Step-by-step: defend a .com domain acquired as an investment

Step-by-step: defend a .com domain acquired as an investment. UDRP and ccTLD domain recovery and defense across .com. Email the firm to assess your case.

A demand letter arrives. A WIPO complaint follows. The .com domain you acquired as an investment — held legitimately, never used in bad faith — is suddenly at risk of forced transfer to a complainant who claims your name infringes a trademark you may never have heard of. What do you do next, and in what order?

To defend a .com domain acquired as an investment, a respondent must answer the UDRP complaint within 20 days of commencement and establish at least one of the Paragraph 4(c) safe harbors: a bona fide offering, being commonly known by the name, or legitimate noncommercial or fair use. The proceeding runs before WIPO, the Forum, or another accredited provider, and a standard case is decided in about two months. Where the complaint is demonstrably abusive, the panel may also declare Reverse Domain Name Hijacking.

This guide walks each step in order, identifies the specific trap each one hides, and explains how the evidence you build today determines the outcome weeks from now.

Step 1: Understand what the UDRP actually requires — and what it does not

A UDRP complaint must prove all three elements of Paragraph 4(a) of the Policy: confusing similarity to a trademark the complainant holds, the absence of your rights or legitimate interests in the domain, and registration and use in bad faith — both limbs, cumulative. Miss any one, and the complaint fails.

Domain investors often assume the hardest element to defeat is the first — similarity. It rarely is. Trademark registration dates, geographic scope, and acquired distinctiveness all affect whether the complainant actually "has rights" in the relevant sense. More commonly, investors lose on the second and third elements, not because they lacked legitimate interest, but because they failed to document it in a way the panel could see.

The trap here is complacency on the similarity element. A complainant who holds a national trademark registration may well clear the first element even if their mark is weak or geographically narrow. Do not plan your defense around defeating element one alone. Build a record that answers all three.

One important clarification: the UDRP is not a trademark infringement proceeding. The panel does not award damages. It does not issue an injunction against your business. The only remedies are transfer or cancellation of the domain. That framing matters — it shapes which arguments carry weight and which fall outside the panel's mandate.

Step 2: Verify the complaint date and preserve your response window

The moment WIPO or another accredited provider formally commences the proceeding, a 20-day clock begins. Miss it and you default. A default does not guarantee a complainant's win — panels still apply the three-element test — but a respondent who does not file deprives themselves of the most important tool available: a written record.

Check commencement correspondence immediately. The provider sends notice to the email address in the WHOIS/RDDS record for the domain. If that address is outdated, hosted by a privacy proxy, or simply not monitored, the clock still runs from the formal commencement date. The trap here is notification failure. Registrants who use a registrar's privacy service and do not keep a working contact address behind it frequently miss commencement entirely.

As soon as you identify the complaint, do two things simultaneously. First, screenshot or download the full complaint and all exhibits — the complainant's submissions are the roadmap for your response. Second, place a registrar lock on the domain if one is not already in effect. A UDRP complaint triggers an automatic lock through the registrar, but verify it. No transfer or deletion should occur during the proceeding.

Extensions are available but not automatic. WIPO and the Forum each allow extensions on reasonable grounds — typically a request for additional time to gather evidence. Do not assume an extension will be granted; apply early if you need one.

For an assessment of your domain dispute at this early stage — before you file a response — contact info@cognomenlaw.com.

How do you prove legitimate interest in a .com you bought as an investment?

Paragraph 4(c) of the UDRP lists three circumstances that, if shown, establish your rights or legitimate interests. For investment-held domains, the most applicable are the first and third: a bona fide offering of goods or services before notice of the dispute, and legitimate noncommercial or fair use.

A bona fide offering does not require active development of a website. Panels have consistently recognized that domain investment — the acquisition and holding of domains consisting of common words, descriptive phrases, or dictionary terms, with an intent to sell at market value — can constitute a legitimate business activity. The critical qualifiers are that the domain must be comprised of terms with a meaning independent of any specific trademark, and the investor must not have targeted the complainant's mark at the time of registration.

The evidence that panels find persuasive includes the following. First, acquisition records: when you bought the domain, from whom, and at what price. A secondary-market purchase before the complainant's trademark matured is powerful. Second, portfolio context: if the domain is part of a broader portfolio of descriptive or generic names, that pattern evidences a bona fide investment strategy rather than targeted cybersquatting. Third, WHOIS/RDDS history: if the domain resolved to a parking page with generic advertising — not advertising targeting the complainant's goods — that supports a legitimate holding pattern. Fourth, any offer-to-sell history: offers made to the general market, not specifically to the complainant, strengthen the investment argument. An unsolicited demand directed only at the trademark owner is a different matter and cuts against you.

The trap in this step is assuming that holding a domain without a developed website is self-evidently innocent. Panels look at the totality. A parked domain showing pay-per-click links in the complainant's product category, even if placed there automatically by a registrar's parking service, creates a bad-faith inference you will have to rebut. Audit the domain's historical content before you file your response.

We regularly advise domain investors whose principal defense rests on the generic or descriptive character of the name. The approach — documenting the acquisition rationale, the portfolio composition, and the parking page content history — is methodical, but it requires sourcing records that may date back years.

Step 3: Evaluate the bad-faith allegation and identify your strongest counter-evidence

Bad faith under Paragraph 4(b) of the UDRP is defined by four listed circumstances — among them, registration primarily to sell to the mark owner at a profit, registration to disrupt a competitor, and registration to attract users for commercial gain by confusion — plus any other facts showing opportunistic targeting of a trademark. The complainant must show both registration and use in bad faith. That cumulative requirement is your structural advantage.

For an investment-held domain, the most common bad-faith allegation is registration-for-sale. The complainant argues you registered the domain specifically to extract a ransom from the trademark owner. Your counter-evidence should address the timing, the intent, and the targeting.

Timing is often decisive. If you registered or acquired the domain before the complainant's trademark existed — or before it had acquired meaningful public recognition — bad faith at registration cannot stand. Trademark application dates, first-use dates, and priority dates are all relevant. Gather them.

Intent must be shown from objective evidence, not just your assertion. If you can show that the domain consists of a common English word, a geographic term, or a phrase in ordinary use in the relevant industry, panels are far less likely to infer that you targeted a specific brand. Panels have consistently held that a respondent who registers a domain with a plausible generic or descriptive meaning, with no prior awareness of the complainant's mark, does not register in bad faith merely because a trademark later emerges.

Targeting is the third axis. Did you contact the complainant first? Did you use their brand name in any communications about a sale? Did your parking page specifically advertise the complainant's category of goods? Each affirmative answer makes your defense harder. Each negative answer — especially if documented — is evidence to put before the panel.

In a recent matter (a .com generic-term investment, spring 2025), we assembled a defense record showing that the respondent had registered the domain several years before the complainant's trademark application date, had held a portfolio of over thirty similarly descriptive names, and had never initiated any contact with the complainant. The complaint was denied.

Step 4: Draft the response — what to include and what to omit

A UDRP response is not a court pleading. It follows a specific format set by the applicable provider's Supplemental Rules. WIPO's format is the most widely used. The response must address each element of Paragraph 4(a) in turn, and it must attach all supporting evidence as exhibits. Length is less important than precision.

Address element one — confusing similarity — even if you concede it. Conceding similarity without qualification surrenders credibility. Note whether the mark is registered or unregistered, its priority date, its geographic coverage, and whether the domain consists of a generic word that the complainant does not own exclusively.

On element two — legitimate interests — lead with the 4(c) safe harbor most applicable to your situation. Be specific. Panels discount bare assertions ("I bought the domain as a generic investment") unless they are supported by concrete evidence. A declaration stating when you acquired the domain, why, and what your intentions were — corroborated by acquisition records — carries weight.

On element three — bad faith — take the registration and use limbs separately. Show that at the time of registration you had no knowledge of the complainant's trademark, and show that the way the domain has been used since registration does not generate confusion for commercial gain at the complainant's expense.

The trap in this step is overreaching. Respondents sometimes file lengthy responses packed with tangential arguments. Panels read hundreds of cases. A focused response addressing each element with evidence is more persuasive than a sprawling one that buries the key facts. Omit arguments you cannot support. Do not allege facts you cannot prove. And do not accuse the complainant of bad faith without the evidentiary foundation to back it.

Step 5: Assess whether an RDNH claim is realistic

Reverse Domain Name Hijacking is a finding that the complaint was brought in bad faith to deprive a legitimate registrant of their domain. It is available under the UDRP where the complainant knew or should have known that the complaint could not succeed. The finding carries no monetary penalty, but it is a formal and public record against the complainant — a material deterrent for serial filers.

RDNH findings are not routine. Panels reserve them for cases where the abuse is clear: where the complainant filed with knowledge that the respondent's registration predated their trademark, where they advanced arguments demonstrably contradicted by the public record, or where the complaint was transparently an attempt to acquire a generic domain without paying market value.

In our practice, the most reliable RDNH fact patterns involve three elements together: a respondent registration date that precedes the complainant's trademark priority date by a meaningful margin, a domain composed of a common word or phrase, and a complainant who has made no credible argument on bad-faith use. When all three are present, an RDNH request is worth pursuing. When only one is present, the risk of diluting a strong legitimate-interest defense by over-claiming RDNH is real.

Request RDNH in the response, not as an afterthought. Panels will not ordinarily make the finding sua sponte. State the basis concisely: the complainant was or should have been aware of X, Y, and Z, and filed notwithstanding. Panels have found RDNH where complainants filed against long-established registrants holding generic names with a clear commercial rationale — and where the complainant's own submission revealed awareness of those facts.

If a prior filing or complaint has already produced a difficult outcome, a focused second read can identify the element that was missed. Email info@cognomenlaw.com to discuss.

Which forum should handle a .com domain dispute — and does it matter?

For a .com domain, the complainant selects the forum. The major options are WIPO, the Forum, CAC, and ADNDRC. As a respondent, you file your response before whichever provider received the complaint. You do not choose the forum — but you can request a three-member panel.

The forum choice matters more than many investors realize. WIPO and the Forum together handle roughly 97% of all UDRP proceedings. WIPO's published panelist lists and searchable decision database give both parties the ability to research likely approaches to investment-domain defenses. The Forum has its own panelist pool and its own accumulated body of decisions. Neither is uniformly more respondent-friendly; individual panel composition matters far more than the institutional provider.

If the complainant requested a single-member panel and you want a three-member panel, you may request one. The parties then split the higher three-member fee. A WIPO three-member panel costs USD 4,000 for one to five domains, compared to USD 1,500 for a single-member case. The three-member option is worth considering where the facts are close, the domain is valuable, or the complainant is a large brand with resources to mount an aggressive case. Three panelists can reach a different outcome than any one of them sitting alone.

The decision matrix here is simple: if the domain is worth significantly more than the additional panel cost, request three members. If the complainant's case is weak and your evidence is strong, a single member is usually sufficient. In a recent matter (a .com dictionary-word domain, autumn 2025), we advised against a three-member panel request where the complainant had plainly failed to establish a pre-registration trademark with any coverage in the domain's most plausible market — a single panelist decided the case in the respondent's favor.

One cross-zone note: if the same brand also holds a .co.uk or other ccTLD version, and a parallel complaint is brought under Nominet's DRS, the procedures diverge significantly. Nominet's test is "abusive registration," and the DRS reads registration or use abusively — a lower threshold than the UDRP's cumulative "registered AND used in bad faith." A defense that succeeds at WIPO is not automatically portable to Nominet, and vice versa. Any parallel ccTLD dispute needs independent assessment under the governing national procedure.

What evidence actually decides the outcome?

Panels evaluate the written record alone. There is no oral hearing, no cross-examination, no live testimony. Every fact you want the panel to know must appear in a document attached to your response. The implication is direct: evidence you hold but do not submit does not exist for the panel.

The evidence that consistently moves outcomes in investment-domain defenses falls into five categories. First, domain registration records showing the date and circumstances of acquisition — ideally with a contemporaneous invoice, aftermarket transaction record, or registrar confirmation. Second, trademark records showing the complainant's first filing date and first-use date, sourced from the relevant patent-and-trademark office database. Third, historical website or parking page screenshots — particularly from the Wayback Machine or similar archive — documenting what the domain resolved to over time and confirming that any pay-per-click advertising was generic, not targeted at the complainant's category. Fourth, any communications between you and the complainant, including any demand letters or negotiation correspondence, in their entirety. Fifth, portfolio evidence: a list of comparable domains you hold, with registration dates, showing a pattern consistent with a bona fide investment strategy.

The trap here is assuming the panel will search for evidence on your behalf. They will not. A panel that sees a parked page screenshot showing ads for the complainant's product category and no rebuttal evidence will draw the obvious inference. Submit the counter-evidence explicitly, and in the response label each exhibit and explain its significance. Do not leave interpretation to chance.

We have defended investment domains where the critical piece of evidence was a secondary-market invoice showing the domain was acquired before the complainant's trademark application. That single document, attached as an exhibit and referenced in the response, eliminated the bad-faith-at-registration argument in its entirety. Assemble the archive before you draft a word of the response.

Related at COGNOMEN

• COGNOMEN respondent defense and RDNH service — how we build the legitimate-interest record and pursue RDNH findings
• Defending a UDRP complaint over a domain registered for a store — step-by-step guide for store-name respondents
• FAQ: recovering a lapsed .biz domain — key questions on registration gaps and prior rights