Protect a brand in a new .online gTLD launch: what panels actually de…

Protect a brand in a new .online gTLD launch: what panels actually de. UDRP and ccTLD domain recovery and defense across .online. Email the firm to assess your…

A third party registers your brand name in the .online zone the morning a new registry opens for general availability. Within hours, the domain resolves to a pay-per-click page monetizing your customers' search traffic. You want it stopped. The question is not whether a remedy exists – it does – but which procedure delivers the result you need and what the panel will actually look for when it reads your submission.

To protect a brand in a new .online gTLD launch, a brand owner may use the Uniform Rapid Suspension system (URS) for a fast, lower-cost suspension, or a full UDRP complaint for a permanent transfer. Both are available for .online domains because the registry has adopted the ICANN-mandated dispute procedures that apply to all new gTLDs. The choice between them turns on the remedy you need, the strength of your evidence, and the evidentiary standard each procedure imposes. URS applies a clear-and-convincing standard and delivers only suspension; UDRP applies the familiar preponderance-of-the-evidence approach and can deliver a transfer. A standard UDRP case runs approximately two months from filing to implementation.

This analysis covers the governing rules in the .online zone, the divergence between URS and UDRP in both standard and outcome, the evidence patterns that decide cases, the minority positions panels have staked out on new-gTLD bad faith, and the realistic next step for a brand owner who discovers a conflicting registration after launch.

What rules govern .online domains in a dispute?

The .online registry operates under the ICANN new-gTLD program, which means that all three standard ICANN dispute mechanisms apply: the UDRP, the URS, and the Trademark Post-Delegation Dispute Resolution Procedure (PDDRP). For practical brand-protection purposes, only the first two matter at the individual-domain level. The PDDRP addresses systemic registry conduct, not individual registrations, so it falls outside the scope of this analysis.

Under the UDRP, a .online complainant must satisfy all three elements of Paragraph 4(a) of the Policy: the disputed domain must be identical or confusingly similar to a trademark in which the complainant has rights; the registrant must have no rights or legitimate interests in the domain; and the domain must have been registered and used in bad faith. The conjunctive "and" in the third element is not a technicality – panels treat it as a genuine dual requirement. A complainant who proves only passive holding after a suspicious registration date will still need to address use, though the consensus view is that passive holding can itself constitute use in bad faith when combined with other indicia.

Under the URS, the same three-element structure applies in abbreviated form, but the evidentiary standard is materially higher. The complainant must show that the claims are established by clear-and-convincing evidence. That standard is deliberately demanding. It was chosen to make URS a narrow, fast-track remedy for the most obvious cases of cybersquatting, not a general substitute for UDRP.

What does this mean for a brand confronting an abusive .online registration? In our practice, we advise clients to think of URS and UDRP as tools with different cutting edges, not identical procedures on different timetables. Choosing the wrong one – filing URS in a fact pattern that calls for UDRP – risks denial and a delay while the abusive domain remains live.

Why does URS suspend rather than transfer, and when is UDRP the better route?

The URS remedy is suspension of the domain for the remainder of the registration term, not transfer to the complainant. That distinction is foundational. A brand owner who wins a URS proceeding does not acquire the domain; it is locked and pointed to an ICANN-standard URS landing page. The registrant retains the registration but cannot use the domain until the term expires. After expiry, the domain generally enters the standard deletion/redemption cycle and becomes available to anyone – including the original bad actor.

Panels have consistently held that URS is appropriate when the evidence is overwhelming and the brand is globally recognized without meaningful question. The clear-and-convincing standard means a registrant who advances a colorable defense – even one that would likely fail under UDRP – may be enough to defeat a URS claim, because the examiner cannot resolve contested evidence under the higher bar. Panels have noted that where a dispute turns on the genuineness of the registrant's claimed prior rights, or on whether a descriptive component was registered for its trademark or its generic meaning, URS is the wrong vehicle.

Consider the following decision matrix. If your mark is incontestable, the domain was registered on the first day of general availability, and the site immediately shows pay-per-click links to competitors, URS can deliver suspension within a matter of weeks at lower cost than UDRP. If, however, the registrant claims any connection to the .online zone's apparent theme – technology, digital services, connectivity – and uses that claim to manufacture a colorable descriptive-use defense, UDRP is the correct tool. UDRP allows the complainant to file a full evidentiary record, and the panel can weigh and resolve that evidence at the preponderance-of-the-evidence standard. The WIPO filing fee for UDRP is USD 1,500 for a single-member panel covering one to five domains; URS fees are lower still, though the precise schedule is published by each accredited URS provider.

There is a second scenario worth addressing separately: the brand owner who needs to act on multiple .online registrations at once. A single UDRP complaint may cover multiple domains, but only if the registrant of record is the same. A dispersed portfolio of infringing .online domains held through privacy services or under different registrant names will require either multiple proceedings or, where the pattern is clear enough, an argument for consolidation. In our practice, we assess consolidation eligibility before filing, because a misfiled multi-respondent complaint can be dismissed in part, costing time and fees.

For an assessment of whether URS or UDRP fits your .online dispute, contact info@cognomenlaw.com.

What evidence decides the outcome of a new-.online brand dispute?

Evidence in a .online brand dispute follows the standard UDRP three-element structure, but the new-gTLD context introduces specific factual questions that panels take seriously. Getting the evidence package right is the difference between a transfer order and a denial.

On the first element – identity or confusing similarity – the comparison is straightforward: the domain name against the trademark. For .online disputes, panels typically strip the gTLD designator before comparing, treating ".online" as a functional component with no distinguishing value. A domain consisting of your brand name plus ".online" is confusingly similar for the same reason that "brand.com" would be. Panels have consistently held that adding a new gTLD to a mark does not mitigate similarity. Descriptive additions between the mark and the gTLD – "brand-services.online", "official-brand.online" – are evaluated case by case, but the consensus is that descriptive or generic additions rarely save the registrant on element one.

The harder evidentiary battles are on elements two and three. On element two, the complainant bears the practical burden of making a prima facie case that the registrant lacks rights or legitimate interests, after which the burden shifts to the registrant to come forward with evidence of the Paragraph 4(c) safe harbors: bona fide offering before notice of the dispute, common known-by association with the name, or legitimate noncommercial fair use. In the new-gTLD context, panels scrutinize the timing of the registration relative to the launch phases of the TLD. A registration made during the Trademark Clearinghouse (TMCH) Sunrise period – available only to verified mark owners – carries a strong presumption of legitimacy, while a general-availability registration made on launch day by a party with no apparent connection to the brand is difficult to explain innocently.

The Trademark Clearinghouse is worth a dedicated paragraph because it is the mechanism that most directly shapes the evidence record in new-gTLD disputes. Before general availability, new gTLD registries are required to offer a Sunrise registration period to TMCH-verified mark holders. A brand owner who recorded its mark in the TMCH before the .online launch and registered its exact-match domain during Sunrise has the clearest possible evidence of priority. Conversely, if the infringing registrant was somehow granted a Sunrise registration – because it, too, holds a mark registration, perhaps in a different class or jurisdiction – the panel must weigh competing recorded marks, and the dispute becomes significantly more complex.

On element three – bad faith registration and use – the most powerful evidence in a new-.online case is typically the combination of: the registration date (day one of general availability); the domain content at the time of filing (PPC links, competitor redirection, or active confusion); the registrant's RDDS/WHOIS record (privacy-masked, with no apparent connection to any business using the string); and any documented communications demanding payment. Panels have found bad faith on the basis of passive holding alone where the domain string is so closely associated with the complainant's mark that no plausible good-faith use is conceivable – but that reasoning is applied with more caution than complainants sometimes assume.

In a recent matter (a .online launch dispute, spring 2025), a brand owner in the consumer technology sector came to us after discovering that its exact-match brand had been registered by an unknown party during general-availability week. The domain showed PPC links to competing products. We assembled a TMCH-recorded mark certificate, screen captures time-stamped within 48 hours of the impugned registration, RDDS records showing a masked registrant, and evidence that no entity using the name predated our client's mark in any relevant market. The complaint resulted in a transfer order. The key to that outcome was the contemporaneity of the documentation – capturing the domain's content before the registrant had an opportunity to change it.

What is the consensus view on bad faith in new gTLDs, and where do panels diverge?

The consensus position under the UDRP is that panels deciding .online disputes apply the same bad-faith analysis they would apply in .com – the gTLD suffix does not alter the substantive test. Panels have consistently rejected arguments that a complainant who did not register its exact-match domain during Sunrise somehow "assumed the risk" of a third-party general-availability registration. The failure to register a mark during Sunrise is relevant at most as a minor mitigating factor; it does not independently supply a registrant with a legitimate interest or negate bad faith.

The contrary view – and panels do take it occasionally – is that where a mark is weak, geographically limited, or descriptively similar to the TLD string itself, a general-availability registration can reflect a good-faith assessment of the new zone's thematic relevance rather than opportunistic targeting of the mark owner. ".online" is a thematic TLD associated with digital and internet-facing services. A registrant who can demonstrate an active business in digital services, a pre-registration business plan invoking the .online zone, and no awareness of the complainant's mark may succeed on element two. We have seen this argument succeed in its fullest form where the complainant's mark was registered only in a narrow geographic market and the string also had clear descriptive value in the technology sector. The lesson for brand owners is not that weak-mark cases are unwinnable, but that they require a richer evidentiary record to overcome a plausible competing-use defense.

A secondary point of doctrinal divergence concerns the Trademark Clearinghouse's Sunrise Non-Launch Notification (SNLN) system. Some panels treat an SNLN – a notice sent to a TMCH-recorded mark owner that a conflicting domain has been applied for during Sunrise by another party – as evidence that the registry identified a potential conflict that the panel should resolve in the complainant's favor. Other panels treat the SNLN as merely procedural. In our experience, the SNLN is most persuasive as a framing device for the timeline, not as independent evidence of bad faith.

There is also a recurring tension around "typosquat" registrations in the .online zone – domains that substitute a letter, add a hyphen, or transpose characters in the brand string. Panels applying UDRP to .online typosquats generally follow the same analysis as in .com: the test is whether the domain, as registered, creates a likelihood of confusion with the mark when viewed by an internet user exercising ordinary care. Minor alterations rarely protect the registrant. A three-member panel majority in a recent series of decisions we reviewed confirmed that the addition of a single generic word ("services", "official", "store") to a well-known mark in a new gTLD does not break confusing similarity. A vocal minority of panelists has argued for a stricter comparison that excludes TLD suffixes more systematically, but that view has not become dominant.

If a prior UDRP filing produced a denial, or if a URS was dismissed for insufficient evidence, a focused second read of the record can identify what element was missed. Reach us at info@cognomenlaw.com.

How do Sunrise, Trademark Clearinghouse, and launch-phase mechanics affect brand protection?

New gTLD launches proceed in defined phases, and a brand owner who understands the phases can position its evidence before general availability even opens. The sequence is typically: TMCH recording and sunrise registration → Early Access Program (EAP, sometimes with premium pricing) → general availability (GA). Disputes arising from Sunrise registrations by the mark owner's competitors are comparatively rare but legally distinct from GA registrations.

Recording a mark in the Trademark Clearinghouse entitles the mark owner to Sunrise registration rights and activates the Claims Notice system during the first 90 days of GA. When a third party attempts to register a domain matching a TMCH-recorded mark during those 90 days, they receive a Claims Notice informing them that the string corresponds to a recorded mark. Panels treat this notice as highly probative evidence of bad faith: a registrant who was served a Claims Notice at the point of registration and proceeded anyway has demonstrated awareness of the conflicting mark. That awareness, combined with any commercial use of the domain, satisfies the bad-faith elements with minimal additional argument.

The practical implication is significant. A brand owner who recorded its mark in the TMCH before the .online launch, did not register during Sunrise (perhaps because GA was the first time it became aware of the new zone), and then found its domain taken in the GA period, is still well positioned – because the Claims Notice system means the GA registrant likely received notice of the conflict at the moment of registration. Documenting that notice is a critical step in the evidentiary build.

What if the brand owner did not record in the TMCH at all? The absence of a TMCH record weakens but does not eliminate the case. The complainant must instead rely on external evidence of the mark's reputation and the registrant's constructive or actual knowledge. For globally recognized brands, panels infer awareness from the fame of the mark alone. For regional or niche marks, the burden is heavier, and the complainant should assemble market-penetration evidence, advertising records, and any social media or press coverage predating the disputed registration.

What are the cross-zone implications when a brand is targeted across multiple TLDs simultaneously?

A .online dispute rarely appears in isolation. In our practice, we regularly advise brand owners who discover that the same actor has registered the brand string across a set of new gTLDs – .online, .store, .tech, .site, .website – on the same day, sometimes through the same registrar account. Each of those registrations is a separate domain and, technically, a separate dispute. The choice of procedure becomes a portfolio question rather than a single-file decision.

For the .com zone, the UDRP has been the dominant tool for decades, and the filing fee at WIPO covers one to five domains at USD 1,500 for a single panel. For new gTLDs, including .online, the same WIPO UDRP process applies. A single UDRP complaint at WIPO can cover multiple .online domains – and potentially mix gTLD extensions – provided the registrant of record is the same. Where privacy services mask the registrant, a complainant can request registrar verification or file on the information available, identifying common registrar patterns, nameserver configurations, or content fingerprints as evidence of common control.

URS is administered through providers accredited by ICANN, and a URS filing can similarly cover multiple domains in a single proceeding where common ownership is shown. The efficiency argument for URS – lower fees, faster turnaround – is most compelling precisely when the same bad actor holds many domains and the evidence of bad faith is overwhelming for each. If even one of the domains in the group has a colorable competing-use argument, pulling that domain from the URS filing and handling it through UDRP is usually the right approach, since a denial on one URS claim does not necessarily contaminate the others, but it does complicate the narrative.

Where the infringement extends to ccTLD registrations – a .uk or .eu version of the same brand string – the dispute picture shifts. The Nominet DRS governs .uk registrations and uses a different test: "abusive registration," defined as registration that took unfair advantage of or was unfairly detrimental to the complainant's rights. Crucially, the Nominet test reads "registered or used" abusively, a lower bar than the UDRP's conjunctive "registered and used." For .eu, the EURid/ADR.eu procedure applies, with its own eligibility and rights framework. A coordinated multi-zone response – UDRP for the gTLDs, Nominet DRS for the .uk, ADR.eu for the .eu – requires careful sequencing to avoid procedural inconsistencies in how the mark and the bad faith are characterized across filings.

In a recent matter (a multi-zone cybersquatting campaign, autumn 2024), we coordinated UDRP and Nominet DRS filings in parallel for a brand owner in the retail sector. The actor had registered approximately a dozen domains across four TLD extensions within a 72-hour window. Sequencing the filings so that neither panel was confronted with conflicting characterizations of the mark's strength – and so that the registrar-verification responses arrived before either filing closed – was the critical organizational task. Both proceedings resulted in transfer or cancellation orders.

What is the realistic next step for a brand owner after discovering an abusive .online registration?

Speed matters more than most brand owners appreciate at the moment of discovery. The registrant who holds an infringing .online domain is not static. PPC content can be swapped for something more defensible. The domain can be pointed to a genuinely operating website. Privacy records can be updated. Each of these changes affects the evidence record.

The first action is documentation: capture the domain's RDDS/WHOIS record, its DNS resolution, and its web content within hours of discovery, using timestamped screen captures and, where possible, a web-archive service. That contemporaneous snapshot is often the most persuasive single piece of evidence in a subsequent UDRP or URS proceeding, precisely because panels know registrants modify domains after receiving notice of a complaint.

The second action is a rapid legal assessment of which procedure applies. That assessment turns on: the strength and registration status of the mark; whether the mark was recorded in the TMCH before the .online launch; whether the disputed domain is the exact mark or a variant; the content of the domain at the time of discovery; and the registrant's apparent purpose. That is not a self-serve checklist; it is a judgment that requires someone familiar with the current pattern of panel decisions in the new-gTLD space.

The third action is forum selection. For .online, WIPO is the predominant choice for UDRP, given its institutional depth in new-gTLD disputes and its expedited-decision option for single-panel cases of up to five domains – delivering a decision in approximately one month rather than the standard two. The Forum is a credible alternative, particularly for US-based complainants already familiar with its procedures. The Czech Arbitration Court (CAC) offers the lowest-cost entry point for UDRP but is the least used of the four providers and has a shorter track record in new-gTLD matters specifically.

The myth worth addressing directly is that a brand owner who did not register during Sunrise "missed its chance" and must simply accept the abusive registration. That is incorrect. The failure to register during Sunrise does not confer legitimacy on a GA registrant who targets a known mark. Panels have been consistent on this point. The UDRP remains fully available to a complainant who first becomes aware of the .online zone – and the infringing registration – after GA opens, provided the three elements are met.

Related at COGNOMEN

• URS and new gTLD dispute services: fast suspension for infringing new-extension domains
• Brand protection in new gTLD launches: finance-sector panel decisions analyzed
• How to file a UDRP complaint: a step-by-step guide to recovering a domain