Bybit.com’s Reverse Domain Hijack Attempt on bybt.com

Cryptocurrency Exchange Accused of Reverse Domain Name Hijacking in Bad Faith Complaint

Image with an orange background and black slanted graphics and the words "reverse domain name hijacking"

The digital landscape, particularly within the dynamic cryptocurrency sector, is rife with intellectual property challenges. As brands vie for online presence and market share, disputes over domain names become increasingly common. One particularly contentious area is “cybersquatting,” where individuals register domain names with the intent to profit from a company’s trademark. However, a less discussed but equally problematic phenomenon is “Reverse Domain Name Hijacking” (RDNH) – an attempt by a trademark holder to secure a domain name it is not legitimately entitled to, often by filing a UDRP (Uniform Domain-Name Dispute-Resolution Policy) complaint in bad faith. A recent case involving cryptocurrency giant Bybit Fintech Limited and the domain bybt.com serves as a stark reminder of the serious implications of such actions and the importance of integrity in domain disputes.

A World Intellectual Property Organization (WIPO) panelist has found that Bybit Fintech Limited engaged in Reverse Domain Name Hijacking by filing a complaint against bybt.com, seeking to unlawfully seize the domain.

Bybit Fintech Limited operates Bybit.com, a globally recognized cryptocurrency exchange offering a wide range of trading services for digital assets. Established as a significant player in the crypto ecosystem, Bybit’s brand reputation and online presence are crucial to its business model. On the other side was bybt.com, a platform that provided comprehensive data and analytics for cryptocurrency futures and other market information. While not a direct competitor in terms of exchange services, bybt.com offered valuable insights to crypto traders, garnering its own substantial user base. Notably, bybt.com has since rebranded to coinglass.com, indicating its continued evolution and success in the crypto data space. The similarity in domain names, “Bybit.com” versus “bybt.com,” lay at the heart of the dispute, setting the stage for a dramatic conflict over digital real estate.

In its complaint filed with WIPO, Bybit Fintech Limited asserted that bybt.com constituted cybersquatting, arguing that the domain name was confusingly similar to its established trademark and was being used in bad faith. A key element of Bybit’s argument revolved around the presence of promotional banners for Bybit on the bybt.com website and alleged redirects of internet users to Bybit’s official platform. Bybit claimed these actions were intentional efforts by the Respondent to capitalize on Bybit’s brand recognition, mislead users, and create an impression of affiliation where none existed, thereby causing damage to the Complainant. The narrative presented by Bybit painted a picture of an opportunistic domain holder exploiting a well-known brand.

However, as WIPO Panelist Matthew Kennedy delved deeper into the evidence, a startling revelation came to light, completely undermining Bybit’s carefully constructed narrative. It was discovered that Bybit’s own employees had actively engaged with bybt.com, requesting the display of the very promotional banners they later cited as evidence of bad faith. Furthermore, Bybit had not only authorized but also facilitated the redirection of users by providing its logo and a specific hyperlink for that purpose. This crucial piece of information directly contradicted Bybit’s claims, transforming what appeared to be an instance of cybersquatting into a clear case of Reverse Domain Name Hijacking. The panelist found that Bybit had deliberately omitted these material facts from its complaint, presenting a misleading account to the WIPO Arbitration and Mediation Center.

WIPO Panelist Matthew Kennedy, tasked with adjudicating the dispute, meticulously examined the evidence presented by both parties. The Uniform Domain-Name Dispute-Resolution Policy (UDRP) is designed to provide a fair and efficient mechanism for resolving clear cases of cybersquatting. For a UDRP complaint to succeed, a complainant must prove three elements: (1) the domain name is identical or confusingly similar to a trademark or service mark in which the complainant has rights; (2) the respondent has no rights or legitimate interests in respect of the domain name; and (3) the domain name has been registered and is being used in bad faith. In this case, while the first element might have been arguable due to the visual and phonetic similarity, the subsequent revelations fundamentally challenged the second and third elements.

Panelist Kennedy’s finding of Reverse Domain Name Hijacking was not merely a rejection of Bybit’s claims but a condemnation of its conduct. He highlighted the egregious nature of Bybit’s false statements regarding the banner advertising:

In fact, the record shows that the Complainant approached the Respondent and requested that he display banner advertising on his website. The Complainant not only authorized and consented for the Respondent to redirect to the Complainant’s official website, but it provided its logo and a hyperlink to enable the Respondent to do so.

This finding established that Bybit had manufactured part of its own evidence for the alleged bad faith. But the revelations did not stop there. The panelist also uncovered that Bybit had engaged in acquisition discussions with bybt.com prior to filing the UDRP complaint. Bybit had proposed investing in the Respondent’s business, only to file the complaint one month later, and mere days before the Respondent formally declined the investment offer. Kennedy viewed this sequence of events as Bybit employing the UDRP as a “Plan B” – a coercive tactic to gain control over the domain name after commercial negotiations failed, or to increase its bargaining leverage. He unequivocally stated:

Further, the Panel notes that the Complainant filed the Complaint one month after proposing to invest in the Respondent’s business and days before the Respondent gave its final answer declining the offer. The record indicates that the Complainant resorted to the Policy as “Plan B” in case it failed to gain control over the disputed domain name in the marketplace or to increase its bargaining leverage. Either is a highly improper purpose for a complaint under the Policy and constitutes a further basis to find Reverse Domain Name Hijacking.

This was a clear signal that the UDRP system is not a tool for post-acquisition leverage or for circumventing failed commercial negotiations.

Amidst the findings, one particular piece of evidence presented by Bybit caused considerable debate and offered an insightful look into the complexities of domain name markets: the domain bybt.com was allegedly listed for sale on a registrar’s website for HKD 19,470.40 (approximately $2,500) as recently as September 24, 2021. Bybit presented this as further proof of the Respondent’s bad faith intent to sell the domain for profit.

The Respondent vehemently denied any involvement in this sale offer:

The Respondent has never sold the disputed domain name; it was offered for sale on another website without any involvement of the Respondent. In any case, the asking price of HKD 19,470 was far below the value of a domain name with millions of users.

Panelist Kennedy, however, dismissed the Respondent’s explanation as “improbable”:

The Panel rejects as improbable the Respondent’s submission that he had no involvement in authorizing that offering for sale.

This particular conclusion by the panelist raised an eyebrow for many experienced in the domain industry, including the original author of the article. While the panelist might have found it hard to believe, the reality of the domain name marketplace often presents scenarios where such listings can appear without the current owner’s direct authorization or even knowledge.

It is, in fact, “very possible” for a domain to appear listed for sale without the current registrant’s involvement. Domain marketplaces, registrars, and various online platforms often retain “stale listings” from previous ownership periods. For instance, if a domain was previously owned by someone who listed it for sale years ago and then allowed it to expire or transferred it, that old listing might persist in certain databases or cached pages. Similarly, many registrars, like GoDaddy, automatically create “minimum offer” listings or valuation pages for domains that might appear to be available for sale, even if the current owner has no active intention of selling. These are often speculative, automated entries based on perceived market value or historical data.

Consider a scenario where a domain was once registered by a speculator who put it up for sale, then it expired and was subsequently acquired by the current registrant (bybt.com) through a different channel or via a backorder service. The original speculative listing could remain active in some corners of the internet. Furthermore, third-party domain appraisal services or brokers sometimes list domains they believe have high value, hoping to act as intermediaries, without the owner’s explicit consent. The asking price of $2,500 for a domain with “millions of users” (as claimed by the Respondent) would indeed seem remarkably low, further suggesting it might not have been an active, authorized listing by the successful and growing bybt.com platform. A domain with millions of users would likely command a significantly higher price, making an authorized listing at such a low figure genuinely improbable for the current successful business. Therefore, the panelist’s reasoning in this specific instance, regarding the improbability of the Respondent’s claim, might have overlooked the nuances and common occurrences within the dynamic and sometimes chaotic world of domain name secondary markets. This highlights a potential area where the UDRP process, while robust in many aspects, might occasionally struggle with the intricate realities of digital asset management.

The finding of Reverse Domain Name Hijacking against Bybit sends a powerful message to all brand owners and their legal representatives. It underscores the principle that the UDRP is a dispute resolution mechanism for legitimate cybersquatting complaints, not a tool for commercial leverage, aggressive brand expansion, or rectifying failed business negotiations. An RDNH finding serves as a strong deterrent, discouraging companies from attempting to unfairly seize domain names through bad-faith complaints. It reinforces the integrity of the UDRP process and ensures that domain registrants with legitimate interests are protected from unwarranted harassment by powerful entities. Such findings uphold the foundational principles of fair play and honest representation within the online ecosystem.

This case offers several critical lessons. Firstly, transparency is paramount in UDRP complaints. Complainants must disclose all material facts, even those that might weaken their case. Deliberately omitting information or presenting false statements, as Bybit did regarding the banners and acquisition attempts, will not only lead to the dismissal of the complaint but also to a severe finding of RDNH. Secondly, it highlights the importance of due diligence. Before filing a complaint, trademark holders should thoroughly investigate their prior interactions with the domain registrant. Lastly, the case reinforces the UDRP’s role as a balanced policy. While it protects trademark holders from cybersquatters, it also shields legitimate domain owners from overreaching brand enforcement efforts.

Norton Rose Fulbright represented the Complainant. No representative is listed for the Respondent.

The Bybit vs. bybt.com case stands as a significant example of how powerful corporations can misuse legal frameworks in pursuit of digital assets. The WIPO Panelist’s firm finding of Reverse Domain Name Hijacking against Bybit serves as a critical reminder that the Uniform Domain-Name Dispute-Resolution Policy is not a commercial weapon. It champions fairness, ethical conduct, and truthfulness, ensuring that domain disputes are resolved based on genuine merit and legitimate rights, rather than strategic omission or corporate might. This ruling reinforces confidence in the UDRP as a vital instrument for maintaining order and justice in the ever-evolving landscape of online identity and brand protection.