Oath Research sues Verisign in rem to recover stolen domain

Oath Research, a company claiming its domain was stolen from its TrustName registrar account, has launched a second legal effort to reclaim the asset. The new lawsuit targets the domain itself rather than the registrar, a procedural shift intended to overcome jurisdictional hurdles that derailed its initial case in New Jersey.

The dispute centers on a .com domain that Oath Research says was transferred out of its TrustName account without authorization. After the domain moved to Chinese registrar NiceNic, and later to Reg.ru, the company filed its first lawsuit in New Jersey against TrustName. That case was dismissed after the court ruled it lacked personal jurisdiction over the registrar and declined to grant a temporary restraining order or preliminary injunction. The judge also noted Oath Research had not demonstrated why TrustName should not be given an opportunity to respond.

Legal strategy shift

The new lawsuit, filed in the Eastern District of Virginia, adopts an in rem approach—targeting the domain name directly rather than the registrar. This allows the case to proceed in a district where Verisign, the .com registry operator, is based. By dropping TrustName as a defendant and focusing on the domain itself, Oath Research aims to sidestep the jurisdictional issues that sank its first attempt. The suit now names Verisign, NiceNic, and Reg.ru as parties.

The choice of venue is critical. Verisign’s headquarters in Virginia gives the court clear jurisdiction over the registry, which plays a central role in domain transfers. The in rem structure also aligns with U.S. legal precedent for domain disputes, where courts have historically treated domains as property subject to seizure or transfer orders. However, the approach does not guarantee success; Oath Research must still prove the domain was wrongfully taken and that the current registrars failed to act in good faith.

Registrar and registry roles

The domain’s movement across multiple registrars complicates the case. After leaving TrustName, it was registered with NiceNic before being transferred to Reg.ru, a Russian registrar. The lawsuit does not detail whether these transfers were initiated by the same party or if the registrars followed proper verification procedures under ICANN’s Transfer Dispute Resolution Policy (TDRP).

Verisign’s involvement as the .com registry adds another layer. While registries typically execute transfers authorized by registrars, they can be compelled to reverse transactions if a court finds the transfer violated policy or was fraudulent. The lawsuit’s outcome may hinge on whether Oath Research can demonstrate that the domain was moved without its consent and that the registrars or registry failed to verify the transfer’s legitimacy.

What to watch

The case could set a precedent for how in rem lawsuits are used to recover domains transferred across international registrars. If successful, it may encourage similar filings in Virginia, where Verisign’s presence provides a predictable legal forum. Conversely, a dismissal could reinforce the challenges of recovering domains once they leave the original registrar’s control, particularly when multiple intermediaries are involved.

For domain owners, the dispute underscores the importance of securing registrar accounts with two-factor authentication and monitoring transfer requests. The lawsuit also highlights the limitations of ICANN’s TDRP, which may not always provide timely recourse for victims of domain theft. Operators should review their registrar agreements to understand the protections—and gaps—in place for unauthorized transfers.