Step-by-step: protect a brand in a new .com gTLD launch

Step-by-step: protect a brand in a new .com gTLD launch. UDRP and ccTLD domain recovery and defense across .com. Email the firm to assess your case.

A new round of gTLD launches opens a window — and a trap. Registry sunrise periods, land-rush auctions, and General Availability all create moments when a third party can register a string that mirrors your brand and immediately redirect traffic, solicit payment, or simply park the name and wait. The question is not whether the risk is real. It is which mechanism responds fastest, which one actually transfers the domain, and what evidence your team needs to have assembled before the first abusive registration appears.

To protect a brand in a new .com gTLD launch, brand owners should act in layers: secure the name during Sunrise, monitor General Availability in real time, and be ready to file either a URS suspension or a UDRP complaint — depending on the remedy needed — within days of an abusive registration. The URS operates under a clear-and-convincing evidentiary standard and delivers suspension for the registration term, not a transfer. The UDRP's three-element test under Paragraph 4(a) is the route to actual ownership. Both paths require the same documentary foundation: a valid trademark, a demonstrable connection to the disputed string, and evidence of bad faith.

This guide walks each step in sequence, flags the trap that hides inside it, and closes with the evidence record and escalation decisions your counsel will need to execute quickly.

Step 1 – Map the risk before General Availability opens

Effective brand protection begins before any domain is registered. The trap in this step is treating it as administrative housekeeping rather than strategic intelligence work. A brand audit carried out late — after the registry has opened General Availability — leaves you in reactive mode on a playing field where registrations happen in seconds.

Start by compiling every trademark registration that covers the brand string: word marks, device marks with dominant verbal elements, and any applications filed but not yet granted. Date and jurisdiction matter enormously. A trademark registered after the domain registration date will not, on its own, satisfy the UDRP's first element, and it will not support a URS filing either. Common-law rights may supplement registered rights in some panels' views, but relying on them alone adds risk and complexity.

Next, map the string variations that a bad-faith registrant might target. Typosquats (a missing letter, a transposed pair), hyphenated versions, and concatenations with generic words ("buy," "official," "store") are predictable patterns. In our practice, we see brand owners surprised by registrations of the brand plus a geographic indicator — "[brand]usa," "[brand]global" — which are cheap to register and effective at capturing misdirected traffic.

Finally, identify which new gTLD strings are relevant to your sector. If your brand operates in finance, registrations in financial-theme new gTLDs may matter as much as the .com variant. This step informs the monitoring scope you will activate in Step 2.

Step 2 – Use Sunrise and Trademark Clearinghouse rights before the public launch

The Trademark Clearinghouse (TMCH) is the gateway to Sunrise protection in new gTLD launches. Sunrise is the pre-launch period during which validated trademark holders may register the matching domain before the general public. Missing it is the most consequential trap in the whole sequence: once Sunrise closes, a bad-faith actor needs only a credit card and a few minutes to take the name.

To participate in Sunrise, a mark must be validated in the TMCH. The validation process requires submitting trademark registration certificates, and — for some marks — additional evidence of use. The TMCH does not validate common-law or unregistered marks without very strong supporting evidence. Plan to submit TMCH validations well in advance of any anticipated gTLD round. Validation is not instantaneous.

A validated TMCH record also triggers Claims Notices. When a member of the public attempts to register a domain matching a validated mark during the Claims period — typically the first 90 days of General Availability — the registrar must notify the would-be registrant that the string matches a trademark. The registrant must acknowledge the notice before completing registration. This does not block the registration, but it creates a contemporaneous record of knowledge: extremely useful bad-faith evidence if a dispute follows. Do not overlook the Claims period as a passive protection tool.

Sunrise registration, where exercised, is a defensive anchor. It does not require any dispute proceeding. But it requires a valid, registered trademark, and it requires that your team act within the Sunrise window. Missing the window by even a day means starting over at Step 3.

Step 3 – Activate real-time monitoring the moment General Availability opens

General Availability is where the volume arrives. Thousands of registrations can occur in the first hours of a new gTLD opening. Monitoring is not optional — it is the detection layer that determines how quickly you can respond. The trap here is relying on manual searching or periodic sweeps, which produce a lag of days or weeks during which an infringing domain can cause real commercial harm.

Effective monitoring covers exact-match strings, close variants, and combinations with descriptive terms. It should cover the .com zone and any other new gTLD strings identified in Step 1. Some brand owners extend monitoring to registrar-published zone files, which are available for many gTLDs under ICANN's centralized zone data service and allow near-real-time detection of new registrations.

The output of monitoring is an alert queue. Not every match will be abusive. Your team — or your counsel — needs a triage framework: Is the registrant identifiable? Is the domain resolving? What content is it serving? Has a pay-per-click parking page appeared? Is the RDDS (WHOIS) record masked by a privacy service? Each of these factors feeds directly into the bad-faith analysis in Step 5.

If monitoring has already flagged a registration and you are assessing the next step, contact info@cognomenlaw.com for a rapid read on whether the URS or UDRP threshold is met and which forum applies.

What does a URS filing actually deliver — and when is it the wrong tool?

The Uniform Rapid Suspension (URS) delivers one remedy: suspension of the domain for the remainder of the registration term. The domain does not transfer to the brand owner. It goes dark — the name resolves to a URS notice page — until the registration expires. That distinction is critical to every strategic decision in this step.

The URS applies to new gTLDs. The filing fee is lower than a full UDRP complaint, and a decision can be issued more quickly. But the evidentiary standard is higher: clear and convincing evidence, rather than the UDRP's balance of probabilities. The URS is calibrated for the clearest cases — exact-match registrations with no plausible legitimate use, combined with unambiguous trademark rights.

When is the URS the right tool? When speed matters more than ownership, and when the evidence is exceptionally strong. A registration of the brand name alone, with immediate pay-per-click parking pointing at competitors, by a registrant with a history of abusive registrations, is a URS-ready fact pattern. The clear-and-convincing standard is satisfied; suspension removes the harm within weeks.

When is the UDRP the better tool? When ownership matters — which is most of the time. If the brand owner needs the domain pointed at the company's own content or redirected to the main site, the UDRP's transfer remedy is the only path. The UDRP at WIPO costs USD 1,500 for a single-member panel on one to five domains, runs approximately two months to a decision, and delivers actual transfer if all three Paragraph 4(a) elements are met. In our practice, we advise brand owners not to default to the URS simply because it is faster. A suspension that expires is a domain that can be registered again.

A third scenario: the abusive registration spans both a new gTLD and a .com. Here, a single UDRP complaint can cover multiple domains registered by the same holder, which is more efficient than parallel filings.

Step 4 – Build the evidence file before filing

Evidence decides domain disputes. The trap in this step is filing on momentum — because a registration looks obviously abusive — without assembling the complete record that the three UDRP elements or the URS clear-and-convincing standard actually require. Panels have denied well-founded complaints because the complainant submitted a trademark certificate without evidence that it predated the domain registration, or documented bad faith in use without addressing bad faith at the moment of registration.

The evidence file for a Paragraph 4(a) complaint should contain, at minimum: the trademark certificate with registration date, jurisdiction, and class; a printout of the RDDS record for the disputed domain capturing the registration date; screenshots of the domain's content at the moment of discovery (with timestamps); evidence of any communications from the registrant — demand letters, unsolicited offers to sell, impersonation emails; and evidence of the brand's market presence predating the registration. For a URS filing, the same categories apply, organized to meet the clear-and-convincing threshold.

Bad-faith evidence is not confined to use of the domain. Paragraph 4(b) of the UDRP lists illustrative circumstances: registration primarily to sell to the trademark owner at a premium; registration to block the owner from using the string; a pattern of registering marks as domains; and registration to attract users for commercial gain by confusion. The Claims Notice record from Step 2 is particularly powerful here: a registrant who acknowledged a Claims Notice and registered anyway has contemporaneous, documented knowledge of the mark.

In a recent matter — a .com typosquat across three new gTLD strings, spring 2025 — we prepared the evidence file within 48 hours of the alert, filed a combined UDRP complaint covering all three domains in a single proceeding, and obtained a transfer order approximately seven weeks after commencement. The Claims Notice acknowledgments were the clearest bad-faith indicators in the record.

Step 5 – Choose the forum and file the complaint

For .com domain disputes the established forums are WIPO and the Forum (formerly the National Arbitration Forum). Together, those two forums administer the overwhelming majority of UDRP proceedings. WIPO's published filing fee is USD 1,500 for a single-member panel covering one to five domains. The Forum's fees begin around USD 1,300 for one to two domains on a single-member panel. The Czech Arbitration Court (CAC) and ADNDRC are also accredited but see far lower volume for .com disputes.

Forum selection is not purely administrative. WIPO's published jurisprudential overview — its consolidated guide to consensus panel positions — provides a degree of predictability that practitioners rely on when advising clients with borderline facts. For straightforward cases, both WIPO and the Forum are well-managed and reliably prompt. For cases where the legitimacy of the respondent's use is contested, the depth of WIPO's published guidance can be a factor in selecting it as the forum.

Once filed, the respondent has 20 days to file a response after commencement of proceedings. If no response is filed, the panel proceeds on the complaint alone — which is common in abusive-registration cases. A default is not an automatic win; the complainant must still satisfy the three elements. But an uncontested complaint simplifies the panel's task considerably.

The choice between a single-member and a three-member panel also matters. A complainant typically requests a single-member panel (cheaper, faster). If the respondent requests a three-member panel, the parties generally split the higher fee. Three-member panels are worth considering in high-value cases or where a close legal question — such as whether common-law rights are sufficient — benefits from a broader review. We discuss forum and panel selection with every client before filing.

Step 6 – Manage the post-decision implementation and recurrence risk

A transfer order from WIPO or the Forum does not implement itself. The registrar executes the transfer after a brief lock period, during which the respondent may seek court review in the relevant jurisdiction. That period is short — the transfer is typically implemented within days absent a court filing — but it is a moment to monitor. In our practice, registrar implementation proceeds smoothly in the vast majority of cases.

The more important consideration is recurrence. A single brand protection action secures one domain. It does not prevent the same or a different actor from registering the next variant when the next new gTLD opens. Sustained protection in a new gTLD environment requires ongoing monitoring (Step 3 on a continuous basis), a policy for fast triage and filing, and — where the brand is significant — proactive defensive registration during each Sunrise period.

In a recent matter involving a .com variant registration that had been sitting parked for over a year, summer 2025, we assessed the passive-holding question against the Paragraph 4(b) framework, documented the registrant's pattern of prior abusive registrations as the bad-faith anchor, and obtained a panel decision transferring the domain without the registrant filing any response. The passivity of the holding, combined with the pattern evidence, was sufficient. That result also prompted the client to extend its TMCH validation record before the next anticipated gTLD round — closing the Sunrise gap that had originally allowed the abusive registration.

If a prior UDRP or URS filing produced an incomplete result, or if a new registration has appeared after a prior transfer, email info@cognomenlaw.com for a focused reassessment of the evidence and the available routes.

Related at COGNOMEN

• URS and new gTLD dispute services — filing, defense, and strategy across new gTLD zones
• New gTLD launch protection globally — multi-zone filing and Sunrise coverage worldwide
• Country-code dispute mediation — procedures and strategy for ccTLD disputes