Reverse Domain Name Hijacking: How to Protect Your Domains from Bad-Faith UDRP Claims

Most domain owners have heard of cybersquatting — when someone registers a domain in bad faith to profit from a trademark. But there's a growing problem on the other side: reverse domain name hijacking (RDNH), where companies abuse the dispute process to try to steal domains from legitimate owners.

In February 2026 alone, multiple RDNH findings made headlines. Let's understand what's happening and how to protect yourself.

What Is Reverse Domain Name Hijacking?

Reverse domain name hijacking occurs when a trademark holder files a UDRP (Uniform Domain-Name Dispute-Resolution Policy) complaint knowing they don't have a legitimate claim, hoping to intimidate a domain owner into giving up their domain.

The UDRP process, administered by organizations like WIPO and the Forum, was designed to combat cybersquatting. But some companies exploit it as a cheap alternative to buying a domain on the open market.

How RDNH Works in Practice

1. A company discovers that a domain matching their brand is owned by someone else
2. Instead of making an offer to buy the domain, they file a UDRP complaint
3. They claim the domain was registered in bad faith (even when it wasn't)
4. The domain owner must respond or risk losing their domain by default
5. If the panel finds the complaint was filed in bad faith, they issue an RDNH finding

Real Cases from 2026

The Frozen Produce Company

In late February 2026, a frozen agricultural products company filed a cybersquatting complaint against the owner of sunleaf.com. The panel found the domain was "obviously registered and used in good faith" and ruled the complaint constituted reverse domain name hijacking.

The Pizza Chain

A small Los Angeles pizza chain, El Centro Foods Inc., filed a UDRP complaint that was not only denied but resulted in an RDNH finding. The panel determined the pizza chain had filed the cybersquatting claim in bad faith.

The Seven-Time Winner

One company, eWeb Development Inc., has now won seven separate RDNH decisions. This means seven different trademark holders filed bad-faith complaints against domains owned by eWeb — and lost every time. Attorney Zak Muscovitch has represented eWeb in these cases, building a remarkable track record of defending legitimate domain ownership.

Why RDNH Is a Growing Problem

Several factors are driving the increase in reverse domain name hijacking:

Rising Domain Values

As domains become more valuable (consider the $70 million AI.com sale), the temptation to use UDRP as a shortcut grows. A company might rather spend $1,500 on a UDRP filing than $50,000 on a legitimate purchase.

Misunderstanding of Domain Rights

Many companies assume that having a trademark entitles them to the matching domain. It doesn't. If someone registered a domain before the trademark existed, or if the domain consists of generic words, the trademark holder usually has no claim.

Low Filing Costs

A UDRP complaint costs as little as $1,500 for a single domain. Compare that to the price of buying a premium domain, and you can see why some companies take a shot.

How to Protect Your Domains

1. Document Your Good Faith

Keep records that demonstrate your legitimate interest in the domain:

• Registration receipts showing when and why you registered the domain
• Website archives (use the Wayback Machine) showing you've used the domain
• Business plans or correspondence related to the domain's use
• Revenue records if the domain generates any income

2. Respond to UDRP Complaints

Never ignore a UDRP complaint. Default judgments almost always favor the complainant, even when the complaint lacks merit. The response deadline is typically 20 days, so act quickly.

3. Use WHOIS Privacy Wisely

WHOIS privacy protects your personal information, but make sure you can still receive notifications about disputes. Some privacy services forward UDRP notifications; others don't.

4. Know Your Rights

If a domain was registered before a trademark existed, you have strong grounds for defense. Generic word domains (like "sunleaf" or "midnight") are especially defensible because they have dictionary meanings independent of any brand.

5. Hire a Domain Attorney

If you receive a UDRP complaint, consult an attorney who specializes in domain disputes. The cost of legal representation ($2,000-$5,000 typically) is far less than the value of losing a premium domain.

What Happens When RDNH Is Found

When a UDRP panel finds reverse domain name hijacking, several things happen:

• The domain stays with the owner — the complaint is denied
• The finding is published — it becomes part of the public UDRP record
• Reputational damage — the complainant is publicly identified as having filed in bad faith
• Potential legal liability — in some jurisdictions, RDNH findings can support claims for damages in court

However, there's no direct financial penalty through the UDRP process itself. Critics argue this makes RDNH a low-risk strategy for complainants, which is why it continues to happen.

How to Check If Your Domain Is at Risk

Certain types of domains are more likely to attract bad-faith UDRP complaints:

• Short, generic domains (single-word or two-word .coms)
• Domains matching common brand names (even if the domain predates the brand)
• Domains in hot industries (AI, crypto, health, finance)
• High-traffic domains that could be valuable to a trademark holder

Use DomyDomains to check your domain's profile:

• Run a WHOIS lookup to verify your registration details are current
• Check domain valuation to understand your domain's market value
• Research your domain's history to document its legitimate use

The Bigger Picture

Reverse domain name hijacking undermines the UDRP system and hurts legitimate domain owners. While the system works well in most cases — protecting trademark holders from genuine cybersquatting — bad-faith filings create costs and stress for innocent domain owners.

The domain industry needs stronger deterrents against RDNH. Until then, domain owners must stay vigilant, document their legitimate interests, and be prepared to defend their rights.

Key Takeaways

• RDNH is when companies abuse UDRP to steal domains they can't legitimately claim
• Multiple RDNH findings in February 2026 show the problem is ongoing
• Document your good faith from the day you register a domain
• Never ignore a UDRP complaint — respond within 20 days
• Consult a domain attorney if you receive a complaint
• Generic word domains are defensible but not immune to bad-faith claims

Your domain is your property. Know your rights, keep good records, and don't let anyone take what's rightfully yours.