Your Domain Was Stolen. Here's How We Got It Back.

A founder lost his agency domain to a Bulgarian squatter. They kept his name, his content, and his SEO — then injected casino spam. Here's the exact protocol that fought back.

Robert Jones runs a digital marketing consultancy in Northern Ireland. Six years ago, he registered exodus-digital-marketing.co.uk. He published 46 pages of original content — blog posts, case studies, service pages. His personal bio was on the site. He had a first-class honours degree in marketing from Vanguard University, California, and an MBS from UCD Smurfit Business School in Dublin. The site ranked. It generated leads.

Then, like many business owners, he missed a renewal. The domain lapsed in November 2020.

In February 2023 — over two years later — a Bulgarian domain company called Tool Domains EOOD (trading as Edoms.com) acquired it. They didn't replace the content. They didn't even remove his name. They kept everything — every blog post, every case study, his bio stating "Robert Jones, Chief Marketing Officer at Exodus Digital Marketing."

Then they injected casino affiliate spam links into his articles. "Casinos not on gamstop." "UK casinos not on gamstop." "Non gamstop sites."

His name. His credentials. His content. Linked to gambling spam.

The Problem: Domain Squatting Is Automated and Relentless

Domain squatting used to be a manual nuisance. Someone spots an expired domain, buys it for $10, and lists it for $5,000. Today it's an industrialised operation. Companies like Edoms.com maintain databases of one billion¹ active and expired domains. They have automated drop-catching systems that register domains the moment they expire. They have 80+ employees and 700,000+ domain registrations.¹

Their business model? Acquire domains with existing SEO authority, restore the original content from archives (they literally advertise "website restoration services" on their site), inject affiliate links, and collect passive revenue. The original domain owner becomes an unwitting content farm.

And it's not rare. Domain recovery inquiries surged after ICANN lifted price caps on .com domains,² and the UK's Nominet reported that domain disputes reached record lows in 2024³ — not because squatting decreased, but because most victims don't know how to fight back.

The Protocol: Three Stages to Recovery

When Robert came to us, we had a clear objective: get the domain back or make it worthless to the squatter. Here's the three-stage protocol we executed — in order.

Stage 1: Content Mirror & Freeze (24-72 hours)

The first move isn't legal — it's defensive. Before the squatter knows anyone is watching, you create a clean mirror of the original content on a domain you control.

1. Scrape every page from the squatter's site — use the sitemap, crawl all links, don't miss anything.
2. Detect and strip all casino/gambling/spam link patterns. In Robert's case: 37 URLs had been injected with "gamstop" affiliate links.
3. Deploy a clean mirror on a subdomain you control. Every page marked noindex, nofollow — safe harbour while you establish legal position.
4. Recover deleted content from the Wayback Machine. The squatter had stripped 4 blog posts; we restored them from 2015-2016 archives.
5. Keep it live. This mirror becomes your canonical evidence of ownership.

Why this matters: It creates a canonical home for your content. It proves ownership. And it stops Google's AI training pipelines from ingesting the spam version as the "real" one.

Stage 2: DMCA Takedown (1-3 weeks)

Google's DMCA process is the sharpest knife in this fight. File a copyright claim listing every infringing URL — the squatter's pages with your content plus their spam. Google de-indexes them, usually within days.

The result: Traffic collapses. The domain stops making money. The squatter's asset becomes a liability.

We documented 37 infringing URLs for Robert's case. Each one: original content authored by him, hosted without permission, with gambling spam injected. The DMCA filing is ready to submit.

Important: DMCA is a US law, but Google honours DMCA takedowns globally for all indexed content. You don't need to be in the US to file — you need to be the copyright holder.⁴

Stage 3: Domain Recovery — Nominet DRS or UDRP (6-12 weeks)

For .uk domains, Nominet's Dispute Resolution Service is the formal legal path. You need to prove two things:

• You have rights to the name — prior ownership, personal/business name, trademark, or copyright in the content
• The registration is abusive — registered to exploit your reputation, block you from registering, or cause confusion

Cost: £200 + VAT for a summary decision (if the squatter doesn't respond). ~£750 + VAT for a full expert decision if they fight it. Timeline: about 10 weeks.⁵

For .com domains, the UDRP process through WIPO serves the same function — slightly more expensive (~$1,500 for a single panelist) but the same principle.⁶

What It Costs — And What You're Really Paying For

The Meta Angle Nobody Talks About

When you file a DMCA, Google doesn't just remove pages. It flags the content as disputed. AI training pipelines — the ones powering ChatGPT, Gemini, and voice assistants — stop ingesting the spam version. Your clean mirror becomes the authoritative source.

When you eventually recover the domain, you flip the switch: remove noindex, add canonical tags, submit a sitemap. The authority flows back to you. The squatter is erased from the record.⁷

There's a Simpler Option: One Service, Not Three Lawyers

If you tried to do this yourself, your options would be:

We've battle-tested the protocol. We know the DMCA forms. We know the DRS complaint structure. We know how to detect casino spam and strip it. We know how to recover content from the Wayback Machine when the squatter has deleted it.

Your domain. Your content. Your name. We get them back.