I'm a web developer and my company offers web development services. Recently, I received a scam "invoice" for a domain I don't even own, but it made me appreciate the fraud for a new reason. The invoice was for a domain that is similar to my established one; I have owned "domain.com" since 2000 while the new domain was registered in 2025 as "thedomain.com".
When I checked this new domain's source code, it wasn't loading correctly, but I found that it redirects to my domain. It only works if you accept the http prompt and reveals a 302 redirect in the Developer Tools. This domain appears to be parked with NameCheap. I'm concerned it could be used for phishing or a man-in-the-middle attack, but now I'm considering that the scammers might be trying to get me to buy this domain from them.
Since my domain matches my registered trademark, I've sent a complaint to NameCheap's abuse department, mentioning the possibility of cybersquatting. I'm contemplating pursuing this through UDRP or ACPA. Have you seen cases like this before, and what was the intent behind the similar domains? Also, has anyone here taken legal action against a cybersquatter?
1 Answer
Yeah, this kind of situation happens more often than you think. Typically, these near-match domains are just registered by opportunists. They often just want to scare trademark owners into paying up or they plan to resell it later. The fact that it's redirecting to your site makes it seem like they're just trying to act legit rather than doing something malicious. I haven’t been through litigation, but I've resolved issues like this through UDRP when I had strong trademark claims. It's a bit slow, but it works.
Thanks for the insight! I'm considering ACPA for statutory damages, because if these scammers aren't penalized, they'll just keep trying.