How to recover a .cn domain from a serial cybersquatter

How to recover a .cn domain from a serial cybersquatter. UDRP and ccTLD domain recovery and defense across .cn. Email the firm to assess your case.

You search your brand in the WHOIS registry and find a .cn registration you never authorized. The registrant holds dozens of other marks in the same zone. They have demanded payment. That pattern – portfolio hoarding across a national ccTLD – is precisely what the CNNIC dispute system and the ADNDRC arbitration process were designed to address.

To recover a .cn domain from a serial cybersquatter, you file a complaint through the Asian Domain Name Dispute Resolution Centre (ADNDRC), applying the CNNIC Domain Name Dispute Resolution Policy. The complainant must satisfy all three elements of the policy's core test: confusing similarity to a mark you hold, no legitimate interest on the registrant's part, and registration or use in bad faith. A standard case resolves in roughly two months; the only available remedies are transfer or cancellation of the domain.

This page covers the governing rules for .cn, the evidence that decides outcomes, how a serial cybersquatter's portfolio history helps – and sometimes complicates – your complaint, the realistic costs, and the right next step for a brand owner ready to act.

What governs .cn disputes and why serial cybersquatters are especially vulnerable there

The CNNIC Domain Name Dispute Resolution Policy (CNDRP) is the governing instrument for .cn disputes, administered by the ADNDRC. It closely tracks the logic of the UDRP, applying an almost identical three-element test. That structural similarity matters: evidence you have already gathered for a parallel .com proceeding is largely portable. A serial cybersquatter – a registrant holding many names that mirror third-party marks – faces a compounding disadvantage under the CNDRP, because prior conduct across the portfolio is directly relevant to bad faith at the time of registration.

Why does the portfolio matter so much? Panels examining the bad-faith element under UDRP-aligned policies have consistently held that a demonstrated pattern of registering others' marks is an independent bad-faith indicator, separate from the conduct with the specific domain in dispute. Where the registrant's history shows multiple transfers forced by prior complaints, or a concentration of registrations tracking well-known foreign brands, the inference of opportunistic intent becomes difficult to rebut.

CNNIC delegates administration entirely to the ADNDRC, which operates centers in Beijing, Hong Kong, Seoul, and Kuala Lumpur. Proceedings are conducted in Chinese or English, with language choice typically following the registration agreement unless the parties agree otherwise – a practical point worth confirming early, because an English-language brand owner filing into a Chinese-language proceeding may need a certified translation of key exhibits.

What are the three elements your complaint must prove?

Under the CNDRP, the complainant must establish all three of the following to obtain a transfer or cancellation order – and all three must be met; a strong showing on two is not enough.

• Confusing similarity to a protected mark. Your registered trademark, service mark, or other recognized right must be confusingly similar to the disputed domain. Chinese trademark registrations are the clearest anchor, but international registrations designating China and well-known brand status recognized under Chinese practice also qualify. Panels compare the domain string to the mark, disregarding the zone suffix and obvious additions such as hyphens or generic terms like "shop" or "store."
• No rights or legitimate interests. The burden here is effectively reversed in practice: once the complainant makes a prima facie showing that the registrant lacks a plausible basis for the registration, the registrant must produce affirmative evidence of one of the recognized safe harbors – a bona fide offering of goods or services under the name before notice of the dispute, common knowledge by that name, or legitimate noncommercial or fair use.
• Bad faith in registration or use. The CNDRP reads "registered or used" in bad faith, which is meaningfully broader than the UDRP's cumulative "registered and used" standard. That single word – "or" – gives complainants an additional foothold where, for example, a domain is registered in clear anticipation of a mark's launch in China but has been passively held since. Under the UDRP, passive holding cases require additional circumstantial evidence; under the CNDRP, registration alone in bad faith can suffice.

For a serial cybersquatter, the third element is frequently the easiest to establish. Prior ADNDRC orders against the same registrant, evidence of a broad portfolio of mark-matching domains, or documented ransom demands – even for a different name in the portfolio – all feed directly into the bad-faith analysis.

For an assessment of whether your mark, your evidence, and the registrant's conduct meet these three elements under the CNDRP, contact info@cognomenlaw.com.

How does the CNDRP process work from filing to transfer?

A standard .cn dispute proceeds in five stages: complaint submission, formal compliance review, notification to the registrant, the response window, panelist appointment, and the written decision followed by registrar implementation. The 20-day response window begins when the ADNDRC formally commences the case – a date that follows, not accompanies, the initial filing.

Each stage carries its own practical demands. On the complainant's side, the filing must include the complaint in the agreed language, certified copies of trademark registrations, evidence of the registrant's conduct (screenshots, WHOIS records, correspondence, the ransom demand if one was made), and a clear argument on all three elements. Filing an incomplete complaint triggers a deficiency notice that pauses the timeline – worth avoiding when the registrant is actively monetizing the domain.

A single-panelist case in a straightforward matter is typically resolved within roughly two months of submission. Three-member panels take longer, because appointment and deliberation require alignment among three independent arbitrators. For a serial cybersquatter with a documented portfolio, a single-member panel usually suffices, because the bad-faith pattern is objective and relatively mechanical to establish once the evidence is organized.

If the panel orders transfer, the ADNDRC notifies CNNIC, which instructs the registrar to implement the order. There is a short implementation period during which the losing registrant may seek a stay by filing for judicial review in the relevant Chinese court – a route that is available in principle but rarely pursued where the panel's reasoning is well-grounded in the evidence. The only two remedies available are transfer to the complainant or cancellation of the registration; no monetary award is possible through this channel.

In a recent matter (a .cn portfolio dispute, autumn 2024), we assembled complaint packages covering multiple domains registered by the same entity, used prior ADNDRC orders against that registrant as direct bad-faith evidence, and secured transfer orders for each name in the batch. The registrant defaulted, which is common among serial squatters who hold domains speculatively with no real intent to defend.

What evidence is decisive in a serial cybersquatter case?

Evidence that proves identity, conduct, and intent – in that order – is decisive. For a serial cybersquatter, the evidentiary picture is often richer than in a single-domain dispute, because the pattern itself is probative.

Priority evidence includes: (1) your trademark certificate predating the domain registration, with a certified translation if in a language other than Chinese or English; (2) WHOIS records showing the registrant's name, organization, and email address across all domains in the portfolio – linking the specific domain to the larger pattern; (3) prior ADNDRC or UDRP decisions against the same registrant or the same registrant's alter-ego entities; and (4) any direct communication, including demand emails, broker messages, or marketplace listings pricing the domain above your reasonable out-of-pocket costs.

What about domains that have been passively held? Passive holding – pointing the domain to a parking page or leaving it inactive – is not a defense under the CNDRP. Panels have consistently interpreted passive holding by a known serial registrant, particularly in combination with a large portfolio of mark-matching names, as consistent with the intent to sell to the mark owner or to disrupt a competitor. The "or used" language of the CNDRP specifically accommodates this reading.

One evidentiary trap to watch: if the registrant holds a Chinese trademark registration in the same or an adjacent class, the CNDRP analysis becomes more contested. A trademark registration is not itself a free pass – panels have declined to treat clearly abusive trademark filings as bona fide rights – but it forces a more detailed argument on element two. Verifying the registrant's Chinese trademark portfolio in advance of filing allows you to draft proactively around any registrations they may invoke as a defense.

How does the CNDRP compare to a parallel UDRP filing for the same brand attack?

The comparison is one we address in almost every cross-zone brand protection matter. When a serial cybersquatter holds both a .com and a .cn for the same mark, two separate proceedings are required – there is no single filing that covers both zones. The UDRP governs the .com; the CNDRP governs the .cn. They must run independently, at separate forums, on separate timelines.

That separation creates a sequencing decision. Filing simultaneously keeps the pressure on across both zones and prevents the registrant from transferring a domain mid-proceeding; filing the .com first, with a WIPO UDRP complaint (filing fee USD 1,500 for a single-member panel covering one to five domains), allows you to use any resulting WIPO decision as additional bad-faith evidence in the subsequent .cn complaint. Neither sequence is universally better – it depends on whether the brand exposure in .cn or .com is more urgent.

If the registrant has already initiated judicial review of a CNDRP decision or if ownership is disputed through Chinese corporate structures, a parallel action in the relevant Chinese court may be the only route to final resolution. That litigation requires local litigation counsel in the relevant jurisdiction, and the timeline and cost profile are materially different from the administrative channel. We coordinate that handoff when the dispute warrants it.

For brand owners uncertain which zone to prioritize: assess where the infringement is causing active harm – where customers are being redirected or where the domain is being listed for sale – and address that zone first. An ADNDRC complaint can be suspended by agreement if a related court action is underway, preserving the administrative route while the court question is resolved.

To weigh UDRP against the CNDRP or a court action for your case, email info@cognomenlaw.com.

How are fees structured for a .cn cybersquatter complaint?

Fees in a .cn dispute split into two categories: the ADNDRC official filing fee and the legal fee for preparation and representation. These are entirely separate and should be budgeted independently.

The ADNDRC fee structure is published separately from the WIPO and Forum schedules. As an ADNDRC proceeding, the official fees follow CNNIC-approved rate schedules – confirm the current figure directly with the ADNDRC or with counsel prior to filing, as rates and currency terms can shift. For reference, the ADNDRC's fees for comparable regional ccTLD disputes are generally in a lower range than WIPO's published USD 1,500 single-panel entry point, which covers only gTLD proceedings. Do not assume the WIPO fee schedule applies to the ADNDRC.

Legal fees for a well-prepared CNDRP complaint covering a serial cybersquatter fact pattern – where the portfolio evidence must be organized, prior orders must be located and translated, and the three elements argued in full – are more involved than a bare single-domain complaint. In the market, complaint preparation by specialist counsel in cases of this type typically falls in the USD 3,000 to USD 7,000 range, depending on the number of domains, the volume of portfolio evidence, and whether translation of Chinese-language trademark records or prior decisions is required. That is a market range, not a COGNOMEN quote; actual costs depend on the specifics of your matter.

Where multiple domains are held by the same serial registrant, consolidating them into a single complaint is often possible and cost-efficient. A single complaint can cover multiple domains registered by the same entity, avoiding duplicate filing fees and allowing the panel to treat the entire pattern as a unified bad-faith course of conduct.

What if the registrant tries to transfer the domain during the proceeding?

Domain transfers during a pending CNDRP proceeding are prohibited by CNNIC's registration rules once the complaint has formally commenced. The registrar is placed on notice, and the domain is locked against outgoing transfers. This lock mirrors the mechanism familiar from the UDRP, where the registrar implements a "registrar lock" on commencement. Practically, this means the window of risk is between your discovery of the abusive registration and the formal commencement of proceedings – another argument for moving to file promptly rather than entering extended direct negotiations with the registrant.

Serial cybersquatters sometimes attempt to transfer a domain between related entities or to a nominee before a complaint is served, hoping that a change of registrant will disrupt the bad-faith narrative. CNDRP panels have consistently treated such transfers, where timed close to a foreseeable complaint, as themselves probative of bad faith rather than as a disruption to the proceeding. Document the WHOIS history carefully at the outset; archived WHOIS records showing prior registrant details are standard elements of the evidence package we assemble for these filings.

In an earlier matter (a .cn brand-protection case, spring 2025), the registrant transferred the domain to a different entity immediately after receiving informal notice of a planned complaint. We documented the transfer chain, demonstrated the common beneficial ownership across the entities, and the panel treated the transfer as additional evidence of bad faith. Transfer was ordered.

Related at COGNOMEN

• UDRP Domain Recovery – recover .com and gTLD domains through WIPO, the Forum, and CAC
• FAQ: Recovering a domain after a buyback group approach – when UDRP is a better path
• Respondent and RDNH defense – protecting a legitimate registration against an abusive complaint