Famous Cybersquatting Cases: The Domain Name Disputes That Built the Law, and What Each One Teaches a Buyer
Famous cybersquatting cases are the disputes where a court or an arbitration panel decided that someone registered a domain name in bad faith to profit from another party’s trademark. The names in the docket are familiar: Panavision, PETA, Verizon, Coca-Cola, Google, and TikTok. The rulings behind them wrote the rules every domain buyer now operates under.
This guide reads those cases from the one angle the legal explainers skip. The trademark owner’s lawyers tell the story from the plaintiff’s chair. A domain buyer needs the opposite view: what made each registration legally indefensible, and where the exact line sits between a name that draws a lawsuit and a name that is a legitimate asset to own.
The distinction matters because cybersquatting and aged-domain investing are not the same act, and the cases prove it. The pattern that loses in court is bad-faith intent to profit from a brand. The pattern that holds is a generic, descriptive, or non-confusable name with real prior use. SEO Domains operates the curated marketplace where that second category is screened before a name is listed, so a buyer sourcing inventory starts on the right side of the line these cases drew.
What counts as a famous cybersquatting case
A cybersquatting case becomes famous when a named brand sues or files a complaint over a domain that copies its trademark, and a court or panel rules on bad faith. The cases that endure are the ones that set precedent: the first ruling on a domain speculator, the first appellate decision under the Anticybersquatting Consumer Protection Act, and the record-setting damages awards.
Cybersquatting is the registration or use of a domain name in bad faith to profit from the goodwill of a trademark that belongs to another party. The US Anticybersquatting Consumer Protection Act, codified at 15 U.S.C. 1125(d) and enacted in 1999, made the practice directly actionable in federal court. The international route is the Uniform Domain Name Dispute Resolution Policy, the UDRP, administered by providers such as the World Intellectual Property Organization.
Why a domain buyer reads these cases differently
The law-firm roundups write for the brand owner whose mark was taken. A domain investor or aged-domain buyer sits on the other side of the transaction, and the practical question is different: which registrations get challenged, and why. Each famous case answers that by showing the precise fact pattern a panel reads as bad faith.
The cases also draw the boundary the fear-first guides blur. Buying an expired or aged domain with a real history is a legitimate acquisition. Registering a brand’s name or a close typo of it to extract a payout is the act that loses. The difference is intent and confusability, and the precedents below make it concrete.
The cases that built the law: landmark federal precedents
Five federal cases form the backbone of US cybersquatting law. Panavision v. Toeppen established that registering a brand to sell it back is commercial use. Sporty’s Farm was the first appellate ruling under the ACPA. PETA v. Doughney and Coca-Cola v. Purdy tested parody and protest defences. Lamparello v. Falwell showed where a genuine gripe site survives.
Panavision v. Toeppen, 1998: the original speculator
Dennis Toeppen registered panavision.com and the names of other well-known brands, then offered to sell panavision.com back to Panavision for 13,000 US dollars. The Ninth Circuit, in Panavision International v. Toeppen, 141 F.3d 1316, held in 1998 that registering a trademark as a domain to demand payment was a commercial use that diluted the mark. The ruling predates the ACPA and was decided under trademark dilution law, and it framed the speculator pattern Congress wrote the ACPA to stop a year later.
Sporty’s Farm v. Sportsman’s Market, 2000: the first ACPA ruling
Sporty’s Farm v. Sportsman’s Market, 202 F.3d 489, decided by the Second Circuit in 2000, was the first appellate decision to apply the new ACPA. The defendant had registered sportys.com, a name tied to the established Sporty’s catalogue brand. The court applied the statute’s bad-faith factors and ordered the name transferred, giving the lower courts their first template for the analysis.
PETA v. Doughney, 2001: parody is not a free pass
Michael Doughney registered peta.org and ran it as “People Eating Tasty Animals,” a parody of the animal-rights group People for the Ethical Treatment of Animals. In PETA v. Doughney, 263 F.3d 359, the Fourth Circuit ruled in 2001 that the parody label did not save the registration, because a domain name alone does not signal the joke before a visitor arrives. The site was found to infringe, and the parody defence failed on those facts.
Coca-Cola v. Purdy, 2004: protest content does not cure a brand domain
William Purdy registered domains incorporating Coca-Cola, McDonald’s, and other marks to host anti-abortion protest content. In Coca-Cola Co. v. Purdy, 382 F.3d 774, the Eighth Circuit held in 2004 that using a famous mark in the domain itself was actionable under the ACPA, regardless of the political message on the page. The protest was protected speech; appropriating the brand in the domain name was not.
Lamparello v. Falwell, 2005: where a gripe site wins
The counter-example matters as much as the losses. Christopher Lamparello registered fallwell.com, a misspelling of the Reverend Jerry Falwell’s name, to criticise Falwell’s views. In Lamparello v. Falwell, 420 F.3d 309, the Fourth Circuit ruled in 2005 for Lamparello, finding no likelihood of confusion and no bad-faith intent to profit, because the site sold nothing and criticised the subject without impersonating him. A genuine, non-commercial gripe site on a distinct name can survive.
The biggest payouts: Verizon v. OnlineNIC and statutory damages under the ACPA
The ACPA lets a court award statutory damages of 1,000 to 100,000 US dollars per domain name under 15 U.S.C. 1117(d), with no need to prove actual loss. That structure produced the largest cybersquatting judgment on record: Verizon’s 33.15 million US dollar award against OnlineNIC over 663 domains. The per-domain math is what turns a bulk registration scheme into a catastrophic liability.
How statutory damages scale
Under 15 U.S.C. 1117(d), a plaintiff in an ACPA case can elect statutory damages of not less than 1,000 and not more than 100,000 US dollars per infringing domain name, in the court’s discretion. Because the award is per domain, a registrant holding dozens or hundreds of infringing names faces a figure that multiplies fast, independent of any profit the names earned.
Verizon v. OnlineNIC, 2008: the record judgment
OnlineNIC, a domain registrar, used an automated process to register at least 663 domains similar to Verizon’s marks, including names such as verizononline.com, and pointed them at pay-per-click advertising. In 2008 a federal court in the Northern District of California entered a default judgment against OnlineNIC, which never appeared, awarding 50,000 US dollars per domain across 663 names for a total of 33.15 million US dollars. Domain Name Wire and World Trademark Review reported it as the largest cybersquatting judgment recorded. OnlineNIC stated it had earned 1,468.60 US dollars from the names, a figure that underscores how far statutory damages can exceed actual profit.
The deeper comparison of the statute’s elements, its nine bad-faith factors, and its remedies is set out in the dedicated ACPA reference in this hub. The point for a buyer is structural: the law is built to make a portfolio of infringing names a multiplying liability, not a one-off risk.
Modern UDRP cases: TikTok, Google, Betty Ford, and MikeRoweSoft
The bulk of current disputes run through the UDRP instead of federal court, because it is faster and cheaper. Recent cases show the same fact patterns the federal precedents established: TikTok recovered domains after refusing a six-figure offer, Google won android.co.in, the Betty Ford Foundation pursued a confusable rehab name, and the MikeRoweSoft settlement showed where a real person’s name complicates the picture.
TikTok and the rejected 145,000 dollar offer, 2020
ByteDance, the owner of TikTok, pursued a set of domains incorporating the TikTok mark, including names used to court the platform’s audience. A registrant reportedly turned down a 145,000 US dollar offer for the names, and a WIPO panel ordered them transferred in 2020. The case shows the UDRP working as intended: a brand recovers confusable names through arbitration instead of litigation, and a refused buyout does not defeat a bad-faith finding.
Google and android.co.in, 2020
A registrant acquired android.co.in for 19,500 US dollars and held it against Google, which owns the Android mark. Google prevailed in arbitration in 2020 and the domain was transferred. The case is a clean illustration that a high purchase price paid for an infringing name does not create a defensible right in it.
Hazelden Betty Ford and a confusable rehab name
The Hazelden Betty Ford Foundation pursued action in 2020 over a domain that used Betty Ford branding for an unrelated rehabilitation service, an example of a confusingly similar name trading on an established institution’s reputation. The dispute fits the standard template: a third party adopts a recognised name in a related field to capture its goodwill.
Microsoft and MikeRoweSoft, 2004: the human-name edge case
A Canadian student named Mike Rowe registered mikerowesoft.com for a web-design side business. The name was phonetically close to Microsoft, which objected. After Microsoft’s initial approach drew public backlash, the matter settled out of court in 2004. The case is the modern counterpart to the legitimate-use cases: a real person’s actual name sits in a grey zone, and the dispute turned on perceived intent instead of a clean infringement finding.
The famous case that was not cybersquatting: Nissan v. Nissan Computer
The sharpest lesson for a domain buyer comes from a case the brand lost. Uzi Nissan ran Nissan Computer Corp. and registered nissan.com using his own surname, years before the carmaker pursued the name. The dispute drew the clearest possible line between a legitimate registration and cybersquatting, and the carmaker did not take the domain.
A real name, a real business, a registration that held
Uzi Nissan, whose family name is Nissan, founded Nissan Computer Corp. and registered nissan.com in 1994 for his computer business. Nissan Motor Co. later sought the domain. The protracted litigation, reaching the Ninth Circuit in Nissan Motor Co. v. Nissan Computer Corp. in 2004, recognised the registrant’s legitimate interest in his own surname and his established business under it. The carmaker did not obtain nissan.com and built its presence on a separate domain.
The line every buyer needs
This is the precedent that separates the asset from the offence. A name registered for a genuine, pre-existing business, or one that is generic or descriptive instead of a copy of a famous mark, is a legitimate holding. The losing cases all add the missing ingredient: bad-faith intent to profit from a brand the registrant had no independent claim to. The Nissan ruling proves that holding a valuable, even brand-coincident, domain is lawful when the interest behind it is real.
The pattern that loses (Toeppen, OnlineNIC, Purdy)
A famous mark or a close typo of it, registered with no independent claim, to sell it back, run pay-per-click on its traffic, or capture its audience. Bad-faith intent to profit is the through-line every losing case shares.
The pattern that holds (Nissan, Lamparello)
A generic, descriptive, or own-name domain tied to a genuine prior use, owned openly, with no attempt to impersonate or profit from another party’s brand. Real interest plus no confusion is the through-line every defensible case shares.
Landmark cybersquatting cases at a glance
The cases below span the federal precedents that built the doctrine and the modern UDRP decisions that apply it. Each row pairs the dispute with its route, year, and outcome, and with the one lesson a domain buyer can carry into a purchase decision. Read down the takeaway column and a single rule emerges: confusability plus profit motive is what loses.
| Case / domain | Route | Year | Outcome | Buyer takeaway |
|---|---|---|---|---|
| Panavision v. Toeppen (panavision.com) | Federal (dilution) | 1998 | Brand won; registering to resell ruled commercial use | Offering a brand name back for payment is the textbook losing move |
| Sporty’s Farm v. Sportsman’s Market (sportys.com) | Federal (ACPA) | 2000 | Transfer ordered; first appellate ACPA ruling | The bad-faith factors apply even to a short, catalogue-tied name |
| Virtual Works v. Volkswagen (vw.net) | Federal (ACPA) | 2001 | Brand won; bad faith inferred from later resale demand | A short initialism is not safe once you try to sell it to the brand |
| PETA v. Doughney (peta.org) | Federal | 2001 | Brand won; parody defence rejected on the domain alone | A parody label on the page does not cure a copied brand in the name |
| Coca-Cola v. Purdy (brand protest domains) | Federal (ACPA) | 2004 | Brand won; protest content did not excuse the brand domain | Putting a famous mark in the address is actionable regardless of the message |
| Lamparello v. Falwell (fallwell.com) | Federal | 2005 | Registrant won; no confusion, no profit motive | A non-commercial gripe site on a distinct name can survive |
| Nissan v. Nissan Computer (nissan.com) | Federal | 2004 | Registrant kept the domain; own surname, real business | A genuine prior interest in the name is a complete defence |
| Verizon v. OnlineNIC (663 domains) | Federal (ACPA) | 2008 | $33.15M default judgment, $50,000 per domain | Bulk brand-typo registration is a liability that multiplies per name |
| Microsoft / MikeRoweSoft (mikerowesoft.com) | Settled | 2004 | Out-of-court settlement after public backlash | A real personal name is a grey zone, decided on perceived intent |
| Google / android.co.in | UDRP | 2020 | Transfer ordered to Google | A high price paid for an infringing name buys no defensible right |
| ByteDance / TikTok domains | UDRP (WIPO) | 2020 | Transfer ordered; $145,000 offer refused first | Refusing a buyout does not defeat a bad-faith finding |
The bad-faith pattern these cases share, step by step
Read across the losing cases and the bad-faith finding follows a repeatable sequence. A court or panel asks whether the name copies a distinctive mark, whether the registrant had any legitimate interest, and whether the conduct points to profiting from confusion. Reversed, that sequence is a pre-purchase check a buyer can run before acquiring any name.
The steps below trace how a panel reaches a bad-faith finding, drawn from the ACPA factors and the UDRP three-part test the famous cases applied. Each step names the signal the decision-makers read, and the mirror-image check a buyer runs to avoid acquiring a name with the same problem.
-
Is the name identical or confusingly similar to a distinctive mark?
The first question is confusability. Panels and courts compare the domain to the trademark, counting close typos, added words around the mark, and phonetic copies. The buyer check is to screen a candidate name against trademark databases before purchase, a workflow covered in the Cybersquatting Law hub.
The losing signal: the domain is the mark, a typo of it, or the mark plus a generic word. Panavision, peta.org, and the Verizon typos all failed here first.
-
Does the registrant have a legitimate interest in the name?
Next comes the registrant’s own claim. A real prior business, a matching personal name, or a generic or descriptive meaning is a legitimate interest. The buyer check is to confirm the name has a genuine, non-brand reason to exist before acquiring it.
The losing signal: no independent claim to the name at all. Nissan and Lamparello survived precisely because the registrant had a real interest; the losing parties had none.
-
Is there evidence of intent to profit from the brand?
The decisive element is bad-faith intent to profit. Offering the name back for sale, running ads on its traffic, or impersonating the brand all show it. The buyer check is to acquire a name for its own standalone value, never to resell to a single obvious trademark target.
The losing signal: a resale demand to the brand, like Toeppen’s offer or Virtual Works’ approach to Volkswagen, or pay-per-click on the brand’s audience, like OnlineNIC.
-
Does the use create confusion or merely criticise?
The final question separates a gripe site from an impersonation. Lamparello won because the criticism was clear and nothing was sold. The buyer check is to ensure any planned use does not imply affiliation with or endorsement by the brand whose name is near the domain.
The losing signal: a page that mimics or trades on the brand, even under a protest banner. Coca-Cola v. Purdy failed here despite genuine political content.
Types of cybersquatting the cases illustrate
The famous cases map onto a small set of recognised cybersquatting types. Typosquatting exploits misspellings, combosquatting bolts extra words onto a mark, homograph attacks swap look-alike characters, gripe-site disputes turn on criticism, and name-squatting targets a personal or institutional name. Each type has a defining case in the record above.
| Type | What it is | Illustrative case |
|---|---|---|
| Plain squatting | Registering the exact trademark as a domain to resell or exploit | Panavision v. Toeppen (panavision.com) |
| Typosquatting | Registering a misspelling a brand’s visitors are likely to mistype | Verizon v. OnlineNIC (verizon typos at scale) |
| Combosquatting | Adding a generic word to a mark, such as “secure” or “online” | Coca-Cola v. Purdy (mark plus extra terms) |
| Homograph / IDN | Swapping visually identical characters from another script | Documented as a phishing technique; reported by Palo Alto Networks Unit 42 |
| Gripe / protest squatting | Using a brand or name in a domain for criticism | Lamparello v. Falwell (registrant won); Coca-Cola v. Purdy (registrant lost) |
| Name-squatting | Targeting a personal or institutional name | Hazelden Betty Ford; Microsoft / MikeRoweSoft |
The detection-side reading of these types, how a brand owner spots and acts on each, sits in the wider Cybersquatting Law pillar. For a buyer, the taxonomy is a list of what not to acquire: any name whose value depends on a brand’s audience instead of its own merit falls into one of these rows.
UDRP versus ACPA: the two routes the famous cases ran through
The famous cases split between two systems. The ACPA is US federal litigation: slower and costlier, but it can award statutory damages of 1,000 to 100,000 US dollars per domain and reach a domain through an in rem action. The UDRP is international arbitration: fast and inexpensive, but it can only transfer or cancel a name. The choice of route shapes the remedy.
Verizon v. OnlineNIC and the Panavision line ran through the courts, which is why they produced money judgments and binding precedent. The TikTok and Google disputes ran through the UDRP, which is why they produced transfers in weeks instead of damages after years. WIPO recorded 6,192 UDRP-track cases in 2023, a record and a 7 percent rise over 2022, and 6,168 in 2024, with the .com extension involved in roughly 80 percent of its cases, according to its own press releases.
| Dimension | UDRP (arbitration) | ACPA (US federal court) |
|---|---|---|
| Forum | WIPO and other ICANN-approved providers | US federal district court |
| Speed | Weeks to a few months | Months to years |
| Remedy | Transfer or cancellation of the domain only | Transfer plus statutory damages, $1,000 to $100,000 per domain |
| Reach | Any gTLD and many ccTLDs worldwide | US jurisdiction, with in rem reach over the domain itself |
| Cost to file | A fixed administrative fee | Full litigation cost |
| Famous cases | TikTok, Google android.co.in | Verizon, Sporty’s Farm, Coca-Cola v. Purdy |
A buyer rarely chooses the route, since that is the complainant’s decision. What the comparison establishes is the size of the downside. The full element-by-element breakdown of when a brand reaches for each lives in the UDRP-versus-ACPA reference alongside this guide in the Cybersquatting Law pillar.
The pre-purchase red-flag checklist
The famous cases reduce to a short, scannable checklist a buyer runs before acquiring any name. Each red flag is a fact pattern that lost in court or arbitration, paired with the diligence step that clears it. Read top to bottom, the cleared column describes exactly the kind of name that is a legitimate asset instead of a dispute waiting to happen.
The table consolidates the warning signs scattered through the cases above into one reference. The left column is the red flag, the centre column is the case that proves it is a problem, and the right column is the pre-purchase check that resolves it. A candidate name that triggers no red flag is the asset the rest of this guide points toward.
| Red flag | The case that proves it | The pre-purchase check (cleared) |
|---|---|---|
| The name contains a distinctive trademark | Panavision, PETA | Screen the candidate against USPTO and other trademark registers first |
| The name is a close typo of a brand | Verizon v. OnlineNIC | Reject names that read as a misspelling of a known mark |
| The name is a mark plus a generic word | Coca-Cola v. Purdy | Avoid “brand + secure / official / online” constructions |
| The only buyer is the obvious trademark owner | Toeppen, Virtual Works v. Volkswagen | Acquire only names with standalone value to many buyers |
| The plan is to resell the name to the brand | Panavision, Google android.co.in | Buy for genuine use or broad resale, never a single-target flip |
| The intended use trades on the brand’s audience | Coca-Cola v. Purdy, OnlineNIC | Plan a use that stands on the name’s own meaning |
| The inherited history shows brand-impersonation use | OnlineNIC pay-per-click pattern | Review the domain’s prior use before purchase, not after |
| No independent or prior interest in the name exists | Contrast with Nissan, Lamparello | Prefer generic, descriptive, or own-name domains with real history |
One pattern runs down the cleared column. The defensible name is generic or descriptive, screened against the trademark registers, valuable to more than one buyer, and backed by a real history instead of a brand’s borrowed audience. A name that fails the first row poisons the rest, because no later diligence cures a trademark sitting inside the domain. That is why screening the candidate before money changes hands is the practical starting point, and it is the foundation the closing section returns to.
Famous cybersquatting cases: frequently asked questions
The five questions buyers and investors raise when they search for famous cybersquatting cases, answered against the court and arbitration record and the asset-versus-offence line this guide draws.
Q1Which cybersquatting case is the best known?
Panavision International v. Toeppen, decided by the Ninth Circuit in 1998, is the foundational case. Dennis Toeppen registered panavision.com and offered to sell it back for 13,000 US dollars, and the court ruled that registering a trademark as a domain to demand payment was a commercial use that diluted the mark. It set the speculator pattern Congress targeted when it passed the ACPA in 1999.
Q2What was the largest cybersquatting judgment?
Verizon’s case against the registrar OnlineNIC produced a 33.15 million US dollar default judgment in 2008, the largest recorded. The court awarded 50,000 US dollars per domain across 663 infringing names under the ACPA’s statutory-damages provision. OnlineNIC reported earning only 1,468.60 US dollars from the names, which shows how far per-domain statutory damages can exceed actual profit.
Q3Has a cybersquatting defendant ever won?
Yes. In Lamparello v. Falwell, the Fourth Circuit ruled in 2005 for a registrant whose criticism site sold nothing and created no confusion. In Nissan Motor Co. v. Nissan Computer Corp., the registrant kept nissan.com because the name was his own surname tied to a real prior business. Both cases show that a genuine interest in the name, with no bad-faith intent to profit, is a complete defence.
Q4Is buying an expired or aged domain cybersquatting?
No, and the cases draw a firm line. Buying an expired or aged domain that is generic, descriptive, or backed by a real history is a legitimate acquisition, the same category as the Nissan registration. Cybersquatting is the separate act of registering a brand’s name or a close typo of it in bad faith to profit from that brand. The variable is intent and confusability, not the age of the domain.
Q5How are famous cybersquatting cases decided today?
The bulk of current disputes run through the UDRP instead of federal court, because it is faster and cheaper. WIPO recorded 6,192 cases in 2023 and 6,168 in 2024 under the policy and its national variations. A UDRP panel can only transfer or cancel the name, so the high-damages outcomes like Verizon still require the ACPA and a US federal court.
Source domains that stay on the right side of the line
Every famous case converges on one variable: bad-faith intent to profit from a brand the registrant had no claim to. The legitimate asset is the opposite, a generic, descriptive, or genuinely-historied name screened for trademark conflict before acquisition. Sourcing from a vetted catalogue is how a buyer stays on the right side of the line the cases drew. SEO Domains operates that curated marketplace.
What the cases tell a buyer to look for
The defensible name in every ruling shares a profile. It is generic or descriptive instead of a copy of a famous mark, it has a real prior use in place of a brand’s borrowed audience, and it carries no trademark inside the domain string. That profile is exactly what a pre-purchase screen confirms, and exactly what a quality aged or expired domain delivers when it is sourced with diligence.
How to source names that pass the test
A name that survives the four-step analysis in Figure 3 is the one worth acquiring. The signals to confirm before purchase follow directly from the cases:
- No distinctive trademark sits inside the domain string, verified against the registers.
- The name is generic, descriptive, or own-name, with value to a wide market rather than one brand.
- The inherited history shows real prior use, not brand-impersonation or pay-per-click on a mark’s traffic.
- The backlink and authority profile is clean, the diligence covered in the Domain Authority & Metrics hub.
A name that fails the first signal is a liability whatever its metrics, because a trademark inside the domain cannot be diligence-cleared away. A name that passes all four is an asset a buyer can own openly, the legitimate category the Nissan ruling protected.
Browse trademark-screened aged and expired domains
The legitimate demand behind every “famous cybersquatting cases” search is the confidence to acquire real domain value without inheriting a dispute. That is the product: clean, screened names, not a legal service and not a brand-recovery tool. SEO Domains operates the curated marketplace where aged and expired domains are screened across their history and authority profile before they are listed and priced, so a buyer starts from inventory that already sits on the right side of the line.
