French HR firm loses UDRP case, found guilty of reverse hijacking

A French human resources consulting firm has been found guilty of reverse domain name hijacking after filing a cybersquatting complaint against a domain registered over a decade before the company existed under its current name. The case highlights the risks of pursuing domains without addressing the registration timeline in the initial claim.

What happened

NOOUS SAS, a Paris-based HR consulting company, filed a complaint under the Uniform Domain-Name Dispute-Resolution Policy (UDRP) to gain control of noous.com. The domain was registered in 2000, while NOOUS SAS only adopted its current name in 2020. The company did not address this discrepancy in its complaint, instead arguing that the domain’s lack of active use and anonymized registration demonstrated bad faith.

The complainant claimed that the domain registrant’s use of an identity anonymization service, combined with years of inactivity, indicated an intent to block NOOUS SAS from acquiring the .com version of its brand. It also suggested that visitors searching for the company might assume its website was malfunctioning, harming its reputation. However, the World Intellectual Property Organization (WIPO) panelist overseeing the case dismissed these arguments, noting that privacy protections like GDPR are standard practice and that the domain’s registration predated the complainant’s trademark rights.

"The Panel notes that the Complainant has legal representation in this proceeding. The Complainant knew that the disputed domain name was registered many years before it acquired trademark rights. [...] It pursued its Complaint, putting the Respondent to time and effort to defend himself."

— Matthew Kennedy, WIPO panelist, Domain Name Wire

The panel ruled that NOOUS SAS had engaged in reverse domain name hijacking, a finding that occurs when a complainant uses the UDRP process in bad faith to attempt to seize a legitimately registered domain.

Why the timeline matters

The case hinges on the registration date of noous.com. Under UDRP rules, a complainant must prove that a domain was registered and used in bad faith. Since noous.com was registered in 2000—long before NOOUS SAS existed under its current name—the registrant could not have intended to target the company or its trademark. The panelist emphasized that the complainant’s failure to address this timeline in its filing undermined its case from the outset.

NOOUS SAS was represented by Morvilliers Sentenac & Associés, while the domain owner defended themselves without legal counsel.

Broader implications for domain disputes

The ruling serves as a reminder that UDRP complaints require careful consideration of registration dates and trademark rights. Privacy protections for domain registrants, such as those under GDPR, do not inherently indicate bad faith. Companies pursuing domains must ensure their claims align with UDRP requirements, particularly when the domain in question predates their brand.