For brand and marketing teams: domains you should be watching

A product name clears trademark review, the campaign brief is written, and someone in brand checks whether the matching .com is available. It is not. Neither is the .net. A third party registered both six months ago and is asking five figures for each. That scenario is not rare – it is, in our experience, one of the most common situations brand teams face when they contact us.

Brand team domain monitoring means tracking the registrations, expiry dates, and abuse patterns that affect your marks across every zone – before a campaign launches, before a domain lapses, and before a dispute becomes necessary. The UDRP and its ccTLD equivalents can recover domains registered in bad faith, but recovery takes time and money that proactive monitoring can avoid. WIPO administered 6,282 domain-name cases in 2025, a record, and the pattern across those filings shows that brand and marketing teams are frequently the first to spot the threat – and the last to be equipped to act on it.

This page identifies the domain problems brand teams encounter most often, explains the monitoring posture that prevents the worst outcomes, and maps the handoff to dispute counsel when prevention has already failed.

What domain problems do brand teams actually face?

The problems are more specific than a general cybersquatting warning suggests. Brand teams sit at the intersection of trademark, marketing, and procurement – which means they encounter domain risk in several distinct forms, each requiring a different response.

Typosquatting and look-alike registrations are the most visible. A single transposed letter or a TLD substitution (.net for .com, .co for .com) can redirect customer traffic, intercept email, or host counterfeit goods. Brand teams running paid campaigns are especially exposed: the campaign drives traffic to a domain the brand does not control, and the squatter profits from the confusion.

Campaign-specific registrations are a second category. A new product name, a promotional hashtag turned domain, or a sub-brand announced at a trade event can all attract opportunistic registrations within hours. We regularly advise marketing teams who discover that a domain matching their campaign slogan was registered the week after the announcement was filed with the trademark office. The registration date matters because it affects the UDRP's third element – a domain registered before the mark existed is much harder to challenge on bad-faith grounds.

Lapsed defensive registrations are a quieter problem. A portfolio of defensively registered variants gets audited once and then quietly forgotten. Renewal dates pass. The domain lapses and is picked up by a drop-catcher. The brand now faces a recovery dispute over a name it once owned.

Unauthorized reseller and affiliate registrations add a layer of internal complexity. A regional distributor registers a country-specific variant of the brand name – in good faith, in their view – and the brand must then decide whether to negotiate a transfer or manage the relationship through the distribution agreement. The dispute procedure is available, but using it against a partner carries its own costs.

Why are brand names systematically targeted?

The economics are straightforward. A brand that has invested in marketing creates a predictable stream of direct-navigation traffic. A domain that intercepts even a fraction of that traffic has value – whether the registrant monetizes it through parking, redirects, or simply holds it and waits for the brand to pay.

New gTLD rounds accelerate the problem. With the ICANN application window for the next new-gTLD round having run from 30 April to 12 August 2026, hundreds of new strings are expected to enter the root in the years that follow. Each new TLD is a new surface for registration of a brand name. The Trademark Clearinghouse sunrise period – at least 30 days – gives mark holders a window to register before general availability, but only for marks already recorded in the TMCH. Brands that miss the Sunrise period face a 90-day Claims period during which a matching registration triggers a notice; after that, the window closes and recovery reverts to UDRP or court.

The .ai zone illustrates the dynamic. Administratively the country-code zone for Anguilla, .ai has attracted registration of AI-related brand names at a pace that outstrips monitoring for many brand teams. UDRP panels apply standard bad-faith analysis to .ai, but the sheer volume of new registrations means the window for early action is short.

If your brand is exposed to any of these patterns, an assessment of the domains worth watching – and the cost of watching them – is a useful starting point. Contact info@cognomenlaw.com to discuss a monitoring scope.

Which registrations are worth making defensively – and which are not?

Defensive registration has a real cost, and the portfolio calculus is not simply "register everything." The question is which variants materially reduce risk and which add renewal budget without adding protection.

Worth registering: the exact-match .com for every live mark, the hyphenated variant if the brand name is two words, the primary ccTLD in each market where the brand operates commercially, and – for marks about to enter a new gTLD Sunrise – the exact string in that TLD before general availability. The .com is still the zone where the most abuse originates and where direct-navigation traffic is largest.

Probably not worth registering: every TLD that could theoretically carry the name; single-letter typo variants across dozens of zones; expired generics that happen to include a brand term. The renewal cost of a large defensive portfolio compounds, and many of those registrations would not be confusingly similar enough to cause real harm – or would be recoverable under the UDRP if they were ever used abusively.

The right question is not "can we register this?" but "if a third party registers this and uses it to harm us, can we get it back cheaply?" If the answer is yes – because the bad-faith case would be strong – the defensive registration may not be worth the annual renewal. If the answer is uncertain because the registrant could construct a plausible legitimate use, the defensive registration earns its fee.

Country-code zones require separate analysis. A .de registration is not protected by the UDRP; disputes go to the German courts, with a DENIC DISPUTE entry to block transfer in the interim. A .uk registration is governed by the Nominet DRS – now administered by WIPO since 7 July 2026 – which applies an "abusive registration" test with a lower threshold than the UDRP's cumulative bad-faith requirement. The cost of a defensive .uk registration is trivial against the cost of a Nominet proceeding.

How does brand monitoring work in practice?

Effective monitoring covers three data sources: newly registered domains, RDAP/WHOIS lookups on existing suspicious domains, and trademark watch service alerts. None of the three is sufficient alone.

Newly registered domain feeds flag registrations containing a brand string within hours of registration. The signal volume is high – a common brand term generates dozens of daily alerts – so the monitoring protocol must include a triage layer that filters for the combinations most likely to cause harm: [brand] + geographic suffix, [brand] + [product category], [brand] + common typo patterns.

RDAP lookups – RDAP replaced WHOIS as the standard registration data source on 28 January 2025 – often return redacted registrant data for individuals under data-protection rules. Where the registrant is not publicly visible, ICANN's Registration Data Request Service (RDRS) provides a channel to request non-public data from participating registrars, though disclosure is assessed by each registrar individually and is not guaranteed. Identifying who actually holds a suspicious domain can take time the brand team does not always have before a campaign launches.

Trademark watch services send alerts when a new application or registration contains a mark string. These alerts are essential for catching defensive trademark filings that could later be weaponized against the brand – a registrant who secures a trademark registration in a weak jurisdiction and then uses it to defeat a UDRP complaint is a documented pattern. Staying ahead of those filings is part of domain risk management, not a separate trademark function.

When does monitoring become a dispute – and how does the handoff work?

Monitoring identifies the threat. Deciding what to do with it requires a legal read on whether the three UDRP elements are met, which procedure fits the zone, and whether immediate filing or a demand letter makes more sense given the registrant's apparent posture.

The three UDRP elements – confusing similarity to a mark, no legitimate interest, and registration and use in bad faith – must all be established. Brand teams can assess the first element readily: does the domain look like the mark? The second and third require a fact investigation. Has the registrant used the domain? For what purpose? Was there a prior business relationship that could create a plausible legitimate interest? Is there a pattern of similar registrations – typosquatting at scale across a single registrant – that supports a bad-faith inference even without active use?

A demand letter before filing has tactical value in some situations: the registrant transfers the domain to avoid the filing cost, or an offer to pay a nominal amount to avoid a dispute closes the matter cheaply. In other situations, a demand letter alerts the registrant and gives them time to construct a defense or transfer the domain to an associate. The decision requires judgment, not a template.

In a recent matter (a cluster of look-alike .com domains across a product launch campaign, spring 2026), we ran a demand-and-monitor sequence for approximately eight targeted registrations: a subset transferred promptly on demand, and the remainder were the subject of a consolidated UDRP complaint filed before the campaign launch date. The UDRP's same-holder rule allowed the complaint to cover multiple domains in a single filing, avoiding separate proceedings for each.

Where the domain is a .uk, the Nominet DRS includes a free mediation stage before any expert decision. For brand teams with a commercial relationship with the registrant – a former distributor, an agency that registered a campaign domain – mediation is often the faster path to a transfer, and it costs nothing if the mediation resolves the matter.

For a .de or other jurisdiction with no UDRP equivalent, the handoff to local litigation counsel is required. DENIC's DISPUTE mechanism blocks transfer while the court action proceeds; that registration block should be filed as soon as the claim is identified, because the window before the domain is transferred elsewhere can be short.

What does it mean to verify who owns a domain before you buy it?

Buying a domain removes the monitoring problem – in theory. In practice, the acquisition creates a new risk if chain of title and prior dispute history are not checked. A domain acquired at a broker's market price may carry a prior UDRP complaint that narrowly failed, a DENIC DISPUTE entry that was never lifted, or a trademark claim that was settled on terms restricting the buyer's use.

Domain due diligence before an acquisition covers: current registrant identity and registration history; UDRP and DRS complaint history on the domain string; active trademark conflicts in the target zone; and whether the asking price reflects the domain's legitimate market value or a bad-faith extraction demand. A five-figure price is not itself evidence of abuse, but paying five figures without running due diligence means you cannot verify that you are buying clean title.

AUDIENCE_MYTH: many brand and marketing teams assume that buying a domain settles the question of ownership. It does not. A competitor with prior trademark rights can still file a UDRP after a transfer, arguing that the new registrant's acquisition was itself in bad faith. The acquisition must be documented as commercially justified and the due diligence record preserved.

In a matter from autumn 2025, a brand team was negotiating acquisition of a .com that matched a product name under development. Due diligence revealed a prior UDRP complaint – filed by a third party with a similar mark – that the current registrant had defeated by demonstrating legitimate use. The brand team's planned use would have faced the same claim, and the product-name trademark strategy was adjusted before the domain was acquired. The due diligence fee was a fraction of the dispute cost avoided.

For a focused read on a domain you are considering purchasing or a monitoring scope for an upcoming campaign, email info@cognomenlaw.com.

What is the cost and timeline for enforcement at this scale?

Brand teams working at volume – monitoring dozens of marks across multiple zones – benefit from understanding enforcement costs before they are in a dispute. The numbers below are drawn from COGNOMEN's published fee schedule and the forum's own published rates.

A UDRP complaint at WIPO for a single domain costs USD 1,500 in forum fees for a single-member panel. COGNOMEN's indicative legal fee for a turnkey UDRP complaint is USD 2,500–4,000, set after a case assessment. A consolidated complaint covering multiple domains against the same registrant uses the same filing, with WIPO's fee scaling to USD 2,000 for up to ten domains (single panel). Where speed matters, WIPO's expedited procedure – available since 9 March 2026 – delivers a decision in about one month for up to five domains, at a complainant fee of USD 4,000.

For a .uk domain, the Nominet DRS expert fee is GBP 750 + VAT for a full contested decision, with the summary (undefended) fee at GBP 200 + VAT. Legal fees are in addition. The procedure typically runs about 8–12 weeks. For a .eu domain, the ADR.eu procedure before the Czech Arbitration Court applies, with fees and timelines governed by that forum's published schedule.

Demand letters and negotiated transfers are priced separately – COGNOMEN's indicative fee starts from USD 1,500 for a demand and buy-back negotiation, plus any escrow cost where a purchase price is agreed. Escrow is the right structure for any domain acquisition above a nominal amount; it protects both parties and creates the documentation chain that later due diligence will look for.

Brand-protection monitoring on a retainer basis – covering regular watch-service reviews, triage, and counsel access – is available from USD 1,000–3,000 per month, depending on portfolio scope. All fees are indicative; the exact cost is set after a case assessment.

COGNOMEN focuses only on domain-name disputes – recovery, defense, and transactions. To discuss a monitoring scope, a campaign launch review, or a specific domain that has already flagged, contact info@cognomenlaw.com.

Related at COGNOMEN

• transactions – domain purchase, sale, escrow, and brand protection services
• Domain enforcement for professional services firms – how professional services brands manage domain disputes globally
• domain due diligence tech – pre-acquisition due diligence on chain of title and dispute history

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.