Defend a .br domain against a UDRP complaint: what panels actually de…

Defend a .br domain against a UDRP complaint: what panels actually de. UDRP and ccTLD domain recovery and defense across .br. Email the firm to assess your cas…

A brand owner in São Paulo or a domainer based in Europe holds a .br registration. A foreign trademark owner files a UDRP complaint – or, more precisely, a proceeding under Brazil's SACI-Adm procedure – demanding transfer. The registrant has 20 days to respond once the case commences. Miss that window and the default rate alone does not guarantee a transfer, but it removes every factual argument the registrant could have made.

Brazil's .br zone sits outside the UDRP's direct reach. Disputes over .br domains are resolved under the SACI-Adm procedure, administered by Brazil's CGI.br and Registro.br, applying rules that parallel the UDRP's three-element structure but with local eligibility requirements and procedural differences. To defend a .br domain against a UDRP complaint – or its SACI-Adm equivalent – a registrant must establish at least one of the Paragraph 4(c) safe harbors: a bona fide offering of goods or services, being commonly known by the name, or legitimate noncommercial or fair use. The strength of that record, built before the response deadline, is the single variable that most reliably decides outcomes.

This analysis covers the governing procedure for .br, how the legitimate-interest safe harbors operate in practice, what evidence actually moves panels, when an RDNH finding is realistic, and how the .br route compares to related gTLD dispute paths a complainant might pursue in parallel.

What governs .br disputes – and why the UDRP label can mislead

The UDRP does not apply directly to .br. Brazil's country-code zone is administered by Registro.br, a department of the CGI.br (Comitê Gestor da Internet no Brasil), and that registry has adopted its own administrative procedure: SACI-Adm (Sistema de Administração de Conflitos na Internet). The procedure mirrors the UDRP's logical structure – confusing similarity, absence of legitimate interest, bad faith – but the governing text is not the ICANN Policy, and the filing forum is not WIPO, the Forum, or CAC.

Why does this matter for a respondent? First, a complainant who holds a .com alongside the .br cannot simply file one UDRP complaint and recover both. The .com dispute proceeds before an ICANN-accredited provider; the .br dispute requires a separate SACI-Adm filing. Second, the eligibility rules for holding a .br registration are Brazilian: the registrant must have a Brazilian legal or tax presence (a CNPJ or CPF). A foreign registrant holding a .br faces scrutiny on that point as well as on the merits. Third, the remedy available under SACI-Adm is transfer to the complainant – but only where the complainant itself meets the same eligibility requirements to hold the name.

Practitioners working on the respondent side – including in our practice – routinely see complainants conflate the two procedures. A foreign trademark owner may file a UDRP complaint referencing a .br domain and be surprised to learn it has no procedural traction there. That confusion occasionally benefits the registrant, because a misfiled complaint wastes the complainant's time without advancing any claim.

One further point: more than 87 ccTLDs have appointed WIPO as a dispute-resolution provider and effectively use the UDRP or a close variant – .me, .tv, and .co among them. Brazil has not. For any dispute involving a .br domain, the governing national procedure applies, and current eligibility and procedural rules should be confirmed with Brazilian counsel before any filing.

How do the three-element requirements apply under SACI-Adm?

SACI-Adm applies a test structurally equivalent to the UDRP's Paragraph 4(a): the complainant must establish (1) confusing similarity to a name or mark in which it has rights, (2) absence of legitimate interest on the registrant's part, and (3) bad-faith registration or use. The practical question for a respondent is which of those three elements offers the strongest ground to contest, because defeating any single element defeats the complaint.

On the first element – confusing similarity – the analysis under SACI-Adm follows the same logic panels apply under the UDRP: is the domain a phonetic or visual match for the complainant's mark? Generic top-level domains and the .br country-code suffix are typically disregarded. A domain that reproduces a distinctive mark verbatim rarely gives the respondent room on this element. The stronger ground is almost always the second or third element.

On the third element – bad faith – the SACI-Adm procedure, like the UDRP, looks at registration-and-use conduct. Common indicia include offering to sell the domain to the mark owner for more than out-of-pocket costs, a pattern of registering names that correspond to marks, pointing the domain at a pay-per-click page capitalizing on the mark's goodwill, or passive holding combined with circumstances that make any good-faith use implausible. A registrant who can show that none of those indicia apply – and who has affirmative evidence of a legitimate use – builds the strongest defense on both the second and third elements simultaneously.

For an assessment of whether the three elements are met in your .br matter, reach us at info@cognomenlaw.com.

What safe harbors under Paragraph 4(c) actually protect a .br registrant?

The three Paragraph 4(c) safe harbors – bona fide offering before notice of the dispute, being commonly known by the name, and legitimate noncommercial or fair use – are the respondent's main affirmative defenses. Under SACI-Adm, equivalent safe harbors apply. The challenge is that the respondent bears the burden of producing evidence, and the evidence must relate to the period before the complainant's notice, not to the period after the complaint arrives.

The bona fide-offering harbor is the most commonly invoked. To succeed, the registrant must show it was offering goods or services under the domain name in a genuine commercial sense, not a pretextual one designed to construct a post-hoc defense. Panels – and the SACI-Adm procedure similarly – look at the timing, the content of the site, whether the registrant has any trademark or business registration corresponding to the name, and whether revenue was actually generated. A domain parked at a landing page with generic pay-per-click links does not qualify. A domain genuinely used for a business with invoicing records, social media presence, and client correspondence does.

The "commonly known by the name" harbor benefits registrants who are individuals or entities that have traded under the name independently of the complainant's mark. In the .br context this may require Brazilian documentary evidence – Junta Comercial filings, CNPJ registrations under the relevant name, published advertising in the Brazilian market. The strength of this argument scales directly with how distinctive the complainant's mark is: the more famous the mark, the harder it is to argue independent adoption.

Legitimate noncommercial or fair use covers criticism sites, fan communities, and commentary – a narrower category in commercial ccTLD disputes, but one that panels have recognized where the purpose of the site is clearly expressive rather than commercial. The key is that no commercial benefit flows to the registrant by virtue of the association with the complainant's mark.

Building the legitimate-interest record is not a task that can be performed after the complaint arrives. In our practice, we regularly advise registrants who discover too late that their evidence – registration certificates, business correspondence, invoices, web-analytics data – was not preserved in a form that a panelist can readily assess. The response window is 20 days. That is not enough time to generate evidence that does not already exist. The record must be assembled before any dispute arises.

What evidence actually decides the outcome in practice?

The documentary record is where most .br respondent cases are won or lost. Panel analysis – both under the UDRP and under SACI-Adm's equivalent procedure – is heavily evidence-driven. Assertions in a response that are not supported by annexes carry far less weight than the same assertion paired with a dated document.

The following categories of evidence consistently appear in successful respondent cases. First, dated registration history: the WHOIS record showing when the domain was first registered, and – where the registration predates the complainant's trademark filing or first use – the registration date becomes a powerful anchor for the defense. If the domain was registered before the complainant's mark existed, the bad-faith element is extremely difficult to establish, because bad faith in registration presupposes awareness of a mark that was not yet a mark. Panels have consistently held that a registrant cannot have registered a domain in bad faith with respect to a mark that did not exist at the time.

Second, evidence of actual use: screenshots with embedded timestamps, web-archive captures, hosting invoices, correspondence with customers, tax filings, and social media records all support a bona fide use argument. Consistency matters. A gap of years between registration and any discernible use invites the inference of passive holding with bad intent.

Third, the absence of the complainant's mark indicia in the registrant's conduct: no demand letters to the mark owner, no offers to sell the domain for a premium, no traffic-arbitrage pages exploiting the mark's keywords. Negative evidence of this kind is often underweighted by respondents preparing their own defenses without counsel.

Fourth, Brazilian local documentation: because the SACI-Adm procedure is national, evidence of a legitimate local presence – business registrations, CNPJ records, Junta Comercial filings, local advertising – carries weight that purely web-based evidence may not on its own.

In a recent matter – a .br domain in the services sector, spring 2025 – we assembled a response combining a CNPJ registration predating the complainant's Brazilian trademark application, three years of invoicing under the domain name, and web-archive records showing consistent use. The complaint was denied. The complainant had filed a UDRP-framed argument without locating Brazilian-law evidence specific enough to rebut the respondent's record.

When is an RDNH finding realistic – and what does it actually mean?

Reverse Domain Name Hijacking – a finding that the complaint was brought in bad faith to deprive a legitimate registrant – is available under the UDRP and has been recognized in analogous national ccTLD procedures. Under the UDRP, an RDNH finding is reputational: there is no monetary penalty, no costs award, and no injunction. The finding appears in the public decision record and signals to future panelists that the complainant has previously abused the process.

RDNH is not a routine outcome. Panels grant it sparingly, and the standard is demanding. The consensus view is that RDNH requires more than simply losing a complaint. The complainant must have filed knowing it could not succeed – for instance, where the respondent's registration clearly predates the complainant's trademark, where the complainant could not have established bad faith on any reasonable reading of the evidence, or where the complaint was tactically timed to pressure a legitimate registrant into surrendering the domain.

The contrary view – held by a minority of panels and more commonly seen in single-member decisions – is that a complaint filed in evident overreach, even without proof of subjective bad intent, can justify an RDNH finding where the complainant is a sophisticated party represented by counsel. That reasoning reflects a proportionality principle: a well-resourced complainant who files a complaint that a competent reading of the respondent's WHOIS record would have revealed was hopeless should bear some reputational consequence.

In the .br context, the practical value of seeking an RDNH-equivalent finding is partly deterrence. A complainant who receives an adverse finding – whether labeled RDNH or an equivalent under SACI-Adm – is on record as a repeat abuser if it files again. For a Brazilian registrant whose domain has commercial value, that deterrence has long-term significance beyond the outcome of any single dispute.

We have defended registrants in matters where RDNH was the central objective, not merely a secondary argument. The investment in an RDNH strategy is justified where the complainant is a large commercial actor with a track record of filing marginal complaints, and where the respondent's legitimate-interest record is strong enough to make the complaint's failure foreseeable at the time of filing.

To weigh UDRP defense strategy against an RDNH objective for your .br domain, email info@cognomenlaw.com.

How does the .br procedure compare to a parallel gTLD dispute?

The decision-matrix question for a complainant – and the mirror-image strategic question for a respondent – is whether a .br dispute proceeds in isolation or alongside a parallel UDRP complaint over a related .com or new-gTLD domain. The routes are independent, the forums are different, and the outcome of one proceeding does not bind the other. A complainant who wins a .com UDRP transfer has not thereby recovered the .br, and a respondent who wins at SACI-Adm has not thereby protected its .com.

For the respondent, this independence cuts in both directions. A UDRP loss on the .com can be cited by a complainant in a subsequent .br proceeding as evidence of prior panel findings – but SACI-Adm panelists are not bound by those findings, and a respondent with strong Brazilian-specific evidence can still prevail locally. Conversely, a strong SACI-Adm defense record – particularly Brazilian business documentation – can be used to support the parallel .com defense.

The cost structure also diverges. A UDRP complaint at WIPO for a single domain carries a USD 1,500 filing fee for a single-member panel. SACI-Adm fees are set by Registro.br and are denominated in Brazilian reais; they should be confirmed with the registry directly as current fee schedules are subject to change. Legal fees for respondent defense – across either route – typically fall in a range comparable to complainant-side representation, adjusted for the complexity of the evidence record.

If the registrant holds both the .br and a .com under the same name, and both are under attack, the most efficient defense usually involves coordinating the evidence record across both proceedings – a single well-documented response to the .com, with Brazilian-specific annexes added for the SACI-Adm filing. We have managed parallel proceedings of this type, and the coordination avoids the inconsistency risk that arises when two separate responses are drafted without cross-reference.

A further cross-border dimension: where the complainant's trademark rights are solely or primarily Brazilian, and the domain is also .br, the complainant's gTLD case may be weaker on the first element (confusing similarity read alongside the territorial scope of the mark). Trademark rights that are meaningful in Brazil do not automatically establish a strong UDRP case if the mark is not registered or in use in the registrant's home jurisdiction. Respondent counsel should always review the complainant's trademark register in full, including the jurisdictions and classes of registration, before deciding how much weight that evidence carries.

What is the realistic next step for a .br registrant facing a complaint?

Speed is the governing constraint. The 20-day response window runs from the date the case commences – not from the date the registrant becomes aware of the complaint. A registrant who learns of the filing on day ten has ten days to instruct counsel, assemble evidence, and file a response. That is not unusual in our experience, and it is manageable if the registrant acts immediately.

The first task is procedural triage: confirm the filing forum, confirm the response deadline, and confirm that the complaint meets the basic procedural requirements – proper complainant identity, valid trademark evidence, a correctly named respondent. Procedural defects in the complaint, if any, are identified at this stage and can be raised in the response.

The second task is evidence assembly. This means pulling WHOIS history, web-archive captures, Brazilian business registration documents, invoicing records, correspondence, and any other documentary support for the legitimate-interest argument. The response should be organized element by element – addressing confusing similarity briefly, devoting the most space to legitimate interest and bad faith, and requesting RDNH where the facts support it.

The third task is the panel-selection decision. If the complainant requested a single-member panel, the respondent has the option to request a three-member panel by paying the difference in the applicable fee (under the UDRP, the parties generally split the higher three-member fee). In matters where the outcome is genuinely uncertain and the domain has commercial value, a three-member panel provides more predictability and more deliberation. In matters where the respondent's legitimate-interest case is very strong, a single-member panel is likely sufficient.

In a recent matter – a .com alongside a .br, autumn 2024 – a respondent came to us with four days remaining in the response window. We filed a complete response with twelve documentary annexes in that window, secured a denial on the .com, and guided the parallel SACI-Adm filing the following month. The key was that the business documentation existed; it simply had not been organized. Speed does not substitute for evidence, but organized counsel can work quickly with good underlying records.

The myth that default is safer than defense – and why it is wrong

A persistent myth among registrants who receive a complaint for the first time is that filing no response preserves some future option – that defaulting keeps the matter open for a later court challenge. This is incorrect. A default removes the registrant's voice from the only proceeding in which a panel will examine the facts. The panel still decides; it simply has only the complainant's evidence before it.

Under the UDRP, a panel does not automatically transfer a domain because the respondent defaulted. The complainant must still satisfy all three elements on the evidence presented. But the absence of a response means the panel has no countervailing record: no evidence of legitimate interest, no evidence of good-faith registration, no challenge to the complainant's trademark evidence. In practice, defaults result in transfer at a high rate, because the complainant's uncontested evidence is often sufficient to meet the three-element test.

The court-challenge argument also overstates the available remedy. Under the UDRP, a losing respondent may seek de novo review in a court of competent jurisdiction after the transfer order is implemented. That route is available – but it involves substantially higher cost, longer timelines, and uncertain jurisdictional questions that make it far less efficient than a well-prepared response filed in the original proceeding. We regularly advise registrants who arrive after a default seeking to reverse a transfer; the options at that stage are narrower and more expensive than a timely defense would have been.

The AUDIENCE_MYTH in this space is that a quiet default buys time. It does not. It concedes the record and invites a transfer order that requires the expensive court route to reverse. The right move is to file a timely, evidence-supported response – and to make the RDNH argument if the complaint is overreaching.

Related at COGNOMEN

• Respondent defense and RDNH – the full service overview, including how we build the legitimate-interest record
• Defend a UDRP complaint over a .es domain – comparable ccTLD respondent strategy and cross-border considerations
• Prove legitimate interest in a .pl domain dispute – evidence standards and safe-harbor analysis