Run due diligence before buying a .br domain: what panels actually de…

Run due diligence before buying a .br domain: what panels actually de. UDRP and ccTLD domain recovery and defense across .br. Email the firm to assess your cas…

A buyer agrees to purchase a .br domain for a five-figure sum. The escrow closes. Three months later, the prior registrant's trademark-rights claim surfaces in a SACI-Adm proceeding, and the new owner discovers that the domain's registration history is the central exhibit against them. The deal that looked clean was anything but.

When you run due diligence before buying a .br domain, the governing procedure is Brazil's Sistema de Administração de Conflitos de Internet — SACI-Adm — administered under rules specific to the .br namespace and distinct from the UDRP. A buyer who inherits a domain with a history of bad-faith use may face cancellation or transfer in a proceeding they did not anticipate. Due diligence that maps chain of title, prior-dispute history, and trademark risk before the transaction closes is the difference between a clean acquisition and an immediately contested one.

This analysis covers the .br dispute framework, what panels examine when a purchased domain is challenged, and the structural safeguards that responsible acquisition practice requires.

What governs .br domain disputes and why it matters before you buy

Brazil's .br namespace is administered by NIC.br, and domain disputes are handled by SACI-Adm, the country's mandatory arbitral mechanism for .br conflicts. SACI-Adm is not the UDRP. It was developed to reflect Brazilian legal culture and trademark doctrine, and any buyer who approaches a .br acquisition through the lens of a WIPO UDRP complaint will misread the risk landscape entirely.

The core test under SACI-Adm asks whether the domain was registered or is being used in a way that infringes the complainant's rights — broadly interpreted to include registered trademarks, trade names, and in some readings unregistered rights with market recognition in Brazil. That breadth is the first due diligence risk. A domain that would survive the UDRP's comparatively narrow trademark test may still fall to a SACI-Adm challenge based on a trade name, a corporate name registered with JUCERJA or another state commerce board, or a right established through use rather than registration.

SACI-Adm proceedings are conducted in Portuguese, before panels appointed under the applicable rules. Remedies include cancellation of the domain registration and, where the complainant holds eligible Brazilian status, transfer. A buyer who has acquired the domain is the respondent in any post-acquisition proceeding; prior bad faith is attributed to the registration history, not wiped clean by a change in ownership.

The practical consequence: if the prior registrant acquired or used the domain in bad faith, that history does not disappear on transfer. Panels have consistently held that a clean-hands acquisition does not automatically extinguish a colorable trademark claim. That principle alone makes pre-transaction chain-of-title review non-negotiable.

How does chain-of-title review work for a .br domain purchase?

Chain-of-title review for a .br domain means tracing every recorded holder of the domain, the dates of each registration or transfer, and the circumstances under which each change occurred. The NIC.br WHOIS — now surfaced through RDDS — shows the current registrant and, for many domains, a registration date. What it rarely shows is the full transfer history.

A thorough chain-of-title review therefore requires more than a WHOIS lookup. It involves:

• Requesting cached and archived WHOIS records, typically through web-archive services, to reconstruct the sequence of registrants over time.
• Reviewing any SACI-Adm decisions or pending proceedings in which the domain appears as a subject. SACI-Adm decisions are published, making it possible — though requiring Portuguese-language review — to confirm whether the specific domain was the subject of a prior complaint, a prior cancellation that was then re-registered, or a transfer that followed a proceeding.
• Cross-referencing the domain's registration date against the trademark registration dates of obvious potential claimants. Where a domain was registered shortly after a trademark filing by a major Brazilian brand in the same sector, that proximity is a red flag regardless of whether a formal proceeding was ever filed.
• Checking the domain's DNS and content history — using archival tools — to determine whether the domain was ever pointed at a parking page, a pay-per-click site, or a site offering competing goods. Panels draw heavily on prior use evidence, and a buyer who inherits a domain that spent two years pointing at a competitor's keyword advertisements carries that prior use into any future proceeding.

In our practice, we have reviewed .br acquisition targets where the WHOIS showed a recent, clean-looking registrant but the archived DNS history revealed a years-long period of trademark-adjacent parking activity. That gap between apparent and actual history is precisely what chain-of-title review is designed to catch.

To assess the chain-of-title risk on a specific .br domain before your transaction closes, contact info@cognomenlaw.com.

What prior-dispute history reveals — and what panels do with it

Prior-dispute history is not merely a flag that someone once objected to the domain. It is a window into how a panel is likely to characterize the registration's provenance. A domain that was the subject of a SACI-Adm complaint — even one that was withdrawn, settled, or decided in the registrant's favor — carries a documented controversy that a future panel will read as part of the factual record.

Where a prior proceeding resulted in a finding against the registrant but the domain was not cancelled — for example, because the complainant withdrew or because the remedy applied to a different domain in a series — a subsequent buyer may find that documented finding cited against them. Panels in the .br system, consistent with the broader approach under most ccTLD rules, examine the full history of the registration. They are not required to treat each registration event as a fresh start.

Conversely, a clear prior proceeding in which the domain was affirmatively upheld — where a panel found legitimate interest and no bad faith — is the strongest possible due diligence output. A buyer acquiring a domain with a favorable decision on record has documentary support for the proposition that the registration was and remains clean. That support does not make the domain immune from future challenge, but it materially changes the risk profile.

In a recent matter involving a .br secondary-market acquisition (autumn 2025), we identified through pre-closing review that the target domain had been the subject of an abandoned SACI-Adm proceeding two years earlier. The prior respondent had not filed a substantive response; the complaint was withdrawn before a decision issued. That pattern — no defense, no decision — left the domain's status entirely unresolved. We advised the buyer to seek a price adjustment and to structure the acquisition with indemnification provisions specifically covering SACI-Adm risk before closing.

What evidence do panels actually weigh when a .br domain is contested after transfer?

The evidence that determines a SACI-Adm outcome falls into three broad categories: identity or similarity between the domain and a protected right; the registrant's claim to legitimate interest; and the registration's apparent purpose or use.

On the similarity question, panels examine whether the domain corresponds to a Brazilian trademark registration, a well-known mark under Brazilian trademark law, a corporate trade name, or a right established through documented market use. The breadth here distinguishes .br practice from the UDRP. A complainant need not hold a federally registered trademark at the time of registration; rights arising through use, through a trade-name registration with a commerce board, or through a well-known-mark declaration by the Instituto Nacional da Propriedade Industrial (INPI) all qualify as a basis for challenge. A buyer conducting due diligence should therefore search not only INPI's trademark database but also the commercial registry databases of the major Brazilian states.

On legitimate interest, the panel asks whether the registrant has a genuine connection to the name — a business operating under that name, a documented descriptive use, or a prior history of use predating the complainant's rights. A buyer who acquired the domain without operating under the name, without a Brazilian business presence connected to the name, and without developing any goods or services under the domain faces a thin legitimate-interest argument if a challenge comes. The acquisition price paid for the domain, while not determinative, can be read by a panel as evidence that the buyer understood the domain's trademark association — particularly where the purchase price significantly exceeds the cost of standard registration.

On bad faith, panels review the full use record. A domain that was used in bad faith before the buyer acquired it does not become good-faith simply by changing hands. The panel's analysis focuses on whether the registration history — not just the current registrant's conduct — bears the hallmarks of abusive registration. That is why the content and DNS history check is as important as the identity of the current holder.

There is a minority view in some ccTLD systems — and it surfaces occasionally in .br-adjacent discussions — that a bona fide purchaser for value, with no knowledge of a prior infringement, should receive some protection from claims rooted entirely in the prior registrant's conduct. The consensus among panels, however, is that domain registration history travels with the domain. A buyer relying on the good-faith-purchaser argument faces an uphill case in a SACI-Adm proceeding. Due diligence, not post-acquisition argument, is the appropriate response to that risk.

If you have already acquired a .br domain and received notice of a SACI-Adm proceeding, email info@cognomenlaw.com for an assessment of the record and your options.

How to structure a .br domain acquisition to manage dispute risk

The structural question — how to transact, not just whether to transact — is where due diligence findings translate into deal mechanics. A buyer who has identified a moderate prior-dispute risk can often proceed, provided the transaction documents allocate that risk correctly.

Several structural tools are standard in well-managed .br domain acquisitions.

Escrow: .br domain transfers should always close through a neutral escrow arrangement. NIC.br's transfer mechanics mean the domain is released from the seller's account to the buyer's account only when both sides have confirmed the terms. Escrow does not eliminate legal risk, but it ensures the buyer has not paid before the domain is in their account and gives a window for due diligence findings to surface prior to final release of funds. A market-standard escrow for a domain transaction in this range uses a recognized third-party escrow service with specific instructions for the .br transfer protocol.

Representations and indemnification: the purchase agreement should include a seller representation that the domain is not, to the seller's knowledge, the subject of any pending or threatened SACI-Adm proceeding, litigation, or third-party claim. The indemnification clause should cover SACI-Adm proceedings commenced within a defined window — typically twelve to twenty-four months post-closing — that are based on the prior registrant's conduct or use. That window does not protect against a brand-new claim arising from the buyer's own future use, but it addresses the most common post-acquisition risk.

Price adjustment: where due diligence reveals a non-trivial prior-dispute history — an abandoned proceeding, a period of bad-faith-adjacent use, a proximity between the registration date and a significant trademark filing — the appropriate market response is a price reduction that reflects the risk premium, or a conditional closing structure in which a portion of the purchase price is held in escrow pending a dispute-free period. We regularly advise buyers on how to frame that negotiation without abandoning the deal.

Post-closing monitoring: a buyer who acquires a .br domain with any identified prior dispute history should implement active monitoring — at minimum, a watch on the domain's registration status with NIC.br, a trademark watch for new Brazilian INPI filings that include the domain string, and periodic review of published SACI-Adm decisions for any proceedings referencing the domain or a closely related mark.

Choosing between acquisition, recovery, and registration: the .br decision matrix

A buyer evaluating a .br domain has three possible paths, and the right choice depends on the domain's history, the availability of the name, and the buyer's trademark position in Brazil.

If the target domain is actively registered by a third party who is willing to sell, secondary-market acquisition is the route — with the full due diligence regime described above, including SACI-Adm prior-dispute review, DNS history, INPI trademark search, and contractual risk allocation. The filing fee for a SACI-Adm proceeding is modest by international standards, but the cost of defending one as a new registrant — having inherited a problematic domain — is not.

If the target domain is registered by a party who appears to have no legitimate interest — a cybersquatter or a speculative holder with no Brazilian business connection to the name — and the buyer holds Brazilian trademark rights or a qualifying nexus, a SACI-Adm complaint is an alternative to acquisition. The complaint route costs less than a secondary-market purchase at scale, avoids the risk of inheriting prior bad-faith history, and — if successful — delivers the domain through a panel decision that itself constitutes clean title. A SACI-Adm complaint that succeeds produces a transfer order, not a purchase; the domain arrives with a panel's express finding of abusive registration, which is the cleanest possible provenance.

If neither party has registered the specific domain yet — perhaps the target is a long-tail .br variant of a brand term — standard NIC.br first-come, first-served registration at published rates is the cleanest option, with a monitoring program established at the same time to track any third-party attempts to register phonetically similar or typosquat variants.

Compare this to a purely UDRP-governed zone like .com: there, a buyer acquiring from a cybersquatter can sometimes rely on the UDRP complaint mechanism, a roughly two-month process at a USD 1,500 WIPO filing fee for a single-member panel, to recover a domain without paying a secondary-market premium. In the .br zone, that option exists but is filtered through the SACI-Adm rules and Brazil's specific eligibility requirements for transfer. Any buyer operating across both .com and .br simultaneously — a common pattern for brands with regional Brazilian presence — should run parallel but distinct due diligence tracks for each zone, recognizing that a clean UDRP record for the .com does not signal anything about the .br domain's status.

In a second matter from our practice (summer 2025, a .br acquisition for a European brand entering the Brazilian market), we recommended against secondary-market purchase and instead filed a SACI-Adm complaint on behalf of the brand. The domain was held by a registrant with no demonstrable connection to the trademark — the domain had been registered the week after the brand's INPI filing was published — and the DNS history showed a pay-per-click parking configuration for the full period of registration. The complaint route delivered a resolution through the SACI-Adm process, avoiding the premium and the inherited-history risk entirely.

The myth of the clean secondary-market purchase — and the RDNH mirror

A common misconception among buyers entering the .br market is that acquiring a domain from a willing seller, at market price, through an escrow, is inherently safer than disputing it. The logic runs: if I pay for it and it transfers cleanly, no one can take it from me. That belief is wrong in material ways.

First, as noted above, a SACI-Adm panel's analysis of the registration's legitimacy is not reset by a sale. The prior registrant's conduct is part of the record. The only way to neutralize prior bad-faith use is to demonstrate that the buyer's interest is independently legitimate — which requires a genuine business connection to the name, predating the challenge, not merely the fact of having paid for it.

Second, the purchase price can itself become evidence. A buyer who pays a significant secondary-market premium for a domain that precisely matches a well-known Brazilian trademark, with no apparent business reason other than the trademark association, creates a record that a panel may read as constructive knowledge of the trademark's existence. That inference, drawn from the purchase itself, can support an adverse finding on bad faith even where the buyer had no subjective intent to infringe.

The mirror image of this risk appears on the complainant side. Where a brand owner files a SACI-Adm complaint against a buyer who conducted genuine due diligence, paid market price, and holds an independently legitimate interest in the name, the complainant risks a finding analogous to reverse domain name hijacking under the UDRP — a determination that the complaint was filed to deprive a legitimate registrant. The consensus across most ccTLD systems is that abusive complaints draw adverse findings, and the .br system reflects that balance. We have seen complainants file on domains acquired through clean secondary transactions, where the motive appeared to be recovering a domain at zero cost rather than vindicating a genuine trademark right. Those proceedings generally do not end well for the complainant.

What the UDRP record can — and cannot — tell you about .br risk

Buyers operating across multiple zones sometimes treat a clean UDRP record as a proxy for overall domain health. That approach works reasonably well within the gTLD space, where the UDRP's consistent application across WIPO, the Forum, CAC, and ADNDRC makes a decision in one proceeding predictive of how a panel in another would approach the same facts. It does not transfer to the .br context.

The .br namespace is distinct from UDRP-governed zones in several critical respects. The rights that qualify as a basis for challenge are broader under SACI-Adm than under the UDRP — trade names and commerce-board registrations qualify; the bad-faith test is not identical; the remedy of transfer requires the complainant to hold Brazilian eligibility, which is a qualification requirement not present in gTLD proceedings. A brand that was the complainant in a successful WIPO UDRP action for a parallel .com domain should not assume that the .br domain is either safe from challenge or recoverable on the same arguments without a Brazil-specific analysis.

Equally, a domain that survived a UDRP challenge under Paragraph 4(a) — because the respondent demonstrated legitimate interest under Paragraph 4(c) — may face a harder road under SACI-Adm if the .br rules read the legitimacy question differently. The procedural records are non-binding across systems. Panels do not give deference to decisions issued under a different ccTLD's rules. The due diligence function, therefore, is not complete until both the gTLD record (UDRP decisions) and the .br SACI-Adm record have been reviewed independently.

For buyers who hold or are acquiring across a portfolio that spans .com, .br, and other ccTLDs simultaneously, we regularly advise on a coordinated monitoring and dispute-readiness structure that treats each zone's risk profile as distinct, while using shared intelligence — trademark watch data, RDDS monitoring, archived DNS history — across the portfolio.

Related at COGNOMEN

• Domain transactions, pre-acquisition due diligence, and brand-protection monitoring services
• Case study: due diligence before a ccTLD domain purchase in the .pl zone
• Step-by-step guide to filing a UDRP complaint for a .co domain recovery