Step-by-step: defend a .online domain against a UDRP complaint

Step-by-step: defend a .online domain against a UDRP complaint. UDRP and ccTLD domain recovery and defense across .online. Email the firm to assess your case.

A UDRP complaint lands in your inbox. The domain is a .online. The complainant says it copied their trademark. You have 20 days to respond, the clock is running, and the remedy they want is transfer of your registration to them. What you do in those 20 days decides whether you keep the name.

To defend a .online domain against a UDRP complaint, a registrant must rebut at least one of the three elements under Paragraph 4(a) of the UDRP – identical or confusing similarity, absence of rights or legitimate interests, and bad-faith registration and use. The .online zone operates under the UDRP through WIPO and the Forum, so the same Policy that governs .com applies here. A standard case resolves in roughly two months; the filing fee for a three-member panel at WIPO begins at USD 4,000, split if the respondent requests it.

This guide walks each step in sequence, flags the trap each one hides, and explains when an RDNH finding – a panel declaration that the complaint itself was an abuse of process – is a realistic goal rather than wishful thinking.

Step 1: Understand the governing rules for a .online domain dispute

The .online zone is a new gTLD administered under ICANN's accredited-registrar structure, and the UDRP applies to it just as it does to .com and .net. That means the complaint will be heard at one of the four accredited providers – WIPO, the Forum, CAC, or ADNDRC – whichever the complainant selected. WIPO and the Forum together handle the overwhelming majority of proceedings.

The trap here is assuming that .online is somehow different from legacy gTLDs, or that the panel will apply a looser standard because the TLD is newer. Panels do not. The three-element test is identical. What does differ is that some complainants target .online registrations as a cheap enforcement exercise, betting that the registrant will not respond. That bet is worth contesting.

As a respondent, the first thing to confirm is the provider named in the complaint. Dig out the commencement notice from the provider itself, not just the complainant's cover email. The commencement notice sets the formal response deadline – the 20-day clock – and identifies the panel appointment process. Missing that notice means missing the deadline, which means a default decision on the complainant's evidence alone.

Step 2: Read the complaint carefully – and find the element you can defeat

A UDRP complainant must prove all three elements; a respondent needs to defeat only one. Reading the complaint with that arithmetic in mind changes what you look for.

Start with Element 1: similarity. Panels assess this on a pure textual comparison between the domain (stripped of the TLD) and the trademark. If your .online domain does not incorporate the complainant's mark verbatim or near-verbatim, this element may be weak on its face. The trap is assuming that a weak Element 1 automatically ends the case. Panels routinely find confusing similarity even where the connection is oblique.

Move to Element 2: your rights or legitimate interests. This is where most defenses are won or lost. The complainant will assert you have no legitimate interest. Your job is to demonstrate that you do – through the Paragraph 4(c) safe harbors or through other evidence the panel may accept.

Then read Element 3: bad faith. The complainant will point to one or more of the Paragraph 4(b) factors: that you registered the domain primarily to sell it to the mark owner; to disrupt a competitor; to attract users by confusion; or as part of a pattern of abusive registrations. If none of those fits your actual conduct, document why. The trap in Element 3 is silence – a registrant who says nothing about registration intent leaves the panel to infer bad faith from the complainant's framing alone.

Step 3: Build your legitimate-interest record under Paragraph 4(c)

Paragraph 4(c) of the UDRP provides three safe harbors that, if established, demonstrate a legitimate interest: (a) use or demonstrable preparations to use the domain in a bona fide offering before notice of the dispute; (b) being commonly known by the domain name; and (c) legitimate noncommercial or fair use without intent to mislead for commercial gain.

For a .online domain, the most commonly applicable safe harbor is 4(c)(i) – bona fide use before notice. Evidence that supports it includes screenshots of a live website, dated server logs, email correspondence showing the domain was in active use, business registrations, invoices, or contracts referencing the name. The trap is assuming that your own memory of the domain's purpose is enough. It is not. Panels require contemporaneous documentary evidence. Assertions in the response brief, without supporting exhibits, carry little weight.

Safe harbor 4(c)(ii) – being commonly known by the name – is harder to establish for an individual or small business, but it is not unavailable. Trade name registrations, media coverage, social-media profiles, or company incorporation records that predate the complaint can all contribute.

Safe harbor 4(c)(iii) – legitimate noncommercial or fair use – applies where a registrant operates commentary, criticism, or fan sites, provided the site does not seek commercial gain through confusion with the complainant's mark. A key trap here: a parking page monetized through pay-per-click ads will not qualify. Panels have consistently held that PPC revenue generated from a domain that reflects a third party's trademark undercuts any claim of fair use.

Collect every piece of evidence that predates the complaint notice. Organize it by date. Every document that shows you were using the domain before the complainant's lawyer wrote to you is worth including.

To weigh UDRP against a court action for your case, email info@cognomenlaw.com.

Step 4: Document your good-faith registration intent

Element 3 asks whether the domain was registered and is being used in bad faith. It is cumulative: both limbs must be satisfied. If the registration itself was in good faith – you did not know about the complainant's mark, or the mark was not well known in your jurisdiction at the time of registration – then Element 3 should fail regardless of what happened afterward.

The key question is: what did you know at the moment of registration, and what can you prove about it? A registrant who can show they had no reason to be aware of the complainant's mark – because it was unregistered, foreign, in a different industry, or not yet in use – has a credible good-faith argument. Useful evidence includes the date and circumstances of registration, any search or research you conducted before registering, and the price you paid (a domain acquired at standard registration cost is treated differently from one acquired for five figures in an aftermarket bid for the exact mark).

In our practice, we regularly see respondents who registered generic or descriptive .online names years before a complainant's brand became prominent. In one recent matter – a .online registration, spring 2025 – a registrant had held a descriptive two-word name for several years before a mid-size brand entered the same sector. The panel found the registration predated the complainant's trademark rights and denied the transfer.

The trap in this step is the failure to document the "why." A response that simply denies bad faith, without showing what the registrant was thinking at registration and why it was legitimate, is far harder to credit than one supported by a business plan, a dated email thread, or a contemporaneous research note.

Step 5: Decide whether to request a three-member panel

By default, a single panelist hears the case. Either party may request a three-member panel. If the complainant already selected three members, you are bound by that. If they selected one, you may upgrade.

Requesting a three-member panel at WIPO raises the filing fee to USD 4,000 for one to five domains. If the complainant filed for a single panelist, the parties split that higher fee, so your share is roughly half. That is a material cost increase, but there are cases where it is the right call.

When does a three-member panel make sense? First, where the complaint involves a well-funded complainant with a strong brand and the single-panelist draw carries more variance. Three panelists reduce the risk of an outlier decision. Second, where an RDNH finding is a primary goal: three-member panels are statistically more likely to issue reasoned RDNH declarations. Third, where the legal arguments are genuinely complex and benefit from a more deliberative process.

The trap is requesting three members reflexively, as if it signals seriousness. It does not signal anything except cost. If the facts clearly support your position on a single element, a single experienced panelist may be entirely adequate.

We advise on this decision as part of the initial case assessment. Learn more about requesting a three-member panel at COGNOMEN.

Step 6: Assess whether an RDNH finding is realistic

Reverse Domain Name Hijacking is a panel finding that the complainant brought the complaint in bad faith – to deprive a legitimate registrant of a name they had every right to hold. The remedy is reputational, not financial. There is no monetary award. But an RDNH finding on the public record carries real consequences for a complainant, and for the lawyers who filed for them.

When is RDNH realistic? Panels tend to issue these findings where: the complainant knew or should have known that the registrant predated the trademark; the complaint relied on a mark acquired after the domain was registered; the complainant used the UDRP as an extraction tool to pressure a sale; or the complaint's legal arguments were frivolous on their face. In our experience, the most compelling RDNH records are built by respondents who can show a documented, legitimate use of the domain that the complainant's legal team either ignored or mischaracterized in the complaint.

The trap is seeking RDNH as the primary strategy when the complaint, though aggressive, has a colorable basis. Panels rarely find RDNH where the complainant had at least an arguable case on one element. If the mark is well known and predates your registration, even by a little, the bar for RDNH rises sharply. Use RDNH as a conclusion the evidence supports, not as a litigation posture you choose up front.

Step 7: File the response on time and with the right exhibits

The response must reach the provider within 20 days of the commencement notice. That deadline is strict. A late response may be accepted in the panel's discretion, but that discretion is rarely exercised, and relying on it is a significant risk. If you identify the complaint close to the deadline, a short extension may be available in limited circumstances – confirm the provider's rules rather than assume.

A strong response has four components. First, a clear statement of the element or elements you are contesting and why the complainant has failed to carry its burden. Second, your affirmative evidence for legitimate interest: the exhibits described in Step 3, organized by date and labeled precisely. Third, your good-faith registration narrative from Step 4, supported by dated documents. Fourth, if pursued, the RDNH argument – identifying specifically what the complainant knew, when, and why filing regardless constituted bad faith.

The format matters. Panels read many responses. A response that leads with its strongest point, is concise on the law, and does not repeat the same argument in three different formulations is easier to credit. A 40-page brief padded with procedural history and generic policy analysis is not more persuasive than a focused 12-page response with clean exhibits.

In a recent matter – a .online complaint filed by a European brand owner, autumn 2024 – we filed a targeted 15-page response citing the respondent's bona fide use for over three years before the complaint notice, supported by dated screenshots and contracts. The panel denied the transfer and noted the respondent's legitimate interest as well established.

For a read on whether the three UDRP elements are met, reach us at info@cognomenlaw.com.

What evidence decides the outcome?

Every element of a UDRP defense turns on evidence, not argument alone. The documents that consistently decide cases are: (a) proof of the domain's registration date relative to the complainant's trademark filing or first use; (b) contemporaneous records of the registrant's use or intended use at the time of registration; (c) communications between the parties before the complaint, which can cut either way; and (d) the domain's historical content, including archived pages from the Wayback Machine or similar services.

Complainants often attach WHOIS records and trademark certificates and little else. A respondent who brings a richer evidentiary record has an asymmetric advantage. Panels note the quality of evidence, not just its volume. A single well-dated business plan referencing the .online domain is worth more than a dozen affidavits asserting legitimate intent without support.

One evidence category that respondents routinely underestimate: communications. If the complainant or their agent contacted you before filing – whether to demand a transfer, offer a purchase price, or threaten litigation – those messages belong in the record. They can show that the complainant's real goal was acquisition at a below-market price, not enforcement of trademark rights, which is directly relevant to RDNH.

What about the domain's content at the time of the complaint? A live, substantive website is the strongest single indicator of legitimate use. A parked page with third-party ads in the complainant's industry is the weakest. If the domain is parked or undeveloped, the legitimate-interest argument shifts to demonstrable preparations: business plans, correspondence with developers, vendor agreements, or domain portfolio strategies documented before the complaint arrived.

Panels applying the consensus view under the Policy require the complainant to carry the burden on Elements 1 and 3. On Element 2, the burden shifts to the respondent once a prima facie case is made. That means your silence on legitimate interest – even if you think the complainant has not proved bad faith – can be fatal. Address all three elements in the response.

Related at COGNOMEN

• UDRP respondent defense and RDNH services – full scope of how we defend domain registrants
• Request a three-member UDRP panel – when and how to upgrade for stronger review
• FAQ: recovering a domain after a buyback or financing arrangement