[ Technical ]

Domain Squatting and Cybersquatting: What They Are and What to Do

Not all domain squatting is illegal. The line between speculation and cybersquatting depends on trademark status, intent, and timing. Here is how to tell the difference.

· · 7 min read

Domain Squatting and Cybersquatting: What They Are and What to Do

Domain squatting gets discussed as if it is a single thing. It is not. There is a meaningful legal and ethical difference between registering a domain speculatively (legal), registering a trademarked brand name to extort the trademark holder (illegal), and registering a name similar to a well-known brand to confuse users (illegal). Understanding the distinction matters whether you are buying domains or protecting your brand.

Domain Speculation (Legal)

Registering a generic or descriptive domain name with the intent to resell it at a profit is legal. It has been legal since the beginning of commercial domain registration.

Example: registering cloudstorage.com in 2010 and selling it to a storage company in 2025 is speculation. The name has no trademark holder, and no specific company owns the concept.

Example: registering solarenergy.ai today, before any company has established trademark rights to that specific string, is speculation.

The key factors that make speculation legal:

  • No existing trademark on the exact term in the relevant category
  • The registered name is generic, descriptive, or a coined word without prior association
  • No intent to deceive or defraud a specific brand

Cybersquatting (Illegal)

Cybersquatting is the practice of registering a domain that corresponds to a known trademark with bad faith intent — typically to sell it to the trademark holder at a premium, or to misdirect their customers.

The US Anticybersquatting Consumer Protection Act (ACPA) and ICANN's Uniform Domain Name Dispute Resolution Policy (UDRP) both address this. UDRP is the more commonly used mechanism globally because it is faster and cheaper than court litigation.

For a UDRP complaint to succeed, the complainant must prove:

  1. The domain is identical or confusingly similar to a trademark they own
  2. The registrant has no legitimate rights or interests in the domain
  3. The domain was registered and is being used in bad faith

"Bad faith" indicators include: offering to sell the domain to the trademark holder at a price exceeding registration costs, using the domain to attract traffic by creating confusion with the trademark, registering a pattern of brand-matching domains.

Typosquatting

A subset of cybersquatting where the domain is a deliberate typo or near-miss of a well-known brand: amaz0n.com, gooogle.com, paypa1.com. These are registered to intercept users who mistype the real URL.

Typosquatting is illegal under ACPA and actionable under UDRP. Major brands actively monitor for new registrations matching their name patterns and file complaints quickly.

What to Do If Someone Is Squatting Your Brand

Option 1: Buy it. If the price is reasonable and the squatter has no intent beyond resale, buying it is often the fastest resolution. Get pricing through the registrar's "make offer" feature.

Option 2: File a UDRP complaint. Cost: $1,500–$4,000 depending on the dispute resolution provider (WIPO is most common). Outcome: domain transfer to you or cancellation. Timeline: roughly 60 days. Success requires a valid trademark — a registered trademark is strongest, but common law trademark rights (established through commercial use) can qualify.

Option 3: File under ACPA. US federal court litigation. More expensive and slower than UDRP, but allows for damages up to $100,000 per domain. Appropriate for organised squatting operations with multiple domains.

Option 4: Do nothing. If the squatted domain is dormant, has no traffic, and doesn't create meaningful confusion, letting it sit while building your brand on a clean domain may be the right call. Not every squatted domain is worth the cost of a UDRP proceeding.

Protecting Your Brand Proactively

Register your brand name across the TLDs most likely to be used for squatting before someone else does. At minimum: .com, .net, .org, and any new gTLD relevant to your category.

The cost is $50–$100/year for defensive registrations. A UDRP proceeding starts at $1,500. The math is straightforward.

BatchDomain makes this a fast check: paste your brand name as domain candidates across 10 TLDs and see what's available and what isn't in one pass. Register the available ones. Evaluate whether to pursue the taken ones based on what the current registrant is doing with them.