Someone has already reserved my very unique company name and a bunch of variants.

Without domain validation, what is this user's intention other than fraud/impersonation?

I've already got an active impersonator running a website under my brand name and confusing my customers.