Prove a registrant has no legitimate interest in a .ae domain: what panels actually decide

A UAE-registered business discovers that its brand name is sitting in a .ae domain held by a stranger. The registrant is not known by that name, runs no business under it, and has offered to sell the domain at a price that would fund a small office renovation. The brand owner wants the domain transferred. The question is whether the record – the evidence actually submitted – will satisfy the second element under the .ae dispute procedure.

To prove that a registrant has no legitimate interest in a .ae domain, a complainant must satisfy the second element of the applicable dispute procedure: showing that the registrant has not used the domain for a bona fide offering of goods or services before notice of the dispute, is not commonly known by the domain name, and is not making legitimate noncommercial or fair use of it. Under the aeDRP – the ae Domain Resolution Policy that governs .ae disputes – the second element tracks the UDRP's Paragraph 4(c) safe harbors closely, meaning that the burden structure, the safe-harbor logic, and the consensus doctrines developed under the global UDRP are directly relevant to .ae proceedings. The complainant carries a prima facie burden; once met, the registrant must come forward with evidence of legitimacy.

This analysis examines the doctrine, the evidence patterns, and the points where .ae proceedings diverge from mainstream UDRP practice – so that a brand owner weighing a filing understands what a panel will actually scrutinize.

Why the second element is often the procedural center of a .ae dispute

The second element – no rights or legitimate interests – is procedurally distinct from the first and third. Panels consistently hold that a complainant cannot realistically prove a negative about a stranger's internal business reasons. The solution the UDRP and the aeDRP both adopt is the prima facie shift: once the complainant makes a credible showing that the registrant is neither affiliated with the trademark nor engaged in any apparent legitimate use, the burden shifts to the registrant to rebut with evidence. If the registrant defaults or files a thin response, the panel draws the available inference.

That procedural dynamic makes the second element the most fact-intensive part of most .ae complaints. The first element – confusing similarity – is largely a visual or phonetic test against the trademark register. The third element – bad faith – often turns on a handful of recognized bad-faith indicators. The second element, by contrast, requires the complainant to survey and rule out every plausible legitimate-use argument before filing, and then to rebut any that the registrant raises in the 20-day response window that the aeDRP affords after commencement.

Why does that matter for strategy? Because a complaint that states the second element in conclusory terms – "the registrant has no rights" without evidentiary support – invites a thin response that the panel may treat as genuinely contested, extending deliberation and occasionally producing an adverse finding on this element even where bad faith is clear.

How does the aeDRP align with the UDRP on legitimate interest?

The aeDRP for .ae domains mirrors the three-element structure of the UDRP's Paragraph 4(a), including the Paragraph 4(c) safe harbors that define legitimate interest. A registrant can establish legitimate interest by showing any of the following: that before any notice of the dispute, it used or made demonstrable preparations to use the domain in connection with a bona fide offering; that it has been commonly known by the domain name, regardless of trademark status; or that it is making a legitimate noncommercial or fair use without intent for commercial gain by misleading consumers or tarnishing the mark.

The alignment is substantial, but .ae has its own jurisdictional character. The .ae ccTLD is administered by the Telecommunications and Digital Government Regulatory Authority (TDRA) of the UAE, and eligibility to hold a .ae domain requires a UAE nexus – a UAE trade license, a registered trademark in the UAE, or a similar qualifying connection. That eligibility requirement is a structural feature of .ae that does not exist under .com. It is directly relevant to the second element in two ways.

First, a complainant can point to a registrant's apparent failure to maintain – or ever to have held – a qualifying UAE nexus as circumstantial evidence that the registration was not undertaken for any legitimate local business purpose. Second, panels examining .ae disputes import UDRP jurisprudential guidance on the safe harbors because the text of the aeDRP borrows that text, making global UDRP precedent a persuasive – though not binding – reference.

One important caution: the aeDRP does not permit the complainant to demand contractual warranties from the registrant in the way that UDRP representations are built into registration agreements with accredited gTLD registrars. Any deviation between aeDRP and standard UDRP procedure should be confirmed against the current published aeDRP rules with counsel before filing, as registry policies can change.

To weigh UDRP against a .ae dispute filing for your case, email info@cognomenlaw.com.

What evidence actually satisfies the prima facie burden?

A complainant meets the prima facie threshold on the second element by assembling evidence that collectively forecloses the three Paragraph 4(c) safe harbors as applied through the aeDRP. That is a practical exercise, not a theoretical one. Here is how each safe harbor is typically addressed.

Bona fide offering before notice. The complainant should produce a WHOIS/RDDS printout timestamped before the complaint, a screenshot history of the resolving website (showing a parking page, a pay-per-click page, or a blank resolve), and any prior correspondence with the registrant that constitutes notice. Where the domain resolves to a parking page carrying links to competitor products, panels applying UDRP doctrine have routinely found that this does not constitute a bona fide offering. The same reasoning applies under the aeDRP's equivalent provision.

Commonly known by the name. The complainant introduces evidence that the registrant is not identified – by trade license, by trademark registration in the UAE, by media coverage, or by any official record – under the domain name. A UAE trade license search showing no matching licensee is particularly useful in .ae proceedings given the nexus requirement. Where the registrant holds a UAE license under an entirely different business name, that undermines any claim to be commonly known by the domain.

Legitimate noncommercial or fair use. The complainant documents the commercial nature of the domain's use – the presence of advertising, the monetization of click-through traffic, the solicitation of a sale, or the diversion of users to a competing business. Any one of these destroys the noncommercial safe harbor.

In our practice advising brand owners with Middle East registrations, we regularly find that the strongest single exhibit is a timestamped archive of the resolving website showing pay-per-click links to the complainant's own competitors. That single exhibit rules out all three safe harbors simultaneously: it is commercial, it is not a bona fide offering by the registrant, and there is no claim of being known by the name. Assembling that archive early – well before filing – protects against the registrant altering the site after receiving informal notice.

What fact patterns lead panels to rule for the complainant on this element?

Panels examining the second element under UDRP doctrine – and by extension under the aeDRP – have consistently identified a cluster of fact patterns that reliably support a finding of no legitimate interest. Understanding these patterns allows a complainant to assess the strength of its case before incurring filing fees.

The clearest pattern is the passive-holding domain: the registrant registered the domain, pointed it at nothing for months or years, and offered it for sale to the complainant. No business use, no preparations for use, no connection to the name. Panels draw the inference of no legitimate interest almost as a matter of course. Passive holding, where the complainant's trademark is distinctive, strongly supports this element.

Close behind is the pay-per-click parking case. A registrant that monetizes a domain by displaying advertisements – particularly links to the complainant's sector or to competitor products – cannot credibly claim a bona fide offering. The commercial gain is clear; the use of the complainant's mark to attract traffic is the mechanism. Panels have consistently held that this fails the safe-harbor test.

A third pattern is the domain offered for sale at well above registration cost. An unsolicited offer to sell, particularly where the demanded price runs to five figures, is treated as evidence that the registrant's primary motivation was commercial gain from the trademark owner's goodwill, not legitimate use of the domain. In a recent matter we handled – a .ae domain registered in a brand owner's name, offered for resale in autumn 2024 at a price exceeding any plausible operational justification – the combination of the sale offer and the absence of any UAE trade license in the registrant's name produced a panel finding of no legitimate interest without a contested response.

A fourth pattern, occasionally seen in .ae disputes, is a registrant that asserts a right based on a UAE trade license obtained after notice of the dispute. The consensus view under UDRP jurisprudence – applied in aeDRP proceedings by analogy – is that a license or trademark application filed after the complainant's notice cannot retroactively establish legitimate interest. The timing of the registrant's supposed right is scrutinized carefully.

Where do panels diverge, and what is the minority view?

The consensus on the second element is strong, but there are fact patterns where panel outcomes are less predictable and where a minority view exists.

The most contested area involves a registrant who asserts a generic or descriptive claim to the domain. Under UDRP jurisprudence, a registrant that registers a domain corresponding to a common dictionary word or descriptive phrase – even one that happens to match a complainant's trademark – may have a legitimate interest in the generic value of the term, independent of any brand association. The consensus view permits this defense; the minority or restrictive view scrutinizes it severely where the complainant's trademark is well-known in the relevant market and the registrant's claimed generic use is thin or post-hoc.

In .ae proceedings, this tension is sharpened by the UAE nexus requirement. A registrant claiming a generic use should, logically, be able to point to a concrete UAE-registered business or a UAE trademark for that descriptive term. Where no such nexus exists, the generic defense is harder to maintain. We regularly advise complainants to document the UAE trade environment – showing the term is not in active use as a generic descriptor in the UAE market – to preempt this defense before the registrant raises it.

A second contested area is the reseller or distributor case. Panels have recognized, in limited circumstances, that an authorized reseller or distributor may have a legitimate interest in a domain incorporating the brand it distributes, where the site accurately discloses the relationship, offers only the branded goods, and does not mislead consumers as to affiliation. This is the so-called "Oki Data" line of reasoning from mainstream UDRP practice, and it applies in .ae by analogy. The boundary is narrow. Where the registrant was an authorized distributor but the authorization was terminated, or where the site did not meet all four conditions of the reseller test, panels typically find no legitimate interest. The complainant's first task is to establish whether any authorization – past or present – exists, and to document its termination if it does.

A third point of divergence involves personal-name domains. Under the UDRP, a person who registers a domain corresponding to their own legal name has a recognized, though rebuttable, legitimate interest. In .ae, where registrant identity is tied to a UAE-nexus eligibility requirement, this defense is procedurally more constrained. A registrant who claims a personal name but whose disclosed identity does not match the domain raises credibility questions a panel is likely to note.

For a read on whether the three UDRP elements are met in your .ae situation, reach us at info@cognomenlaw.com.

How does the timeline and process affect second-element strategy?

Under the aeDRP, as under the standard UDRP, the registrant has 20 days to file a response after the case commences. A standard case typically concludes within approximately two months of filing. That window is short, and it creates a strategic asymmetry: the complainant has had weeks or months to prepare the evidentiary record before filing; the registrant must respond in 20 days or default.

Default is significant. Where a registrant fails to respond, the panel does not automatically grant the complaint – it still examines each element independently – but it draws the available inferences from the complainant's unrebutted evidence. On the second element, an uncontested prima facie showing typically results in a finding of no legitimate interest. This is why the quality of the complaint's evidentiary presentation on this element matters even in uncontested cases: if the exhibit record is thin, a diligent panel may note the deficiency even without a response.

The only remedies available under the aeDRP, as under the UDRP, are transfer or cancellation of the domain. There are no monetary damages, no costs awards, and no injunctions through this procedure. If the brand owner's goal is compensation – for lost business, for diverted traffic, for reputational harm – the dispute procedure cannot deliver it. Court action in the relevant jurisdiction, handled with local litigation counsel, is the appropriate route for monetary relief.

If the complainant seeks transfer, cancellation, and monetary damages simultaneously, a coordinated strategy – filing the aeDRP or a parallel UDRP complaint for any gTLD counterparts while commencing court proceedings – may be appropriate. We have advised brand owners on exactly this combination in cross-border disputes spanning .com and .ae versions of the same name, where the registrant's conduct in one zone evidenced the intent in the other.

What is the cross-zone dimension when the same name appears in .com and .ae?

Brand owners facing a name squatter rarely encounter a single domain. A registrant who registers a brand's .ae counterpart will often also hold the .com, and sometimes a .org or a .net. The UDRP and the aeDRP are distinct procedures, but the evidence of no legitimate interest is typically the same across zones – the same registrant, the same absence of business use, the same offer to sell.

The right route depends on the zone and the goal. If the primary asset is the .com and the brand is global, a UDRP complaint before WIPO or the Forum is usually the fastest and most familiar path; WIPO's standard single-member filing fee begins at USD 1,500 for one to five domains. If the .ae is the market-critical domain and the registrant is UAE-connected, an aeDRP filing addresses that zone directly. If both are held by the same registrant, a consolidated filing – where the procedure permits – or parallel simultaneous filings may be the most efficient approach.

There is also a scenario where a complainant holds a UDRP transfer of the .com but has not yet addressed the .ae. A prior UDRP transfer decision does not automatically resolve the .ae dispute; the aeDRP panel conducts its own independent analysis. However, a prior UDRP decision that made detailed findings of no legitimate interest is persuasive evidence in a subsequent .ae proceeding, because the factual foundation – the same trademark, the same registrant pattern of conduct, the same absence of a bona fide offering – is often identical.

In our practice, we regularly advise on exactly this sequencing question: whether to file the .ae complaint first, second, or simultaneously with any gTLD proceedings. The answer turns on the urgency of each domain to the business, the likelihood of the registrant transferring assets between zones if alerted, and the relative speed and cost of each procedure.

What respondents and RDNH considerations arise in .ae proceedings?

The aeDRP, like the UDRP, recognizes the concept of Reverse Domain Name Hijacking – the use of the dispute procedure to attempt to deprive a legitimate registrant of a domain it holds in good faith. An RDNH finding is a reputational sanction; it carries no monetary penalty but it is a matter of public record.

A brand owner filing a weak second-element case – for instance, where the registrant demonstrably holds a UAE trade license in the domain's name, registered before the complainant's trademark priority, or where the domain name is genuinely generic – runs a real risk of an RDNH finding. We regularly advise respondents facing abusive .ae complaints as well as complainants, and the pattern that most reliably produces an RDNH finding is a complainant who files knowing that the registrant's prior rights are documented and substantial.

From the respondent's side, the response to a second-element challenge in a .ae proceeding should be organized around direct rebuttal of the complainant's prima facie case. A UAE trade license issued before notice of the dispute, a trademark registration at the UAE Ministry of Economy predating the complaint, contemporaneous correspondence showing business preparations, or a documented reseller relationship – any of these, properly evidenced, can defeat the second element and, in appropriate cases, support an RDNH finding against the complainant.

The 20-day window to file a response is non-negotiable. We have seen respondents lose meritorious defenses because the response was filed late or filed without adequate documentary exhibits. Early engagement – immediately on receipt of the complaint notification – is essential to preserving any legitimate-interest argument.

Decision matrix: choosing the path when you face a .ae second-element dispute

The choice of how to proceed depends on where the strength of the case lies and what the brand owner actually needs.

If the trademark predates the .ae registration, the domain is resolving to a parking page or a sale offer, and the registrant has no documented UAE nexus in the domain name, the aeDRP is the appropriate first step. The evidentiary burden on the second element is manageable with a properly assembled exhibit record. The procedure runs approximately two months; the only remedy is transfer or cancellation.

If the registrant claims a generic right and operates a UAE business under that name, the second element is genuinely contested. A well-structured complaint with UAE market evidence – showing the term functions as a brand identifier rather than a generic descriptor in the UAE – can still prevail, but the outcome is less predictable. Specialist legal advice before filing is worth the cost of the consultation.

If the registrant has a documented UAE trade license in the name and registered the domain before the complainant's UAE trademark filing date, the second element is almost certainly not winnable under the aeDRP. Court proceedings in the relevant jurisdiction, handled with local litigation counsel, may offer a route if the conduct is actionable under UAE law, but the dispute procedure is unlikely to produce a transfer.

If the same registrant holds both the .ae and a .com, a coordinated multi-zone filing – aeDRP plus a UDRP at WIPO or the Forum – maximizes efficiency and creates a cross-proceeding evidentiary record. The UDRP recovery service at COGNOMEN covers this multi-zone approach end to end. For comparison of how the second element is analyzed across European zones, our guide to proving bad faith in .eu proceedings addresses the parallel doctrine in that ccTLD context.

Related at COGNOMEN

• UDRP domain recovery – full complainant service across WIPO, the Forum, CAC, and ADNDRC
• Guide to proving bad faith in a .eu domain dispute – doctrine and evidence for European ccTLD complaints
• FAQ: reverse unauthorized domain transfer – steps to recover after an unauthorized outbound transfer

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.