Cybersquatting (Domain Grabbing): Definition, Legal Facts, and Prevention

Domain grabbing, also called cybersquatting or domain squatting, is the registration of a brand name, company name, or person's name as a web address by a party with no legitimate claim to it. The typical goal is to resell the address to the rightful owner at a price far above registration cost, or to divert visitors from the brand being mimicked.

Domain Grabbing vs. Typosquatting and Domain Parking

Domain grabbing is often confused with two related but distinct practices. Typosquatting targets common misspellings of an existing address, registering a variant like "gooogle.com" or "microsoftt.com" to capture users who make a typing error. Both practices exploit an established name, but typosquatting focuses on spelling variants rather than the exact registered name itself.

Domain parking describes registering a generic or descriptive term and holding it as a speculative investment. Registering a clearly generic or descriptive term as a long-term asset is generally legal because no existing trademark is being appropriated. Domain grabbing enters the picture when a registrant targets a term that a specific company or person already uses commercially and holds a legal right over.

Drop catching adds a time dimension. Automated software registers a domain the moment its previous owner allows it to expire. Drop catching is not inherently unlawful, but it crosses into domain grabbing when the lapsed domain carries an active trademark and the new registrant exploits that association.

Example scenario, no real company

A design studio incorporates under the name "Lumencraft" in March and begins building its online presence. A third party spots the incorporation notice in a public business register and registers lumencraft.com and lumencraft.de in the same week, before the studio has completed its own domain registration. To reclaim the addresses, the studio must either negotiate a buyout at the third party's asking price, open a DENIC Dispute for the .de address, or file a UDRP complaint for the .com address. None of these routes is typically quick or cost-free.

Legal Landscape: Germany and International Mechanisms

In Germany, two overlapping legal frameworks apply to domain grabbing cases. Name rights under § 12 of the German Civil Code (Bürgerliches Gesetzbuch, BGB) protect individuals and legal entities against unauthorized use of their names and form the basis for domain dispute claims. Trademark rights under the German Trade Mark Act (Markengesetz) protect registered marks, well-known commercial designations, and business names against domain registrations that create a risk of confusion.

DENIC, the registry for .de domains, operates a dedicated Dispute procedure. A party with a conflicting legal position can request a Dispute entry, which prevents the domain from being transferred to a new holder while the matter is unresolved. This is an administrative safeguard, not a court order, and it does not by itself return the domain to the applicant.

For generic top-level domains (.com, .net, .org, and many others), the Uniform Domain-Name Dispute-Resolution Policy (UDRP), administered by the World Intellectual Property Organization (WIPO), provides an alternative to national court proceedings. A successful UDRP complaint can result in the domain being transferred to the trademark holder or cancelled outright.

This entry describes the legal landscape in general terms only. It does not constitute legal advice. If a third party has registered your brand name as a domain, consult a qualified intellectual property attorney.

Why It Matters for Founders and Brand Owners

A squatted domain creates two concrete risks. First, a third party controlling your brand address can use it to impersonate your business, intercept contact requests, or operate a phishing page under your name. Undoing that kind of reputational damage takes longer than preventing it. Second, reclaiming a squatted domain through dispute proceedings or legal action requires professional fees and attention that most early-stage businesses have not budgeted for.

The practical response is to register your intended domain before or at the same time you register your company name. Cover the extensions most relevant to your market (.com plus your national TLD as a minimum), set auto-renewal to prevent accidental expiry, and confirm that your domain registrar offers domain locking so the address cannot be transferred without your explicit approval.

Protecting your domain is a direct step in protecting your brand identity. A domain dispute you had to fight is a cost; one you never had requires only an early registration and an auto-renewal setting to avoid entirely.

To understand what can be at stake, the most expensive domain names ever sold show how much value can accumulate around a single web address, and why third parties treat domain grabbing as a viable strategy.