How to recover a .info domain from a serial cybersquatter

A stranger registers the .info version of your brand, points it at a pay-per-click parking page, and emails you a buy-back demand in the five-figure range. Sound familiar? Serial cybersquatters operate at scale, targeting dozens of marks in a single registration sweep and betting that most brand owners will either pay or walk away.

To recover a .info domain from a serial cybersquatter you must satisfy all three elements of Paragraph 4(a) of the UDRP: the domain is confusingly similar to your trademark, the registrant has no rights or legitimate interests in the name, and the domain was registered and is being used in bad faith. A serial registration history is among the strongest bad-faith indicators panels recognize under Paragraph 4(b). A standard WIPO case runs about two months from filing to a transfer order, with a filing fee starting at USD 1,500.

This page walks the applicable rules for .info, the evidence that decides the outcome, the forum options, and the practical steps to file – because the reader who reaches this page is ready to act, not still researching whether the UDRP exists.

Why does the UDRP apply to .info domains?

The UDRP applies to .info because .info is an ICANN-accredited generic top-level domain, and every registrar that sells .info registrations operates under a registration agreement requiring UDRP submission. That covers every .info domain, regardless of where the registrant is located or what registrar was used.

This matters practically. A serial cybersquatter who registered your .info name through a registrar in a jurisdiction with weak trademark enforcement is still subject to a WIPO, Forum, CAC, or ADNDRC proceeding filed from anywhere in the world. There is no jurisdictional barrier for the complainant. The registrant cannot opt out of the Policy once the domain is active.

.info launched as an unrestricted gTLD intended for informational content. Panels have consistently treated .info identically to .com for UDRP purposes – the same three-element test, the same defenses, and the same remedies. That uniformity is useful: if you already have trademark registration evidence ready for a .com dispute, it transfers directly to a .info complaint.

What makes a registrant a "serial cybersquatter" – and why does that matter?

A serial cybersquatter, in panel usage, is a registrant with a demonstrated pattern of registering domain names that correspond to third-party trademarks, either to sell them, to disrupt the mark owners' operations, or to monetize traffic generated by user confusion. That pattern is a listed bad-faith factor under Paragraph 4(b) of the UDRP.

The significance for your case is evidentiary. Proving a pattern of abusive registrations – using WHOIS/RDDS data, prior UDRP decisions against the same registrant, and registration histories showing clusters of trademarked terms – can reduce the factual burden on the "registered in bad faith" limb. Where the respondent is a known serial actor, panels have consistently held that the inference of bad-faith registration at the time of registration is strong, even when the domain was briefly parked rather than actively used for a competing service.

We regularly advise brand owners who discover that the respondent in their prospective .info complaint holds hundreds of domains bearing third-party marks. That discovery is not discouraging – it is a strategic asset. Building the pattern evidence is a core part of what we do at intake.

To get an early read on whether the three UDRP elements are met for your .info domain, reach us at info@cognomenlaw.com.

How do the three UDRP elements apply to a .info serial cybersquatting case?

Each of the three Paragraph 4(a) elements must be proven – a strong showing on two cannot cure a failure on the third. Here is how they play out against a serial cybersquatter.

Element one: confusing similarity to your trademark

This is typically the simplest element. The panel compares the domain name – without the .info extension – to your registered or common-law mark. Identical spelling is sufficient. Typosquatting variants (transposed letters, added hyphens, pluralization) also satisfy the element once the panel identifies the mark being targeted. In our practice, we have yet to see a serial cybersquatter who chose a domain that was genuinely distinct from the targeted mark.

Your trademark does not need to be registered in the respondent's home jurisdiction, or even registered at all, though registration in any jurisdiction strengthens the claim considerably. What matters is that rights exist and predate the registration of the domain – at least in the usual case. Where the domain was registered before your trademark, the analysis shifts and the outcome is less predictable.

Element two: no rights or legitimate interests

The complainant carries the initial burden on this element, but it shifts to the respondent once a prima facie case is established. The three safe harbors in Paragraph 4(c) – a bona fide offering before notice, being commonly known by the name, and legitimate noncommercial or fair use – rarely shelter a serial cybersquatter. Pay-per-click parking revenue from a domain that trades on someone else's trademark is not a bona fide offering. Panels have consistently rejected that argument.

Where the respondent defaults and files no response, the panel may draw adverse inferences from silence. Default is common with serial actors, particularly when the dispute economics favor walking away rather than defending.

Element three: registered and used in bad faith

This is the cumulative element – both registration in bad faith and ongoing use in bad faith must be shown. For a serial cybersquatter, Paragraph 4(b) provides the sharpest tools. A pattern of abusive registrations, evidence that the domain was registered primarily to sell to the trademark owner, and use for commercial gain through confusion with the mark are all listed indicators. Any one of them may suffice; a serial registrant with a documented history across multiple prior UDRP decisions typically satisfies this element on the pattern evidence alone.

Passive holding – registering a domain and doing nothing visible with it – does not automatically defeat the bad-faith element. Panels have consistently held that passive holding combined with an offer to sell to the mark owner, or combined with a registrant who has no plausible legitimate use for the name, can constitute bad-faith use.

What evidence do you need to file a successful .info UDRP complaint?

Evidence is the variable that separates strong complaints from marginal ones. The forum – WIPO, the Forum, CAC, or ADNDRC – cannot investigate independently. Everything the panel sees comes from the complaint and, if filed, the response.

For a .info serial cybersquatter case, assemble the following before filing:

• Trademark certificates or proof of rights: registration certificates, priority filings, or evidence of common-law use predating the domain registration date.
• WHOIS/RDDS records: showing the current registrant, the registration date, and ideally historical registrant data if the domain has changed hands.
• Screenshots of the domain's current use: parking pages, pay-per-click links, redirect destinations, or offer-to-sell pages – all with full URL, date stamp, and metadata preserved.
• Pattern evidence: other UDRP decisions involving the same registrant, other domains in the registrant's portfolio bearing third-party marks, and registration dates showing a pattern of activity.
• Buy-back correspondence: any communication from the registrant offering to sell the domain, with timestamps. A five-figure demand addressed to a trademark owner is textbook Paragraph 4(b) evidence.
• Domain registration date vs. trademark priority date: a clear timeline showing the mark predates the domain. Panels confirm this fact first.

Missing evidence can be substituted for with a well-reasoned inference argument, but that approach depends on panel discretion. Building a complete evidentiary record is the lower-risk path.

Which forum should you use – and is WIPO always the right choice for .info?

The UDRP allows a complainant to choose any ICANN-approved provider. For a .info domain, the practical options are WIPO, the Forum, CAC, and ADNDRC. WIPO and the Forum together account for roughly 97% of all UDRP proceedings, and for most .info serial cybersquatter cases, WIPO is the default for good reason: its jurisprudential record on serial registrant cases is the deepest and most consistently reasoned.

The right route depends on your situation.

If the domain is a single .info and the case is factually clean – clear mark, clear pattern evidence, no contentious jurisdictional argument – WIPO at USD 1,500 for a single-member panel is efficient. WIPO also offers an expedited option for single-panel cases covering up to five domains, delivering a decision in about one month. That is relevant when a serial squatter has registered your mark across multiple .info variants simultaneously.

If the serial cybersquatter has registered your .info alongside companion registrations in .com, .net, and other gTLDs held under the same registrant name, a single UDRP complaint can cover multiple domains. All domains must share the same registrant of record. Filing one complaint for a cluster of related domains reduces total fees and produces a single decision addressing the entire pattern.

If you also need damages – not just a transfer – the UDRP cannot help. It awards only transfer or cancellation. A US anticybersquatting action in court is the route to monetary relief, handled in that jurisdiction with local litigation counsel. That path is substantially more expensive and slower, but it is the only path if compensation is part of your objective.

The Forum charges filing fees beginning around USD 1,300 for one or two domains with a single-member panel. CAC begins lower – around USD 500–800 – making it worth considering for budget-constrained complainants with straightforward evidence. ADNDRC is a viable option, particularly where the parties are in the Asia-Pacific region, at fees comparable to the Forum.

In our practice, the forum selection for a .info serial cybersquatter case usually comes down to three factors: the volume of domains in the complaint, the degree to which the respondent is known to WIPO panels from prior decisions, and the complainant's timeline requirements. We work through that analysis at the outset of every matter.

To weigh WIPO against the Forum or to assess whether a multi-domain complaint covers all the variants you need recovered, email info@cognomenlaw.com.

How long does a .info UDRP case take from filing to transfer?

A standard .info UDRP proceeding is normally completed within about two months of the date the complaint is filed, absent procedural complications. That timeline is structured, not discretionary. The respondent has 20 days to file a response once the case commences. After the response window closes – whether or not a response was filed – the provider appoints a panel and sets a decision deadline.

In practice, the five stages – complaint acceptance, commencement, response period, panel appointment, and decision – run sequentially. A serial cybersquatter who defaults does not accelerate the timeline; the panel appointment and deliberation still take their full course. What it does change is the briefing workload on both sides, which typically simplifies the decision for the panel.

Once a transfer order is issued, the registrar is notified and must implement the transfer within a set period, subject to any stay period during which the registrant could initiate court action to challenge the result. In practice, a registrant with a pattern of UDRP losses rarely pursues that court challenge.

In a recent matter – a .info typosquat cluster against a consumer-brand registrant, spring 2025 – we filed a single WIPO complaint covering three domains registered by the same serial actor and received a transfer order approximately eight weeks after filing. The respondent defaulted. Pattern evidence from prior panel decisions involving the same registrant was a significant part of the record.

What does a .info UDRP complaint actually cost – all in?

There are two distinct cost components: the forum filing fee and the legal fee. They are independent, and conflating them is a common source of confusion for first-time complainants.

The forum filing fee goes directly to the provider. At WIPO, the standard rate is USD 1,500 for one to five domains on a single-member panel, or USD 4,000 for a three-member panel covering the same range. If you withdraw or the case terminates before panel appointment, WIPO typically returns a significant portion of that fee. The Forum's entry-level fee begins around USD 1,300 for one to two domains.

The legal fee – the cost of counsel preparing the complaint, the evidentiary record, and any supplemental submissions – is separate. Market rates for a UDRP complaint on a single straightforward domain typically fall in the USD 3,000–7,000 range as a flat fee, though a serial cybersquatter case with a large pattern-evidence record may fall at the higher end of that range due to the research required on the respondent's portfolio history.

If the complainant selects a single-member panel but the respondent requests a three-member panel, the parties generally split the higher three-member fee. That cost structure is worth anticipating when the respondent is a sophisticated serial actor who may elect a three-member panel as a delay tactic.

On the question of transparency: COGNOMEN publishes its fee ranges and does not quote "price on request" for standard UDRP work. What we charge is within the market range above; the specific figure depends on the number of domains, the complexity of the pattern evidence, and whether a response is expected. We discuss all of this at first contact.

What happens if the serial cybersquatter files a response – or if the complaint itself has a flaw?

A defended case is not a lost case. Serial cybersquatters sometimes file responses, particularly when the domain has commercial value and the respondent has prior experience defending UDRP proceedings. The typical defense strategy involves asserting a generic or descriptive use of the term, claiming registration for a planned legitimate business, or challenging the complainant's trademark rights. Panels routinely reject these defenses when the bad-faith pattern evidence is well documented.

The more important risk is on the complainant's side. A complaint that overstates trademark rights, ignores the respondent's registration date relative to the mark's priority, or presents incomplete evidence risks denial – and in some cases, a finding of Reverse Domain Name Hijacking (RDNH). RDNH is a finding that the complaint was itself brought in bad faith to deprive a legitimate registrant of a domain. It carries no monetary penalty, but it is a reputational mark and is published in the provider's database. Complainants with thin trademark rights who file opportunistically against a registrant who has a genuine independent use are the most common RDNH scenario.

That outcome is avoidable. The pre-filing analysis that identifies whether all three elements are properly supported is exactly the step that prevents a complaint from returning an RDNH finding rather than a transfer order.

A common myth among brand owners is that a registered trademark is automatically sufficient to win. It is not. The trademark must predate the domain registration (in the typical case), and the complainant must still prove the second and third elements independently. A mark registered after the domain was created requires a more careful argument on the bad-faith registration limb – one that panels sometimes accept but that demands a specific and well-reasoned theory of the case.

Cross-zone considerations: what if the same registrant holds companion domains in other gTLDs or a ccTLD?

Serial cybersquatters rarely stop at one domain. A registrant who took your .info frequently holds the .com, the .net, or a matching ccTLD. Each zone introduces a separate procedural question.

For companion gTLD domains – .com, .net, .org, and new gTLDs – all registered under the same WHOIS holder, a single UDRP complaint can address them together. That is usually the most efficient approach. The complaint covers the pattern across zones, and the panel issues a single decision.

For a .uk companion, the Nominet DRS applies, not the UDRP. The DRS test is "abusive registration" and – critically – the DRS reads "registered or used" abusively, a materially lower threshold than the UDRP's cumulative "registered and used in bad faith." A Nominet proceeding runs roughly 8–12 weeks and includes a free mediation stage before any expert decision is triggered. We handle Nominet DRS filings as part of multi-zone recovery strategies.

For a .de companion, there is no UDRP and no panel procedure. That dispute belongs in the German courts, with a DENIC DISPUTE entry filed to block transfer of the domain while the court action proceeds. We coordinate .de recovery with local litigation counsel in Germany.

For a .eu companion, the ADR.eu procedure through the Czech Arbitration Court applies. The remedy can include transfer if the complainant meets EU/EEA eligibility requirements.

In our practice, we see multi-zone serial cybersquatting situations regularly. A coordinated strategy – filing the UDRP first to establish the pattern record, then using that record in companion ccTLD proceedings – is often more effective than parallel simultaneous filings, though the timing depends on the urgency in each zone. We map the full portfolio at intake before recommending a sequence.

Related at COGNOMEN

• UDRP domain recovery services – the full menu of routes across all gTLD zones
• WIPO vs. the Forum: choosing the right provider for your domain dispute
• Recovering a hijacked domain in the .me zone – analysis of the recovery process

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.