How to recover a .group domain from a serial cybersquatter

How to recover a .group domain from a serial cybersquatter. UDRP and ccTLD domain recovery and defense across .group. Email the firm to assess your case.

A stranger registers a .group domain that matches your brand — then lists it for five figures on an aftermarket platform while you discover they hold dozens of similar names across other zones. You recognize the pattern. So do UDRP panels. The question is what it takes to recover a .group domain from a serial cybersquatter, and how quickly it can move.

To recover a .group domain under the UDRP, you must satisfy all three elements of Paragraph 4(a): that the domain is identical or confusingly similar to a mark you hold, that the registrant has no rights or legitimate interests, and that it was registered and is being used in bad faith. A serial cybersquatter's pattern of abusive registrations is itself evidence of bad faith under Paragraph 4(b). The WIPO filing fee starts at USD 1,500 for a single-member panel, and a standard case resolves in approximately two months. The only remedies are transfer or cancellation.

This page covers the governing rules for .group, the evidence that decides the outcome, the step-by-step process, and how to choose between WIPO, the Forum, and other routes.

What governs .group disputes, and why the UDRP applies

The .group extension is a new generic top-level domain (gTLD). Like all ICANN-accredited registrars operating new gTLDs, the registrar servicing .group domain registrations is contractually bound to follow the UDRP. That means the same three-element test that governs .com recovery governs .group recovery. There is no separate national procedure to navigate and no registry-specific carve-out.

WIPO and the Forum together account for roughly 97% of all UDRP proceedings. Either is available for .group complaints. WIPO's case administration is the most widely recognized, and its published fees cover single-member panels for one to five domains at USD 1,500. The Forum's entry rate begins around USD 1,300 for one to two domains before a single-member panel. The Czech Arbitration Court (CAC) offers the lowest entry point, beginning around USD 500–800, though it handles a smaller share of the overall caseload.

We regularly advise brand owners who assume .group falls outside the UDRP because it is a newer extension. It does not. The same Policy that has governed .com disputes since 1999 applies here without modification.

How does a serial cybersquatter pattern affect all three UDRP elements?

A serial cybersquatter is a registrant who holds multiple domains matching third-party marks across zones or gTLDs, typically to extract payment rather than to operate a legitimate business. That pattern changes the evidentiary picture for each element of Paragraph 4(a) — usually in the complainant's favor.

On the first element, the analysis is straightforward if you hold a registered trademark. The .group suffix is treated as a functional part of a domain string for domain-name purposes, so a domain incorporating your mark (or a near-identical variant) satisfies the confusing similarity requirement regardless of the extension. Unregistered trademark rights or common-law marks can also satisfy this element, though the evidentiary burden is higher.

On the second element — no rights or legitimate interests — a pattern of cybersquatting reinforces the case that the registrant has no bona fide use for your particular name. Panels examine whether the registrant is commonly known by the domain name, whether it was used in a bona fide offering before any dispute notice, and whether the use qualifies as legitimate noncommercial or fair use. A serial cybersquatter holding dozens of brand-matching names across multiple registrants satisfies none of those safe harbors under Paragraph 4(c).

On the third element — bad faith registration and use — Paragraph 4(b) explicitly lists a pattern of registering domains to prevent mark owners from reflecting their marks in domain names as a non-exhaustive bad-faith indicator. That provision was drafted precisely for this fact pattern. A documented history of prior UDRP findings against the same registrant, even in different zones, can be introduced as evidence. Panels have consistently held that passive holding of a domain matching a well-known mark, with no credible explanation for registration, satisfies the bad-faith use requirement even without active misleading use.

For an assessment of whether the three UDRP elements are met in your .group dispute, contact info@cognomenlaw.com.

What evidence decides the outcome against a serial cybersquatter?

Evidence quality separates a strong UDRP complaint from a dismissed one. The legal test does not change because the respondent is a known bad actor — the complaint still carries the burden of proof on each element, and panels require documentation, not assertion.

The following evidence is most material in a serial cybersquatter case involving .group:

• Trademark registration certificates (or for unregistered marks, evidence of use, reputation, and priority) showing the complainant's rights predate the .group registration.
• WHOIS or RDDS records showing the registrant's identity and the registration date of the disputed domain.
• Prior UDRP decisions against the same registrant or the same cluster of registrant names — panels give weight to a documented history of abusive registrations.
• Aftermarket listings showing the domain was offered for sale at a price exceeding the documented cost of registration — Paragraph 4(b) identifies that circumstance explicitly as a bad-faith indicator.
• Other domain registrations by the same registrant that mirror third-party marks — a pattern across five, ten, or dozens of domains is considerably more persuasive than a single instance.
• Communications from the registrant demanding payment — an email citing a specific buy-back price above registration cost is among the cleanest bad-faith proofs available.

In our practice, the cases that fail or earn a reduced panel confidence are those where the complainant relies on bare assertion of fame without documentary support, or where the trademark post-dates the domain registration. Post-dating is not automatically fatal — panels can find bad faith where the registrant registered in clear anticipation of a predictable mark — but it requires more careful argumentation.

A useful working discipline: build the evidence file before drafting the complaint, not after. Aftermarket listings disappear. RDDS records are time-stamped. Communication screenshots degrade in admissibility if captured carelessly.

What is the step-by-step UDRP process for a .group recovery?

The procedural path is governed by the UDRP Rules and the supplemental rules of whichever forum you select. It runs in five stages.

1. Complaint drafting and filing. The complaint must address all three elements, identify the domain, name the registrant, and attach the evidentiary exhibits. It is filed with the chosen provider — WIPO, the Forum, or another accredited body — together with the filing fee. The forum conducts an administrative compliance check before formally commencing the case.
2. Commencement and notice to respondent. Once the complaint passes compliance review, the forum notifies the registrant and the registrar. The registrar is required to lock the domain, preventing transfer while the case is pending. From formal commencement, the respondent has 20 days to file a response.
3. Panel appointment. If the respondent files a response, or defaults, a panelist is appointed from the forum's roster. Either party may request a three-member panel; the requesting party bears the cost differential, though the parties generally split the higher fee when both request it. A three-member panel costs USD 4,000 at WIPO for a single-member complainant request escalated by the respondent.
4. Decision. The panel reviews the record, applies the three-element test, and issues a written decision. A standard WIPO expedited case can produce a decision in approximately one month; a standard case resolves in roughly two months. The panel may transfer, cancel, or deny the complaint.
5. Registrar implementation. If the panel orders transfer, the registrar implements the transfer after a brief waiting period — giving the respondent time to seek court intervention if it chooses — unless the respondent initiates litigation, which would stay the transfer.

The only remedies available are transfer or cancellation. There are no monetary damages, no costs awards, and no injunctive relief available through the UDRP. If you need damages or an injunction, a court route is the path — see the cross-zone section below.

To plan the filing strategy for your .group complaint and select the right forum, email info@cognomenlaw.com.

How do WIPO, the Forum, and other paths compare for .group?

Choosing between forums matters more than many complainants assume. Forum choice affects cost, timeline, and — because panels are drawn from each provider's roster — sometimes the feel of the reasoning in close-call cases.

If the domain is a .group and you want it transferred, the UDRP at WIPO or the Forum is the established path. WIPO's fees begin at USD 1,500 for a single-member panel; the Forum begins around USD 1,300. Both deliver decisions in roughly two months for standard cases. WIPO offers an expedited option targeting a decision in approximately one month, available for single-panel cases covering up to five domains — a relevant consideration when a serial cybersquatter has registered multiple .group names tied to your brand in one sweep.

CAC has the lowest entry fee but commands a smaller share of the caseload. For a clean, single-domain case against a known serial actor, CAC is a legitimate option if cost is the primary driver. For a multi-domain complaint — say, a serial cybersquatter who registered your brand name across .group, .team, and .company simultaneously — WIPO or the Forum is the practical choice because the multi-domain filing rules and panel depth are well established there.

What if the same registrant also holds a .com or a ccTLD version of your mark? The UDRP covers .com and other gTLDs. A single complaint can cover multiple domains if the registrant of record is the same holder. That consolidation can reduce both filing fees and the time spent managing parallel proceedings. Where the parallel domain is a country-code name — say, a .de or a .uk — a separate national procedure applies; the German courts govern .de disputes, while Nominet's DRS governs .uk. Those proceedings do not merge with a UDRP filing. We handle each track simultaneously with local litigation counsel for court matters where appropriate.

A court route under US anticybersquatting legislation is available where the registrant is subject to US jurisdiction and you want monetary relief — something the UDRP cannot provide. That path is slower and substantially more expensive, but it is the only route that reaches damages. For .group specifically, most practitioners begin with the UDRP unless damages are a stated objective or the registrant has signaled intent to litigate.

In a recent matter — a .group and .company two-domain complaint, spring 2025 — we filed a consolidated complaint at WIPO against a registrant whose prior UDRP history included approximately fifteen prior findings across different zones. The panel transferred both domains in a single decision. Total elapsed time from filing to transfer order: roughly nine weeks.

What are the realistic costs, and what drives them up?

Cost in a UDRP matter has two separate components: the forum's official filing fee and the legal fee for drafting and prosecuting the complaint. They are quoted and billed separately.

The forum filing fee for a .group complaint before a single-member panel is USD 1,500 at WIPO and approximately USD 1,300 at the Forum. Those figures are set by the provider, not by counsel. A three-member panel at WIPO costs USD 4,000 for a complainant-requested panel on a one-to-five-domain filing.

Legal fees for a straightforward single-domain UDRP complaint typically run in the USD 3,000–7,000 range in the market, depending on complexity and counsel. A serial cybersquatter case is rarely the simplest end of that range — assembling prior UDRP history, documenting the registration pattern, and drafting the argument on the pattern-of-conduct limb of Paragraph 4(b) requires more work than a basic single-name, single-use complaint.

What drives costs up? A contested three-member panel request from the respondent adds the fee differential. A multi-domain complaint covering five or more names is priced on a per-domain schedule. Supplemental filings, if a panel grants leave, add time and drafting fees. And a case where the trademark predates the domain only narrowly, or where the complainant's mark is weak, will require more factual argumentation than a case with a famous registered mark and a clear aftermarket listing.

WIPO offers a partial refund — commonly around USD 1,000 of a USD 1,500 fee — where a case is withdrawn or terminated before panel appointment. If a serial cybersquatter backs down on receiving the complaint and offers to transfer the domain, that refund partially offsets the filing expenditure.

What should a respondent facing a .group UDRP expect?

Not everyone reading this page is the brand owner. If you registered a .group domain in good faith and have now received a UDRP complaint — whether from a legitimate brand owner or a complainant overreaching their mark rights — the same 20-day response window applies from the date of formal commencement.

A default — failing to respond — does not automatically result in transfer. The panel still evaluates the complaint on its merits. But defaulting forfeits the opportunity to place your evidence before the panel, and panels are more likely to accept a complainant's version of contested facts when the respondent offers none. We have defended registrants who were misidentified as serial cybersquatters, including cases where the respondent held the name for legitimate business reasons and had no prior UDRP history whatsoever.

Where a complaint is filed without a bona fide mark, without evidence of bad faith, or where the complainant's primary purpose is to deprive a legitimate registrant of a name it lawfully holds, a panel may issue a finding of Reverse Domain Name Hijacking (RDNH). An RDNH finding carries no monetary penalty, but it creates a public record in the UDRP case database that reflects on the complainant's conduct. We pursue RDNH where the record supports it.

Is every .group complaint against a serial cybersquatter legitimate? No. The label is sometimes applied loosely by complainants who have not verified registration motive, whose marks are narrow, or whose timing is opportunistic. The respondent's evidence of good-faith use and independent registration reason remains decisive.

Related at COGNOMEN

• UDRP domain recovery — the full guide to filing a complaint across all gTLD zones
• How to recover a domain from a passive holder — evidence and strategy
• FAQ: What if the domain was registered before your trademark?