Appeal Start Protection
Home  /  Services  /  Domain Abuse
VIOLATION TYPE / DOMAIN ABUSE

Domain Abuse & Cybersquatting

Cybersquatting is the registration of domain names that incorporate a brand's trademark or trade name with the intent to profit from the brand's reputation — through resale, advertising, phishing, or counterfeit commerce. It's also the launching pad for nearly every other digital brand attack.

What it is

Registration of brand-adjacent domains for misuse or extortion.

Where it happens

gTLDs (.com/.net/.shop), ccTLDs, look-alike spellings, internationalized domains.

How we stop it

UDRP, URS, registrar abuse channels, browser blocklists, registry lock.

Overview

Every counterfeit storefront, phishing site, and brand-impersonator account ultimately needs an address — and that address is usually a domain or subdomain. Cutting off the domain layer disrupts the entire downstream operation.

CEUIG maintains continuous monitoring across newly registered domain feeds, certificate transparency logs, and ccTLD zone files to spot brand-adjacent registrations the moment they appear.

Real-World Examples

Domain abuse patterns we shut down every day

  • Typosquats: single-character variants like nikee.com, g00gle-store.com.
  • Brand-plus-keyword: brand-outlet.com, buybrandcheap.shop, brand-uk-sale.store.
  • Internationalized lookalikes using Cyrillic or other scripts that resemble Latin letters.
  • Subdomain spoofs like brand.payment-secure.com exploiting trusted-host TLDs.
  • Defensive resale sites listing brand-relevant domains for sale at extortionate prices.

How We Enforce

  • UDRP & URS. WIPO and Forum complaints for clear bad-faith registrations, typically resulting in transfer to the brand.
  • Registrar abuse. Direct relationships with the major registrars for fast suspension of fraud-supporting domains.
  • Registry lock. Where supported, we lock recovered domains at the registry level to prevent future hijack.
  • Browser blocklisting. Where takedown takes time, we neutralize traffic via Safe Browsing and SmartScreen.
  • Defensive registration. Strategic registration of high-risk variants on the brand's behalf.

Evidence Required

  • Trademark registrations evidencing the rights asserted.
  • Screenshots of the infringing site or DNS configuration.
  • Evidence of bad-faith intent where available (resale listings, phishing content, etc.).

Typical Timeline

  • Registrar abuse suspension: 24–96 hours.
  • URS expedited transfer: 14–21 days.
  • UDRP transfer: 45–60 days.

FAQ

Should we defensively register every variant?
No — the combinatorial space is infinite. We help clients prioritize the highest-risk variants and rely on UDRP / URS / registrar action for the rest.
What about new gTLDs?
We monitor all delegated gTLD zones daily so brand registrations are caught at the point of resolution, not after they've gone live.

Seeing this violation against your brand?

Our enforcement team can issue a takedown notice within hours of evidence submission.

Submit a Case