondent defaulted, the three elements were straightforward, and the WIPO single-member panel proceeded on schedule.

What evidence wins a .store typosquat UDRP complaint?

Evidence assembly is where cases are won or lost. A technically valid complaint that is thin on documentation can fail even against an obvious typosquat, because the panel must work from the record before it.

The evidence list for a .store typosquat complaint should include:

• Trademark registration certificates or, for unregistered marks, substantial evidence of use (advertising spend, sales figures, media coverage, customer declarations) establishing secondary meaning.
• WHOIS or RDDS records showing the registrant, registration date, and registrar – critical to confirming the registrant's identity and the timing of registration relative to your mark's establishment.
• Screenshots of the domain's current and prior use, captured with metadata showing URL and date. Use a neutral archiving service where possible.
• Archive.org captures if the content has changed or been taken down since you identified the typosquat.
• Any communications from the registrant – a demand for payment, an offer to sell, or a threatening message – which map directly to the Paragraph 4(b)(i) bad-faith factor (registration to sell to the mark owner).
• Evidence that the registrant has engaged in a pattern of similar registrations against other marks, which invokes Paragraph 4(b)(ii) (pattern of abusive registrations).
• Evidence of customer confusion, misdirected orders, or phishing reports connected to the domain.

The confusing-similarity element rarely needs more than a side-by-side of the mark and the domain. The heavier documentation burden falls on Element 3. Panels look at the totality of circumstances. A parking page monetizing the brand's name is strong on its own. A blank or under-construction site raises the passive-holding question – whether the circumstances leave no plausible good-faith use. We have seen panels sustain passive-holding bad faith in .store typosquat cases where the mark was well-known, the domain matched it closely, and the registrant offered no explanation.

If you have identified a .store typosquat and are ready to assess the evidence, email info@cognomenlaw.com. We can evaluate the three UDRP elements, identify the right forum, and prepare the complaint.

How does the cost structure break down?

Two separate cost components apply: the forum filing fee and the legal fee. They are different in nature and scale.

The WIPO filing fee is set by WIPO and paid directly to the provider. For a .store typosquat involving a single domain, a single-member panel at WIPO costs USD 1,500. If you request a three-member panel – or the respondent does after you request a single panelist – the fee rises to USD 4,000, and in the latter scenario the parties generally split the higher fee. If the case settles before a panel is appointed, WIPO's standard practice is a partial refund of approximately USD 1,000 of the single-panel fee.

Legal fees are separate. Market rates for a UDRP complaint on a single, straightforward domain typically run in the USD 3,000–7,000 range at flat-fee pricing, depending on the complexity of the evidence and the mark position. A typosquat of a registered mark with an active parking page sits at the cleaner end of that range. A case requiring substantial secondary-meaning evidence, archive reconstruction, or multi-domain coordination sits toward the higher end.

Total cost for a clean .store typosquat complaint: typically USD 4,500–8,500 combined (filing fee plus legal), resolved in around two months, with no monetary damages recoverable. For most brands, that compares favorably with the cost of a fractured customer relationship or a phishing incident traced back to the typosquat.

What are the cross-zone and cross-forum considerations?

A typosquatter holding your brand as a .store domain may also hold the same misspelling as a .com, a .shop, or a .net. A single UDRP complaint can cover multiple domains against the same registrant. That consolidation is worth identifying at the outset – recovering all variants in one filing is more efficient than sequential complaints.

If the registrant is the same holder but in different zones, the strategic picture is more complex. A .com held by the same party as the .store is handled in the same UDRP complaint with no additional forum selection step. A .uk typosquat adds the Nominet DRS, which uses a different test – "abusive registration" – and includes a free mediation stage. A .de typosquat cannot be resolved by the UDRP at all; it requires a German court action and, if urgent, a DENIC DISPUTE entry to block transfer while the litigation proceeds.

Where the registrant is in a jurisdiction with active cybersquatting legislation – the United States being the most prominent example – a US anticybersquatting court action is an alternative that can reach monetary damages and injunctive relief, neither of which the UDRP provides. That route is substantially more expensive and slower, but it is the only mechanism where the pattern of harm or the registrant's profits are material to the remedy sought. COGNOMEN works with local litigation counsel in the relevant jurisdiction where court action is required.

For a brand with multi-zone exposure – a .store typosquat alongside a .com and a .uk variant – we typically advise filing the UDRP first for the gTLD registrations while assessing the national procedures in parallel. Speed matters most on the .store given its retail-specific consumer risk.

What if the complaint fails or an RDNH finding is made against the complainant?

UDRP decisions are final in the arbitral sense: there is no internal appeal. A complainant who loses a UDRP complaint can, in principle, pursue a court action in a competent jurisdiction, though that is rare in practice for a straightforward typosquat. If new facts emerge – evidence of bad faith that was unavailable at the time of filing – refiling is possible in some circumstances, though panels approach serial complaints carefully.

The more significant risk for a brand owner filing a .store UDRP complaint is the reverse direction: a finding of Reverse Domain Name Hijacking (RDNH). An RDNH finding means the panel concluded the complaint was brought in bad faith to deprive a legitimate registrant of a domain. That finding carries no monetary penalty but is published in the panel's decision and is damaging to the brand owner's reputation in subsequent proceedings. RDNH findings are rare in genuine typosquat cases – a clean misspelling of a registered mark presents an obvious legitimate basis for the complaint – but they do arise when a complainant overreaches: filing against a domain registered years before the mark was established, or targeting a generic registration by someone with a plausible independent claim to the name.

In our practice, we assess RDNH risk before filing. A complaint that relies on thin trademark evidence or ignores a respondent's plausible legitimate interest is a poor filing regardless of the extension. The .store zone does not change that analysis.

In a second matter we handled, spring 2025, we advised a complainant against filing a UDRP complaint against a .store domain after reviewing the registration history. The domain predated the complainant's trademark registration by more than two years, and the registrant operated a genuine retail business in a related category. Filing would have risked an RDNH finding. We instead tracked the domain for a potential acquisition approach. That outcome – no complaint filed – was the right one.

Related at COGNOMEN

• UDRP domain recovery services – full overview of the complaint process across all gTLD zones
• Recovering a passively held domain – how panels assess bad faith without active use
• Recovering a phishing domain in the .ae zone – ccTLD procedure and evidence considerations

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.