Cybersquatter regains domain after post-UDRP transfer blunder
A UDRP win is not a finish line. It is a receipt.
The complainant did the hard part. They proved bad faith, won the dispute, and walked away with the domain. Then they handed it to a new registrar, and the squatter walked it right back out the door.
Under UDRP rules, the transfer itself is supposed to be the final step. The panel orders the transfer; the registrar executes it; the domain changes hands. The complainant treated that as a formality. The squatter treated it as an opportunity.
When a winning complainant moves the domain to a different registrar without locking it down properly, the original registrant can sometimes exploit the transition window. Whois records, auth codes, and registry holds are all in flux. A motivated squatter knows exactly where the seams are.
The lesson is procedural, not legal. Winning a UDRP is half the work. The other half is making sure the domain never returns to the registrar where the squatter still has influence, and that every transfer step is treated as a live security event.
The Internet Commerce Association has been quietly cataloging these edge cases for years. They are the ones worth reading, because the headline-grabbing UDRP decisions tell you nothing about how domains actually get lost after the panel is done.
We hope our commentary provided you value, please don't forget to also read the source article at Domain Name Wire.