Cybersquatters Hijack Chichester Baptist Church Domain for Online Casino, Prompting Fierce Retaliation and Nominet Victory

Cybersquatters seized control of the domain chichesterbaptist.org.uk belonging to Chichester Baptist Church in West Sussex, UK, sometime in 2022, transforming what should have been a site for community worship and outreach into a full-fledged online casino hub complete with virtual roulette tables, digital slot machines, and direct links to PayPal-powered gambling platforms; this brazen move not only redirected visitors expecting church information but also inflicted significant reputational damage on the church, which has long voiced opposition to gambling activities that it views as contrary to its values.

Those monitoring domain registrations have seen similar tactics before, where opportunists register or hijack domains mimicking legitimate organizations to exploit traffic, but in this case, the transformation proved particularly jarring since the site's new content clashed directly with the church's mission; visitors landing on the page since 2022 encountered flashing lights from slot reels spinning endlessly, roulette wheels promising quick wins, and prominent calls to action urging deposits via familiar payment methods like PayPal, all while the church's name remained prominently displayed in the URL.

The hijackers wasted no time repurposing the domain, populating it with casino-style games that mimicked popular online offerings, including high-energy virtual roulette where players could bet on red or black amid animated dealers, alongside clusters of digital slot machines themed around fruits, gems, and adventure motifs that chimed with every simulated spin; links embedded throughout directed users to external PayPal casinos, streamlining deposits and withdrawals to keep the gambling flow uninterrupted, even as the church grappled with the fallout from search engines still associating their name with these illicit activities.

Chichester Baptist Church, a community fixture in West Sussex serving families and locals through services and events, found its online presence—once a simple portal for service times, youth programs, and charitable appeals—replaced by this gambling facade, leading to confusion among parishioners who stumbled upon roulette tables instead of hymn schedules; experts in domain disputes note that such cybersquatting often preys on trusted names to siphon traffic, turning a church's digital footprint into a profit engine for anonymous operators, and here the irony sharpened since the church had publicly campaigned against gambling's societal harms, making the hijack all the more provocative.

But here's the thing: the domain's .org.uk extension, managed under UK rules, should have offered some protection, yet the squatters held firm for years, raking in whatever traffic they could from unwitting searches for the church, until the congregation decided enough was enough and launched a formal challenge.

When Chichester Baptist Church submitted a dispute to Nominet, the UK domain registry body handling such complaints under its Dispute Resolution Service (DRS), the squatters didn't go quietly; instead, they retaliated by uploading AI-generated images that depicted church pastors in compromising underwear poses alongside a mock church interior layout festooned with casino banners, roulette wheels perched on altars, and slot machines lining the pews, turning the site into a deliberate provocation that amplified the reputational sting.

These AI-crafted visuals, which surfaced shortly after the dispute filing, showed pastors in tight-fitting undergarments striking awkward poses amid gambling motifs, while the fabricated church floorplan reimagined stained-glass windows as jackpot displays and pulpits as dealer stations; observers tracking the saga, as detailed in reports from The Sun, highlighted how this escalation aimed to embarrass the church and deter further action, yet it only underscored the abusive nature of the registration, with Jacob Gagnon named among the cybersquatters involved in the hijack and response.

Take one expert who reviewed similar DRS cases: they point out that retaliation like this, while rare, often backfires by providing complainants with clearer evidence of bad faith, and here the AI images—generated via accessible tools that blend faces with absurd scenarios—served as digital graffiti that Nominet panelists couldn't ignore when weighing the complaint.

On March 4, 2026, Nominet delivered its verdict in DRS Decision D00028535 (Chichester Baptist Church v Jacob Gagnon), ruling the domain registration abusive and ordering its immediate transfer back to the rightful owners; panelists determined that the squatters registered and used the domain in bad faith, exploiting the church's trademarked name without permission, diverting traffic for commercial gain through casino promotions, and engaging in retaliatory conduct that disrupted the church's legitimate online presence.

The decision, accessible via Nominet's public DRS database, outlined key findings: no legitimate interest existed for the respondents in holding chichesterbaptist.org.uk, the use misled internet users into believing gambling content came from the church itself, and the post-dispute alterations with AI imagery demonstrated clear intent to harm; as a result, the domain switched hands swiftly, restoring control to Chichester Baptist Church and allowing them to rebuild their site free from casino overlays.

What's interesting about this outcome lies in Nominet's streamlined process, where complainants like the church submit evidence of prior rights—such as longstanding use of the name in their branding and events—prompting a rapid panel review that wraps in weeks rather than months; those who've followed DRS rulings know panels apply strict criteria under the Policy for .uk Domain Disputes, assessing rights, bad faith, and fairness, and here all boxes checked against the squatters.

The hijack caused tangible harm beyond mere annoyance, as search engine results lingered with cached casino pages tied to the church's name, potentially deterring visitors wary of stumbling into gambling traps while seeking spiritual resources; parishioners reported awkward encounters with outsiders questioning the church's supposed casino ties, and local media coverage amplified the story, drawing national attention to how digital vulnerabilities expose even non-profits to exploitation.

Jacob Gagnon, identified as a key figure in the squatting operation, faced direct scrutiny in the DRS ruling, with panelists noting his role in maintaining the casino setup and authorizing the retaliatory uploads; cases like this reveal patterns where individuals scoop up expired or weakly protected domains, flipping them for ad revenue or direct gambling leads, but Nominet's intervention serves as a reminder that UK .uk domains come with robust safeguards against such abuse.

And yet, the church's victory highlights proactive steps others can take: monitoring domain statuses, renewing registrations promptly, and filing DRS complaints at the first sign of trouble, since evidence like screenshots of casino content and AI retaliation strengthens claims immensely; researchers studying cybersquatting trends indicate thousands of similar disputes annually through bodies like Nominet, with success rates hovering high for clear-cut bad faith instances such as this one.

Chichester Baptist Church reclaimed chichesterbaptist.org.uk after four years of cybersquatter control, a saga that unfolded from 2022 casino conversion through retaliatory AI antics to Nominet's March 4, 2026 ruling in their favor; this episode underscores the vulnerabilities of domain ownership in an era of easy hijacks and AI mischief, while affirming the effectiveness of UK dispute mechanisms in restoring order. Now, with the domain back online for its intended purpose, the church moves forward, leaving squatters like Jacob Gagnon to face the consequences of their digital overreach, and reminding domain holders everywhere to stay vigilant in protecting their corner of the web.