FAQ: prove a registrant has no legitimate interest in a .store domain

When can I prove a registrant has no legitimate interest in a .store domain?

You can advance a legitimate-interest challenge the moment you identify that a registrant lacks any recognizable basis under Paragraph 4(c) of the UDRP to hold the domain – meaning they made no bona fide offering of goods or services under the name before the dispute arose, they are not commonly known by the name, and they are making no legitimate noncommercial or fair use of it.

The timing trigger is straightforward. Once you hold trademark rights – registered or, in some jurisdictions, established through use – and the .store domain is either sitting idle, redirecting traffic, or pointing at a page that trades on your brand's reputation, the factual prerequisites for a complaint are often present. The question is whether the evidence you can assemble is sufficient to satisfy the prima facie standard and shift the burden.

What does that look like in practice? Panels look at several indicators. Is the registrant using the domain in any capacity that resembles a genuine commercial venture bearing that name? Does any public record – WHOIS/RDDS data, a business registry, a social-media presence – suggest the registrant is actually known by the mark or a close variant? Has the registrant made any pre-dispute use of the domain that a reasonable observer would call bona fide? If the answers are consistently negative, the prima facie case is usually strong.

Passive holding – where a domain resolves to a blank or parked page – does not automatically equal legitimate interest. Panels have consistently held that doing nothing with a domain, while corresponding to the complainant's mark, is itself evidence tending toward bad faith rather than toward any interest worth protecting. That said, passive holding alone rarely carries a complaint. You still need the mark-similarity element and the bad-faith element to complete the three-pronged test.

We regularly advise brand owners at the point where their monitoring flags an infringing .store registration. The critical first step is always the same: map the registrant's conduct against each of the three safe harbors in Paragraph 4(c). If none applies, the legitimate-interest element is likely meetable – and the complaint can proceed.

Who can prove a registrant has no legitimate interest in a .store domain?

Any complainant who holds rights in a trademark – registered or, under the consensus view, established through sufficient prior use – and can demonstrate that the registrant's conduct falls outside the Paragraph 4(c) safe harbors may advance this element. That includes brand owners, licensees with standing, and entities that acquired the mark through assignment, provided the rights predate or are otherwise relevant to the dispute.

The .store extension is a new generic top-level domain (gTLD), operated under a registry agreement with ICANN. Because it is an ICANN-accredited gTLD, all registrars offering .store registrations are bound by the UDRP. That means the full suite of UDRP complainant rights applies – the same as for .com, .net, or any other generic zone. There is no eligibility restriction on the complainant side specific to .store, unlike some country-code top-level domains that impose local-nexus requirements.

Who tends to bring these complaints? In our practice, .store disputes arise most often in retail, e-commerce, and consumer-goods sectors – which is exactly the market the .store extension was designed to serve. A competitor registering a brand's .store domain to intercept customers, or a speculator registering a well-known brand name in the .store zone hoping for a ransom sale, are the fact patterns we see most frequently.

One nuance worth noting: a complainant who is a trademark licensee rather than the mark owner should confirm standing before filing. Panels generally accept a licensee as a complainant where the license is exclusive and grants the right to enforce the mark. A non-exclusive licensee's standing is less settled, and a complaint filed by a party without clear rights in the mark will fail at the first element before the legitimate-interest question is even reached.

What evidence is needed to prove no legitimate interest?

Because a complainant typically cannot see inside the registrant's business, panels accept a prima facie case built from externally observable facts – primarily what the domain resolves to, what WHOIS/RDDS data shows about the registrant's identity, and whether any public record links the registrant to the disputed name independent of the complainant's mark.

The core evidence set for this element falls into three categories. First, identity evidence: does any business registry, professional directory, or brand record show the registrant is commonly known by the disputed name? Absent such evidence, the registrant's own assertions that they are so known carry little weight without corroboration. Second, use evidence: screenshots of the domain's resolving page (or evidence of non-resolution), archived captures showing prior content, and any correspondence with the registrant all establish what use – if any – has been made of the domain. Third, conduct evidence: offers to sell the domain, demand letters from the registrant, or records of misdirected consumer contact can each indicate the absence of legitimate use and the presence of opportunistic registration.

What about cases where the domain has been registered but never used? Panels have addressed this scenario many times. The consensus position is that a complainant may satisfy the prima facie burden by showing the domain passively resolves, that no obvious legitimate use exists, and that the name corresponds closely to an established mark. The registrant then bears the burden of producing evidence – and a respondent who defaults (files no response) leaves that burden unmet, which typically, though not automatically, favors the complainant.

In a recent matter (a .store typosquat, spring 2025), we assembled a claim record showing the disputed domain resolved to a blank page, no business registry in any jurisdiction listed the registrant under the disputed name, and the registration had followed the complainant's trademark filing by a matter of weeks. The registrant filed no response. The panel transferred the domain without requiring further submissions.

Evidence quality matters as much as volume. A clean, well-organized complaint that tracks each element separately and attaches dated, source-identified exhibits is more persuasive than a sprawling submission with overlapping documents.

Does WIPO or a court decide a .store dispute?

For most .store disputes, WIPO is the primary forum, operating under the UDRP. A court action is a separate and parallel route, available where the complainant seeks remedies beyond transfer or cancellation – most notably monetary damages.

The UDRP's only remedies are transfer or cancellation of the domain. No monetary award, no injunction, no costs order. If a brand owner needs damages – because the infringing .store domain was used in a phishing campaign, for instance, or in sustained consumer deception that caused quantifiable harm – a UDRP complaint alone will not reach that relief.

Where does WIPO fit? WIPO handles a significant majority of UDRP filings globally and is the default choice for .store complaints for several reasons: its published fee structure (the USD 1,500 filing fee for a single-member panel covers one to five domains), its established panelist pool, and its expedited option for single-panel cases involving up to five domains, which delivers a decision in roughly one month. The Forum is the other major UDRP provider; filing fees there begin around USD 1,300 for one to two domains on a single-member panel.

The choice between WIPO and the Forum can affect timeline and cost, but not the substantive test – the Policy is identical before both. We assess each matter against the forum's published case statistics, the nature of the domain, and the likely complexity of the record before recommending a provider.

Court proceedings for .store cybersquatting operate in parallel to the UDRP. A complainant may file a UDRP complaint and pursue court action simultaneously, or may choose court-only where the UDRP's limited remedies are insufficient. Court timelines and costs are substantially higher; where local court action abroad is involved, COGNOMEN works alongside local litigation counsel in the relevant jurisdiction.

What if the registrant does not respond?

If a respondent fails to file a response within the 20-day response window set by the UDRP Rules, the panel decides the case on the complaint and any evidence already in the record. Default does not mean automatic transfer – the complainant must still establish all three elements – but an unrebutted prima facie case on the legitimate-interest element will ordinarily satisfy the panel.

Default is common in abusive-registration cases. A speculator or cybersquatter who registered a .store domain opportunistically has little incentive to engage a panel proceeding that will expose the registration's bad-faith origins. Panels note defaults but treat them neutrally in principle; in practice, however, a complaint with solid evidence and an absent respondent is in a stronger position than a complaint facing a resourced defense.

What the panel does in a default is proceed to the merits. It reviews the complaint, examines the exhibits, applies the three-element test, and issues a decision. Where the complainant's evidence on all three elements is clear and the registrant has offered nothing to contradict it, transfer orders in default cases are consistent. Where the complainant's case has gaps – a weak similarity argument, thin bad-faith evidence, or an ambiguous registrant identity – default alone will not paper over those deficiencies.

We have defended registrants facing complaints where the complainant's prima facie case on legitimate interest was superficial. Even where our client was in default risk, a well-constructed response identifying a legitimate business use, a prior registration date, or a generic descriptive term can completely change the outcome. The 20-day window is short; acting quickly after a complaint is received is essential.

Can the decision be appealed or challenged?

A UDRP decision is not directly appealable within the UDRP system. However, either party may challenge the outcome in a court of competent jurisdiction – typically the registrant's domicile or the registrar's principal place of business – within the standard 10 business-day implementation window, during which the registrar suspends action on the transfer pending any court challenge.

The implementation window matters. After a panel issues a transfer order, the registrar waits ten business days before moving the domain. A losing registrant who believes the panel applied the test incorrectly can file a court action during that window and seek an injunction staying the transfer. Courts in the US, for example, have entertained such actions under US anticybersquatting legislation, effectively converting the UDRP outcome into a starting point for de novo judicial review rather than a final, unreviewable award.

What about Reverse Domain Name Hijacking? A panel may find that the complaint was brought in bad faith to deprive a legitimate registrant of a domain – an RDNH finding. RDNH carries no monetary penalty; it is a reputational sanction against the complainant. But it matters. An RDNH finding on record signals to future panels that the complainant has abused the process, and it can deter opportunistic complaints by brand owners who file without meeting the three-element test.

In our respondent work, we pursue RDNH arguments where the record supports them. A complainant who filed knowing the registrant had a legitimate interest, who failed to disclose prior use, or who used the UDRP as leverage in a commercial negotiation rather than as a genuine rights-enforcement tool is exposed to an RDNH finding. That exposure is a meaningful deterrent in appropriate cases.

There is no mechanism within the UDRP for a second hearing, a remand, or an amendment to a decision. The decision is final within the UDRP. Courts remain the only avenue for substantive review of the panel's factual and legal conclusions.

What is the deadline once a case starts?

Once WIPO or the Forum formally commences a case – meaning the complaint has been found procedurally compliant – the respondent has 20 days to file a response. That window is set by the UDRP Rules and does not automatically extend.

The full timeline from complaint to decision is typically about two months for a standard single-panel case. The sequence runs: complaint filed and reviewed for compliance; formal commencement notice sent to the registrant; 20-day response window; panel appointed; decision issued; 10-business-day registrar implementation period. Extensions to the response period require a showing of exceptional circumstances and panel or provider approval – they are granted, but not as a matter of course.

For brand owners, the clock runs in a different direction. There is no formal statute of limitations on filing a UDRP complaint, but delay can harm the case. A registrant who builds up years of legitimate use after registration can potentially convert what would have been an abusive registration into a defensible position. Filing promptly after identifying the infringing .store domain preserves the clearest record of the registration's bad-faith origins.

WIPO's expedited option for cases involving up to five .store domains on a single-member panel can compress the resolution timeline to roughly one month. That option is available to complainants who request it at the time of filing. It does not change the substantive test, the respondent's rights, or the remedies – it only shortens the overall timeline.