MEMORANDUM AND ORDER
Plaintiff Gioconda Law Group PLLC alleges cybersquatting, trademark infringement, unlawful interception and disclosure of electronic communications, and related state law claims against Defendant Arthur Wesley Kenzie. Plaintiff has filed a partial motion for judgment on the pleadings with respect to Defendant’s alleged violation of the Anticybersquatting Consumer Protection Act (ACPA). For the reasons that follow, Plaintiffs motion is denied.
I. Standard of Review
Federal Rule of Civil Procedure 12(c) provides that “[a]fter the pleadings are closed — but early enough not to delay trial — a party may move for judgment on the pleadings.” Under Rule 12(c), “a party is entitled to judgment on the pleadings only if it has established that no material issue of fact remains to be resolved and that [it] is entitled to judgment as a matter
[A] Rule 12(c) motion is designed to provide a means of disposing of cases when the material facts are not in dispute between the parties and a judgment on the merits can be achieved by focusing on the content of the competing pleadings, exhibits thereto, matters incorporated by reference in the pleadings, whatever is central or integral to the claim for relief or defense, and any facts of which the district court will take judicial notice. The motion for a judgment on the pleadings only has utility when all material allegations of fact are admitted or not controverted in the pleadings and only questions of law remain to be decided by the district court.
5C Charles Alan Wright & Arthur R. Miller, et al, Federal Practice and Procedure, § 1367 (3d ed. 1998) (footnotes omitted); accord Juster Associates v. City of Rutland, Vt.,
II. Background
A. Facts Taken as True For Purposes of this Motion
Plaintiff is a professional limited liability company duly organized under the laws of the State of New York. It is engaged in the authorized practice of law with a particular focus on brand protection and intellectual property, and has focused significant energies in recent years on combating piracy and counterfeiting on the Internet. Defendant is a sophisticated computer programmer with multiple advanced degrees in computer programming, including a Bachelor of Technology Degree in Computer Systems from BCiT with majors in Network Security Administration and Network Security Development. His principal place of business is in Vancouver, British Columbia, Canada, and he identifies him
Plaintiffs general allegation is that “[t]his case presents the Court with an identifiable Internet domain name cybersquatter and hacker who has intentionally intercepted e-mail traffic intended for the plaintiff, a New York law firm which focuses on-anti-counterfeiting and brand, protection litigation.” Defendant denies this particular allegation. Plaintiff alleges that “[d]omain name typosquatting is a well-known form of cybersquatting that is usually used to capture web traffic when an Internet user accidentally misspells a legitimate domain name in his web browser.” Defendant agrees that this description is “essentially correct,” though he emphasizes that the purpose of typosquatting can be either malevolent or benevolent.
Defendant registered GIOCONDOLAW.COM (“the Infringing Domain Name” or “IDN”) and explains that he did so “within the broader context of his responsible, good faith information security research into a significant e-mail vulnerability that is not currently well understood.” Defendant registered the IDN from third-party Internet Registrar Go-Daddy, Inc. on January 19, 2012. When Plaintiff discovered Defendant’s conduct, it sent e-mails to the addressesinfo@ giocondolaw.com and joseph.gioconda@ giocondolaw.com; it used a registered receipt e-mail system to conclude that both of these e-mail messages were received by active mailboxes capable of receiving misdirected messages. When he registered the IDN, Defendant used the Domains by Proxy domain privacy service, “but not for the alleged sole purpose of concealing his identity.” Defendant then intentionally redirected Internet web browser users to Plaintiffs legitimate web site — the Gioconda Law Group PLLC Website — “but not for the alleged sole purpose of avoiding detection.” After Plaintiff contacted Defendant and informed him of the Complaint, Defendant replied, in part, as follows:
As for starting litigation against me, I am not clear what has caused you to assume that I would not be amenable to resolving your concerns and claims. My intentions with the domain name you are concerned about are transparent and above board, as they are part of my research into an email vulnerability that I have been studying since September 2011 and which I have been publicly discussing on my website ... Iam doing nothing to cause any injury to your firm or any trademark rights you have, and would be glad to discuss those issues with you ... I have no' objections to facilitating a transfer of the domain to you.”2
Defendant has also registered the following eight domain names: rnastercard.com, rndonalds.com, newscorp.com, rncafee.com, rnacworld.com, rnonster.com, pcworld.com, and qwest.com.
Defendant was recently the subject of a Uniform Domain Name Resolution Policy (“UDRP”) proceeding in a Complaint brought by Complainant Lockheed Martin,
On April 17, 2012, Plaintiff received from the U.S. Patent and Trademark Office a registration number, indicating federal registration of the Service Mark “Gioconda Law Group PLLC” in International Class 45 for “providing information in the field of intellectual property.”
Plaintiffs First Claim for Relief invokes the ACPA and alleges that “[t]he Infringing Domain Name that the Defendant has registered is virtually identifiable to, and/or confusingly similar to the Gioconda Law Service Mark, which was distinctive at the time that the Defendant registered the Infringing Domain Name.” Defendant admits this allegation. Plaintiff further alleges that “[t]he Defendant registered and is using the Infringing Domain Name with bad-faith intent to profit from the Gioconda Law Service Mark,” that “[t]he Defendant has no bona fide noncommercial or fair use of the Gioconda Law Service Mark,” and that “on information and belief, the Defendant intends to divert consumers away from the Plaintiff for unlawful commercial gain, by creating a likelihood of confusion as to the source, sponsorship, affiliation or endorsement of the Infringing Domain Name, and related email addresses.” Defendant expressly denies these allegations. Plaintiff adds, and Defendant denies, that Defendant’s “acts have caused and will continue to cause irreparable injury to the Plaintiff and to the public.”
In his Answer, Defendant asserts a number of “Defenses.” Many of these “Defenses” are not affirmative defenses in the technical sense of the term. Rather, they are statements of fact that deny specific allegations set forth in the Complaint (all of which are denied by Defendant in the responsive section of his Answer). Defendant also elaborates on the nature of his conduct. He states that his actions “have been only for good faith, non-commercial, legitimate purposes, solely for the Plaintiffs benefit,” adding that “[tjhere have been no actual damages suffered by the Plaintiff, nor any damages intended, and only good faith, non-commercial, legitimate purposes intended by the Defendant.” He explains that his good faith purposes “have been for information security research into an e-mail vulnerability the Defendant initially called the ‘Black Hole’ e-mail vulnerability ... there appears to be very little awareness of this vulnerability, which is the primary reason the Defendant was motivated to undertake this research.” Because “this vulnerability can be almost trivially exploited to covertly and passively undertake reconnaissance on a vulnerable organization,” it opens entities like Plaintiff to “social engineering attacks.” The benefit Defendant confers, in his view, is that he prevents a malevolent entity from exploiting this gap in email security and informs companies about the need for protection by posting about how to defend against the vulnerability on
III. Discussion
A. Legal Standard
“To successfully assert a claim under the ACPA, a plaintiff must demonstrate that (1) its marks were distinctive at the time the domain name was registered; (2) the infringing domain names complained of are identical to or confusingly similar to plaintiffs mark; and (3) the infringer has a bad faith intent to profit from that mark.” Webadviso v. Bank of Am. Corp.,
1. The ACPA
“Cybersquatting involves the registration as domain names of well-known trade
Alarmed by a rising wave of cybersquatting in the 1990s, and concerned by the apparent inadequacy of preexisting laws, Congress enacted the ACPA in 1999. This law was passed “to protect consumers and holders of distinctive trademarks from ‘cybersquatting.’ ” Webadviso,
2. The ACPA’s Requirement of “Bad Faith Intent to Profit”
A key element of any ACPA violation is “bad faith intent to profit.” See Interstellar Starship Services,
(I) the trademark or other intellectual property rights of the person, if any, in the domain name;
(II) the extent to which the domain name consists of the legal name of the person or a name that is otherwise commonly used to identify that person;
(III) the person’s prior use, if any, of the domain name in connection with the bona fide offering of any goods or services;
(IV) the person’s bona fide noncommercial or fair use of the mark in a site accessible under the domain name;
(V) the person’s intent to divert consumers from the mark owner’s online location to a site accessible under the domain name that could harm the goodwill represented by the mark, either for commercial gain or with the intent to tarnish or disparage the mark, by creating a likelihood of confusion as to the source, sponsorship, affiliation, or endorsement of the site;
(VI) the person’s offer to transfer, sell, or otherwise assign the domain name to*432 the mark owner or any third party for financial gain without having used, or having an intent to use, the domain name in the bona fide offering of any goods or services, or the person’s prior conduct indicating a pattern of such conduct;
(VII) the person’s provision of material and misleading false contact information when applying for the registration of the domain name, the person’s intentional failure to maintain accurate contact information, or the person’s prior conduct indicating a pattern of such conduct;
(VIII) the person’s registration or acquisition of multiple domain names which the person knows are identical or confusingly similar to marks of others that are distinctive at the time of registration of such domain names, or dilutive of famous marks of others that are famous at the time of registration of such domain names, without regard to the goods or services of the parties; and
(IX) the extent to which the mark incorporated in the person’s domain name registration is or is not distinctive and famous within the meaning of subsection (c) of this section.
15 U.S.C. § 1125(d)(1)(B)(i). A leading treatise on the law of trademarks notes that “[t]he first four factors suggest circumstances tending to indicate an absence of bad faith intent to profit from the goodwill of the mark, the next four tend to indicate that such bad faith does exist and the last factor points in either direction, depending on the degree of distinctiveness and fame of the mark.” 4 McCarthy on Trademarks and Unfair Competition § 25:78 (4th ed.).
3. The Scope of “Bad Faith Intent to Profit”
Because the ACPA has the potential to encompass a broad array of online conduct, courts are “reluctant to interpret the ACPA’s liability provisions in an overly aggressive manner.” Virtual Works, Inc. v. Volkswagen of Am., Inc.,
Courts have struggled to define the boundaries of “bad faith intent to profit” because the ACPA expressly allows consideration of factors beyond the nine enumerated indicia. See 15 U.S.C. § 1125(d)(1)(B)(i) (noting that courts “may consider factors such as, but not limited to” the nine enumerated indicia). Courts have taken that grant of discretion to heart. See Sporty’s Farm,
This “unique circumstances” approach to the bad faith inquiry is logical and in accord with the plain language of the ACPA. See Sporty’s Farm,
That inquiry must be guided by an assessment of how close a defendant’s conduct falls to the ACPA’s heartland. The clearest case for a finding of bad faith intent to profit typically arises when a defendant “registers] a domain name of an established entity in bad faith” and then “offer[s] to sell the domain name to the entity at an exorbitant price.” Target Adver., Inc. v. Miller, No. 01 Civ. 7614,
In cases that vary too much from the specific evil contemplated by thé ACPA, however, some courts have looked skeptically at claims of bad faith. On occasion, they have even refused to find an ACPA violation. As the Sixth Circuit noted in a 2004 decision:
The paradigmatic harm that the ACPA was enacted to eradicate — thé practice of cybersquatters registering several hundred domain names in an effort to sell them to the legitimate owners of the mark — is simply not 'present in any of [Defendant’s] actions. In its report on the ACPA, the Senate Judiciary Committee distilled the crucial elements'of bad faith to mean an “intent to trade on the goodwill of another’s mark.” S.Rep. No. 106-140, at 9. See also Ford Motor Co. v. Catalanotte,342 F.3d 543 , 549 (6th Cir.2003) (“Registering a famous trademark as a domain name and then offering it for sale to the trademark owner is- exactly the wrong Congress intended to remedy when it passed the ACPA.”). There is no evidence that this was [Defendant’s] intention when she registered the Lucas Nursery domain name and created her web site. It would therefore stretch the ACPA beyond the letter of the law and Congress’s intention to declare anything to the contrary.
Lucas Nursery & Landscaping, Inc. v. Grosse,
One year later, the Fifth Circuit adopted a similar approach while assessing an ACPA claim aimed at a site designed to “inform potential customers about a negative experience with [a] company.” TMI, Inc. v. Maxwell,
The Eleventh Circuit joined this line of precedent in 2009. Emphasizing that “ ‘bad faith’ is not enough” and that “[a] defendant, is liable only where a plaintiff can establish that the defendant had a ‘bad faith intent to profit,’ ” the Eleventh Circuit saw no bad faith intent to profit under the ACPA where a plaintiff accused the defendant “not of a design to sell a domain name for profit but of a refusal to sell one.” S. Grouts & Mortars, Inc. v. 3M Co.,
The Senate Report accompanying the Anticybersquatting Consumer Protection Act bolsters our understanding that a “bad faith intent to profit” is the essence of the wrong that the Act seeks to*435 combat. That report defines cybersquatters as those who:
(1) register well-known brand names as Internet domain names in order to extract payment from the rightful owners of the marks; (2) register well-known marks as domain names and warehouse those marks with the hope of selling them to the highest bidder; (3) register well-known marks to prey on consumer confusion by misusing the domain name to divert customers from the mark owner’s site to the cybersquatter’s own site; (4) target distinctive marks to defraud consumers, including to engage in counterfeiting activities.
The report says nothing about those who hold onto a domain name to prevent a competitor from using it.
Id. at 1246 (quotation marks and citations omitted) (emphasis in original).
Although cases arising from attempts to suppress consumer commentary sites have afforded many of the occasions for courts to warn against over-broad application of the ACPA’s bad faith inquiry, see Lamparello v. Falwell,
Of course, this logic does not entail the conclusion that an extortionate demand, or use of the improperly registered domain name in commerce, is always necessary to a violation of the ACPA, which sets out a more expansive list of indicia that may support a finding of bad faith intent to profit. See, e.g., Bosley Med. Inst., Inc. v. Kremer,
B. Application
The only issue at this stage in the litigation is whether, on the pleadings and materials of which the Court may take notice, Plaintiff can prove enough facts to show that Defendant acted with “bad faith intent to profit” as that term is defined by the ACPA. Where Defendant has not admitted a fact and Plaintiff has not proven it through other means, the Court reads the absence of that information in the light most favorable to Defendant. In other words, for purposes of this motion for judgment on the pleadings, the Court will
This analysis begins with the nine indicia of “bad faith intent to profit” enumerated in the statute. See 15 U.S.C. § 1125(d)(1)(B)(i). There is no evidence either way concerning Defendant’s rights in the domain name (Factor I), whether the domain name consists of a name that is commonly used to identify Defendant (Factor II), Defendant’s prior use of the domain name in connection with the bona fide offering of any goods or services (Factor III), Defendant’s' bona fide noncommercial or fair use of the mark in a site accessible under the domain name (Factor IV), and Defendant’s provision of true contact information (Factor VII). The absence of any admitted facts in the pleadings regarding five of the nine indicia strongly augurs at this preliminary stage against a finding of bad faith intent to profit.
Factor V fits the facts awkwardly. On the one hand, Defendant did intend to demonstrate his ability to lure consumers away from Plaintiffs site and e-mail system, thereby exposing a potential vulnerability in Plaintiffs online presence. On the other hand, there is no evidence that Plaintiff did so in a manner that could harm the goodwill represented by Plaintiffs mark or otherwise damage the mark. To the contrary, anybody who visited the site maintained by Defendant would be immediately redirected to Plaintiffs site. It is possible that the diversion of e-mails from Plaintiff to Defendant has caused problems of a sort that would trigger the application of Factor V, particularly if Defendant replied to those e-mails in a manner that could have damaged Plaintiffs mark, but at this stage in the case there are not enough facts for- the Court to conclude that Factor V indicates bad faith intent to profit.
Factor VI cuts against a finding of bad faith intent to profit, at least for purposes of this Rule 12(c) motion. Although it appears that Defendant has not, and does not intend to, use the IDN in the bona fide offering of any goods or services, there is no evidence in the pleadings that Defendant has offered to sell the disputed IDN to a third party. Nor is there evidence that he has attempted to sell it to Plaintiff, the mark owner. Rather, in his e-mail to Plaintiff, Defendant said that “I am doing nothing to cause any injury to your firm or any trademark rights you have, and would be glad to discuss those issues with you ... I have no objections to facilitating a transfer of the domain to you.” The Court’s analysis of this factor might look different on a summary judgment record, depending on the evidence presented, but at this stage in the litigation it cuts in Defendant’s favor.
Factors VIII and IX support a finding of bad faith. Defendant admits that he has acquired at least eight other domain names with an intent similar to that which motivated his acquisition of the IDN. He also admits that Plaintiffs mark is famous and distinctive.
Reviewing the factors set forth in the ACPA, the Court concludes that only two of the nine weigh in favor of a finding of bad faith intent to profit. That is not enough. Accordingly, Plaintiff can prevail on this motion for judgment on the pleadings only if a more general assessment of the “unique circumstances” of this case demands a finding of bad faith. See
Defendant alleges that his conduct is part of a security-focused research agenda into a vulnerability in e-mail systems of the sort used by Plaintiff. He states that he undertook this activity for good faith, noncommercial reasons, and that he has arranged for domain names and e-mails to be transferred back to other entities situated similarly to Plaintiff.
The ACPA is designed principally for cases where a defendant either forces a markholder to purchase a domain name at an extortionate price or diverts customers from the markholder’s website to the defendant’s own website. See Utah Lighthouse,
The ACPA is not an all-purpose tool designed to allow the holders of distinctive marks the opportunity to acquire any domain name confusingly similar to their marks. See Schmidheiny v. Weber,
IV. Conclusion
For the foregoing reasons, Plaintiffs motion for judgment on the pleadings is DENIED.
The Clerk of Court is directed to close the motion at Dkt. No. 26.
SO ORDERED.
Notes
. This background reflects application of the Rule 12(c) standard of review to the pleadings.
. This text is taken from PL Ex. 3, the authenticity of which is acknowledged in Defendant's Answer at ¶ 12.
. Plaintiff alleges, though Defendant denies, that these domain names are meant to mimic, respectively, mastercard.com, mcdonalds.com, newscorp.com, mcafee.com, macworld.com, monster.com, and pcworld. com, qwest.com.
. This opinion is incorporated by reference in the Complaint and, in any event, would be a proper subject of judicial notice under Federal Rule of Evidence 201.
. In the "Defenses” section of his Answer, Defendant critiques the UDRP, invokes Professor Orin Kerr’s scholarship on the Wiretap Act to illuminate the nature of his security research agenda, raises a number of defenses and arguments applicable to Plaintiff’s unlawful interception and disclosure of electronic communications claim, and critiques American privacy law. He also raises a Rule 11 “defense” and a "defense” based on the New York Rules of Professional Conduct, which the Court interprets as motions for sanctions and denies as meritless.
. Because these allegations are admitted in the Answer, the Court does not conduct an independent examination of whether they would withstand more careful scrutiny. It is settled, however, that registrations with the U.S. Patent Trademark Office can support a finding that a mark is distinctive and famous. See TCPIP Holding Co. v. Haar Communications Inc., No. 99 Civ. 1825,
. This point also extends to some of the indicia of bad faith, which are just that: indicia. See, e.g., 4 McCarthy on Trademarks and Unfair Competition § 25:78 (4th ed.) ("[C]aution must be exercised, for the mere registration of multiple domain names for resale does not per se mark one as a cybersquatter. One may be in a justifiable business of reserving many domain names. For example, in one case defendant legitimately registered thousands of domain names for resale as Vanity’ e-mail addresses which consisted of common surnames, names of hobbies, careers, pets, sports interests, and music. The fact that some of these resembled prominent trademarks did not make defendant a cybersquatter.” (footnote omitted)).
. The ACPA expressly creates another safe haven from unduly broad application of the bad faith inquiry by providing that "[b]ad faith intent ... shall not be found in any case in which the court determines that the person believed and had reasonable grounds to believe that the use of the domain name was a fair use or otherwise lawful.” 15 U.S.C. § 1125(d)(1)(B)(ii).
. For example, Defendant denies in his Answer that a proposed transfer of the IDN to Plaintiff contemplates any payment by Plaintiff, a fact taken as true for purposes of this motion.
. Defendant does not explain why he has not yet transferred the IDN to Plaintiff. That bare omission, however, does not suffice to justify a finding of commercial intent or extortionate demands.
