A friend of mine accidentally let the .com domain of their US business expire, and it was snatched up by an unknown person who has a personal grudge against them. The website is now full of slanderous material about the business, and includes homes addresses of the business owners and pictures of their houses, cars, etc...
My friend owns the trademark on their business name, which is exactly the same as the domain name.
I tried to dig up more information about the .com domain, and the 'whois' shows that webnic.cc is the current registrar, which seems to be in Malaysia. The rest of the whois is privacy guarded by another Malaysian company.
[Note: I'm refraining from mentioning the exact domain name for privacy reasons.]
Q1) Isn't the (USA) law on the side of the business owner in this case?
Q2) Does the fact that the registrar is in Malaysia mean it's hopeless?
Q3) What's the easiest way to get the domain back? Does it cost a lot of money and time?
Update: they are both filing a UDRDP claim, as well as setting up a new domain (in case getting back the domain takes a while). I'll update this question again when it gets resolved.