Cybersquatting is the bad-faith registration or use of a domain name that is identical or confusingly similar to someone else’s trademark or brand, in order to profit from it.
How cybersquatting works
Domain names are registered on a first-come, first-served basis, so anyone can buy a name containing a famous brand. Cybersquatters use such domains in several ways:
- offering them for sale to the brand owner at an inflated price;
- parking them with pay-per-click advertising that profits from the brand’s traffic;
- hosting phishing pages, fake shops or counterfeit goods;
- sending emails that impersonate the company.
Common patterns include the brand with another top-level domain (.co, .shop, .app), added words such as “login”, “support” or “-secure”, and misspellings – the latter known as typosquatting. Lookalike Unicode characters are used in IDN homograph attacks.
Why cybersquatting matters
For security teams, cybersquatted domains are a key infrastructure for phishing, business email compromise and malvertising. New lookalike domains often appear within hours of major events, product launches or data breaches. For brand owners, they mean lost traffic, reputational damage and customer fraud.
How to fight cybersquatting
- Register key variants of your brand and common TLDs in advance.
- Monitor new domain registrations and Certificate Transparency logs for names containing your brand.
- Use ICANN’s Uniform Domain-Name Dispute-Resolution Policy (UDRP, 1999), handled by providers such as the WIPO Arbitration and Mediation Center, to recover infringing domains; in the US, the Anticybersquatting Consumer Protection Act (1999) also applies.
- Ask registrars and hosting providers to take down domains used for phishing, and protect your own domains against domain hijacking.
