How to recover a .ca domain from a serial cybersquatter

A registrant in another province – or another country – holds a .ca domain that matches your Canadian brand. They have done this before. There are ten, twenty, perhaps more registrations pointing at the same parking template, waiting for buy-back offers. You want the name transferred. The question is which procedure reaches it fastest and what evidence will carry the day.

To recover a .ca domain from a serial cybersquatter, the governing procedure is the CIRA Canadian Internet Registration Authority Dispute Resolution Policy (CDRP). The complainant must satisfy the same essential three-part test that structures the UDRP: confusing similarity to a name in which you have rights, no legitimate interest on the registrant's part, and bad-faith registration or use. A pattern of abusive registrations across multiple domains is among the clearest bad-faith indicators available – panels treat serial conduct as powerful circumstantial evidence. The remedy is transfer or cancellation; no monetary award is available through the CDRP.

This page covers the CDRP test, the evidence that tips a serial-cybersquatting case, the step-by-step process, costs, the cross-zone picture when the same squatter holds parallel gTLDs, and the practical next step for a brand owner ready to act.

What is the CIRA CDRP and when does it apply to your .ca domain?

The CIRA CDRP is Canada's dedicated dispute procedure for .ca domain names, operated under rules published by CIRA, the registry that manages the .ca zone. It is the primary administrative route to reclaim a .ca domain without going to court. Unlike the UDRP – which is triggered contractually through the registrar – the CDRP runs through CIRA's own dispute-resolution system, with WIPO currently serving as a designated dispute-resolution service provider for .ca proceedings.

Two threshold conditions matter before the substantive test. First, the complainant must generally meet CIRA's Canadian Presence Requirements – a .ca domain may only be held by persons or entities with a defined Canadian nexus, and a successful complainant must be eligible to hold the domain if it is transferred. Canadian corporations, individuals resident in Canada, and trademark owners with Canadian registrations can typically qualify; if your organization is foreign-headquartered, confirm eligibility with counsel before filing. Second, the domain must be registered in the .ca zone; the CDRP has no jurisdiction over .com or other gTLDs, even if the same registrant holds them.

Serial cybersquatters – those who hold patterns of confusingly similar registrations across multiple brands – frequently appear in CDRP proceedings. In our practice, we have seen repeat registrants hold dozens of .ca names, rotating parking pages and monetization scripts to sustain what looks commercially like a deliberate portfolio of third-party brand variants. That pattern is not incidental; it goes directly to the bad-faith element and often tips cases that might otherwise be closer calls.

How do the three CDRP elements work against a serial cybersquatter?

Satisfying all three elements of the CDRP's substantive test is the non-negotiable condition for a transfer or cancellation order. Each element has specific proof requirements, and the serial character of the respondent's conduct bears differently on each one.

Element one: confusing similarity. The domain must be identical or confusingly similar to a trademark, trade name, or other protected designation in which the complainant has rights. Panels examine the text of the domain against the mark, discounting the country-code suffix as a non-distinctive element. A domain that adds a generic word, misspells the mark, or transposes two letters is routinely found confusingly similar. This element is typically the easiest to satisfy for a brand owner holding a registered Canadian trademark.

Element two: no legitimate interest. The complainant must show the registrant has no rights or legitimate interests in the domain. Under the CDRP – as under UDRP Paragraph 4(c) – the burden effectively shifts once the complainant makes a prima facie case; the registrant must then produce evidence of a bona fide offering of goods or services under the name, a common personal association with the name, or legitimate non-commercial or fair use. A serial squatter holding dozens of brand-variant domains with parking pages, pay-per-click links, or "for sale" notices rarely has a credible response on this element. The absence of any genuine business operating under the disputed name, combined with the registrant's pattern of similar conduct, creates a strong inference that no legitimate interest exists.

Element three: bad faith. This is where the serial dimension of the registrant's conduct earns its evidential weight. Under the CDRP – as under the UDRP – a pattern of abusive registrations across multiple holders of third-party marks is an express bad-faith indicator. Each additional domain in the registrant's portfolio that corresponds to a different brand is, in effect, additional evidence in your case. Panels have consistently held that where a registrant has registered multiple domains containing well-known marks, the cumulative pattern supports an inference of bad faith with respect to each individual domain. The buy-back demand, the parking page monetizing on the brand's goodwill, the speculative acquisition: all are bad-faith circumstances panels recognize.

One key doctrinal note: the CDRP's bad-faith limb, like the UDRP's, asks whether the domain was registered and used in bad faith. Passive holding of a domain – where the registrant simply parks it and awaits an offer – does not defeat the bad-faith element. Panels have long held that parking, combined with the absence of any plausible good-faith explanation, satisfies the use requirement. A serial squatter running a parking page is not using a domain legitimately.

For a read on whether the three CDRP elements are met in your case, reach us at info@cognomenlaw.com.

What is the step-by-step process under the CIRA CDRP?

A CDRP proceeding moves through five defined stages: complaint preparation and filing, commencement and service, the response window, panel appointment and decision, and registrar implementation. Understanding each stage is essential for a brand owner who wants the process to move efficiently.

1. Pre-filing preparation. Before lodging the complaint, gather the full chain of evidence: your trademark registration certificate, WHOIS or RDDS records showing the registrant's details and registration date, cached screenshots of the domain's current and historical use (archive captures are valuable), and any prior communications including buy-back solicitations. If the same registrant holds other brand-variant .ca or gTLD domains, document those registrations as well – each one strengthens the pattern evidence on bad faith.
2. Filing the complaint. The complaint is submitted to the designated dispute-resolution service provider – currently WIPO for .ca proceedings. It must satisfy formal requirements: word limits, exhibit formatting, identification of the domain, the remedies sought, and a certification by the complainant confirming eligibility to hold a .ca domain. A complaint that fails formal requirements will be returned for amendment, adding time to the process.
3. Commencement and the response window. Once the provider confirms formal compliance, the case commences and CIRA is notified. The registrant then has 20 days to file a response. That window cannot be extended except in narrow procedural circumstances. A serial cybersquatter who routinely defaults – as many do – accelerates the process toward a panel decision on the complaint alone.
4. Panel appointment and decision. The provider appoints a single panelist (or a three-member panel if requested and the fee is paid). The panelist reviews the record and issues a reasoned written decision. A straightforward CDRP proceeding is generally resolved within approximately two months of commencement, though case volume and panelist availability can affect the precise timeline.
5. Registrar implementation. If the decision orders transfer, CIRA directs the registrar to implement it. There is a short implementation period – typically around ten business days – during which the losing registrant may seek a stay by initiating a court action in a competent Canadian court. In our experience, serial squatters rarely pursue court challenges; the economics do not support litigation over a domain they acquired speculatively.

How quickly does a default case move? When the registrant does not respond – which is common in serial-squatting matters – the panel decides on the record as filed. That tends to compress the process because there is no response to consider and no extension to accommodate. We have seen transfer orders in default CDRP matters reach implementation in closer to six to eight weeks from filing.

What evidence decides a serial-cybersquatting case at CIRA?

The record you build before filing the complaint is the record the panel decides on. Unlike court proceedings, CDRP panels rarely accept supplemental submissions; the complaint is essentially your one opportunity to lay out the full picture. Evidence quality and completeness determine the outcome far more than rhetorical argument.

The following categories of evidence carry the most weight in serial-cybersquatting cases:

• Trademark registration proof. A certificate of registration from the Canadian Intellectual Property Office (CIPO) for the exact mark, or a substantially similar mark, is the cleanest foundation for element one. Common-law trademark rights can also qualify, but they require more extensive documentation – evidence of use, geographic coverage, consumer recognition, and prior marketing.
• Registration date comparison. The domain's registration date against the trademark's first-use or registration date matters significantly. A squatter who registered the domain after the mark had acquired public recognition faces a straightforward bad-faith inference; one who registered before the mark existed faces a much weaker case for the complainant, and counsel should assess that timeline candidly before filing.
• Pattern evidence: the portfolio. WHOIS or RDDS records showing the same registrant holding other brand-variant domains – whether .ca or other zones – are essential. Compile a complete list of related registrations. Even registrations in other ccTLDs or gTLDs can be relevant to illustrate the registrant's modus operandi, though only .ca domains are within the CDRP's jurisdiction.
• Domain use documentation. Screenshots of the domain resolving to a parking page, a "domain for sale" landing page, or pay-per-click links are direct evidence of monetization on the complainant's goodwill. Archive captures from the Wayback Machine showing the historical state of the domain are especially persuasive, because they show use over time rather than a single snapshot.
• Communications and buy-back demands. Any email or message in which the registrant solicited a sale, quoted a price, or offered to transfer the domain for consideration is powerful bad-faith evidence. Under both the UDRP and the CDRP, an offer to sell for a sum exceeding documented out-of-pocket registration costs is an explicit bad-faith indicator. Screenshot or export these communications and preserve the metadata.
• Prior dispute history. A registrant who has lost a prior UDRP or CDRP proceeding over a different brand's domain has already been found to have acted in bad faith once. While each case is decided on its own record, a demonstrated history of prior adverse decisions is admissible pattern evidence. We regularly search public WIPO case databases for a respondent's prior proceedings and exhibit the relevant decisions.

One pattern we see in our practice: brand owners arrive with strong element-one evidence (a registered mark) but thin documentation of the domain's actual use. A panel that cannot see what the domain was doing – because the registrant took the page down after receiving notice – may struggle to find bad faith on use. The Wayback Machine and contemporaneous screenshots taken before the squatter learns a complaint is coming are therefore worth preserving the moment you identify the problem.

If you have identified a serial cybersquatter holding your .ca domain, email info@cognomenlaw.com to assess the three CDRP elements against your specific evidence before the record changes.

How do costs compare: CDRP filing fees versus legal fees?

Understanding the cost structure matters for a brand owner weighing the CDRP against a negotiated purchase or a court action. Two distinct cost categories apply: the official filing fee paid to the dispute-resolution provider, and the legal fee charged by counsel to prepare the complaint.

On filing fees: the CDRP uses WIPO as the provider for .ca disputes. The WIPO filing fee for a .ca proceeding follows a similar structure to WIPO's gTLD rates – for a standard single-member panel, the current rate begins at USD 1,500 for a small number of domains; confirm the precise current schedule with WIPO's CDRP fee page before filing, as the fee structure for ccTLD proceedings can vary from the standard UDRP schedule. A three-member panel carries a higher fee; for a serial-cybersquatting matter involving one domain, a single-member panel is usually appropriate unless the factual or legal complexity is unusual.

On legal fees: market rates for a CDRP or UDRP complaint in a straightforward single-domain matter typically fall in the range of USD 3,000 – USD 7,000 in flat fees, separate from the forum filing fee. A serial-cybersquatting case involving extensive pattern evidence may sit toward the upper end of that range, because assembling and exhibiting a multi-domain portfolio takes more preparation time. Cases involving common-law trademark rights (requiring proof of acquired distinctiveness) also tend to cost more than those anchored to a clean CIPO registration.

Compare that cost to a negotiated buy-back. Serial squatters routinely demand five-figure sums – USD 10,000, USD 25,000, or more – for domains they acquired for the annual .ca registration fee. The combined cost of a CDRP proceeding, forum fee plus counsel, is almost always below a squatter's opening demand. And unlike a buy-back, a successful CDRP order does not reward the conduct; it transfers the domain without compensation to the registrant.

Court action in Canada is a third route, but its cost profile is materially different. Hourly litigation in a Canadian provincial court or the Federal Court of Canada involves discovery, pleadings, and motions that can make even a simple domain dispute expensive over a period of months or years. The CDRP is the preferred starting point precisely because it is faster, cheaper, and purpose-built for this fact pattern.

How does .ca compare to .com and other zones when the same squatter holds both?

Serial cybersquatters rarely limit themselves to one zone. A registrant who targets a brand in .ca very often holds the same or a similar string in .com, .net, or other gTLDs. That cross-zone reality shapes the litigation strategy, because each zone is governed by a different procedure and the remedies do not automatically extend across them.

The right route depends on the zone and the goal. If the squatter holds both the .ca and the .com, a UDRP complaint at WIPO or the Forum is the path for the .com, running in parallel with – or slightly before – the CDRP for the .ca. The two proceedings are legally independent, but the panel in each one can see evidence of the other. A UDRP panel deciding the .com will note the .ca registration as pattern evidence; a CDRP panel deciding the .ca can similarly note a prior adverse UDRP outcome as evidence of the registrant's bad faith. Filing both promptly captures this cross-pollination of evidence.

If the squatter holds new-gTLD domains (.shop, .online, .store, or similar), the URS – Uniform Rapid Suspension – is available at lower cost and faster timeline, though the remedy is suspension for the registration term, not transfer of ownership. For a brand seeking permanent control of the name, URS alone is not enough; a full UDRP complaint is needed for any new-gTLD domain the brand wants in its portfolio.

For any ccTLD outside .ca – a .de, a .fr, a .uk – the governing national procedure applies in that zone. A serial squatter holding a .de parallel to your .ca does not become subject to the CDRP by reason of the .ca dispute; that .de name requires either the relevant ccTLD procedure (for .uk, the Nominet DRS; for .de, the German courts with a DENIC dispute entry) or, where the ccTLD procedure is unavailable, local litigation counsel in the relevant jurisdiction.

In a recent matter – a serial cybersquatter holding a .ca and two gTLD variants of a consumer goods brand, autumn 2025 – we filed parallel CDRP and UDRP complaints in the same week. The UDRP decision came first, finding bad faith in part because of the .ca registration; the CDRP panel, deciding three weeks later, cited the UDRP outcome as corroborating pattern evidence. Transfer orders issued in both zones within approximately ten weeks of filing. The brand recovered all three names without paying any buy-back demand.

What if the cybersquatter defaults or responds – does it change the outcome?

Serial cybersquatters split roughly into two groups in CDRP proceedings: those who do not respond at all, and those who file a defensive response asserting a generic or descriptive use argument. Both are manageable; the strategy differs slightly between them.

Default cases. When the registrant does not file a response within the 20-day window, the panel proceeds on the complaint alone. The complainant does not automatically win; the panel still examines the record and must be satisfied that all three elements are established. But a well-constructed complaint with complete evidence – mark certificate, WHOIS history, archive screenshots, and pattern documentation – is a strong record for a default decision. In our practice, default cases with complete records reach decisions efficiently and without the uncertainty of contested proceedings.

Contested cases: the boilerplate defenses. A serial squatter who does respond typically raises one of three arguments. First, that the domain consists of generic or descriptive words not exclusively associated with the complainant's mark – an argument that tends to fail when the mark is distinctive and the domain closely tracks it. Second, that the registrant "intended" to use the domain for a legitimate project that was never launched – a defense panels treat skeptically when there is no corroborating evidence of preparation. Third, that the complainant's trademark postdates the registration – a genuine defense if true, and a reason to examine the registration timeline carefully before filing. If the mark was established well before the domain registration date, this defense falls away.

One scenario that can arise in a serial-squatting defense is a reverse domain name hijacking (RDNH) allegation – the registrant arguing that the complaint itself was brought in bad faith to seize a legitimately held name. The CDRP, like the UDRP, recognizes RDNH as a finding a panel can make. It is a reputational sanction with no monetary consequence, but it is a finding you want to avoid. The way to avoid it is to ensure the complaint is grounded in a genuine trademark right that predates the domain registration, with proportionate bad-faith evidence. A complaint filed against a registrant who had the name before you had the mark – regardless of the registrant's subsequent conduct – is the scenario most likely to generate an RDNH finding.

For brand owners on the other side of this – registrants who receive a complaint they believe is abusive – COGNOMEN also handles respondent defense and pursues RDNH findings where the facts support them. That work is described separately.

Related at COGNOMEN

• UDRP Domain Recovery – full service overview across gTLD zones
• Analysis: recovering a domain through the UDRP application process
• Respondent defense – proving legitimate interest in .au proceedings

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.