Step-by-step: prove a legitimate interest in your .br domain

Step-by-step: prove a legitimate interest in your .br domain. UDRP and ccTLD domain recovery and defense across .br. Email the firm to assess your case.

A brand owner has filed a complaint against your .br domain. The notice from SACI-Adm has arrived. You have a fixed window to respond – and if you do not, a default decision may hand the domain to the complainant without a word from you.

To prove a legitimate interest in your .br domain, a registrant must demonstrate that at least one of the recognized safe harbors applies: a bona fide offering of goods or services, being commonly known by the domain name, or a legitimate noncommercial or fair use of the name. The burden of production shifts once the complainant makes a prima facie case, so a respondent who stays silent is nearly certain to lose. All three UDRP elements must fail the complainant for the domain to remain; showing legitimate interest defeats element two alone – but that is often enough.

This guide walks each step of building that defense, flags the trap hidden inside each one, and explains when an RDNH finding becomes a realistic goal.

What governs .br disputes – and why it matters for your defense

The .br ccTLD is administered by NIC.br under the authority of CGI.br, and domain disputes for .br registrations are handled through SACI-Adm, the dedicated Brazilian administrative dispute procedure. SACI-Adm is not the UDRP; it is a distinct national procedure with its own rules, its own evidentiary standards, and its own panelist pool. The procedure was built with reference to the UDRP framework, so the conceptual architecture – rights, legitimate interest, registration, and use in bad faith – will feel familiar to anyone who has read a UDRP decision. However, the procedural mechanics, filing requirements, and response timelines differ in important respects, and you should confirm the current rules with counsel before filing any submission.

Why does the distinction matter for a legitimate-interest defense? Because the UDRP's Paragraph 4(c) safe harbors – the clearest map to proving legitimate interest – are incorporated by reference into SACI-Adm's framework, but the procedure also draws on Brazilian law governing trade names, descriptive terms, and freedom of expression. A defense that would succeed under the UDRP may need additional grounding in domestic legal context to succeed under SACI-Adm. We regularly advise registrants who hold descriptive or generic .br names that a pure UDRP-style defense, untailored to the Brazilian regulatory context, leaves real gaps in the record.

One further structural point: unlike the UDRP, where a complaint covers any gTLD accredited registrar, a .br complaint runs through the NIC.br administrative framework and cannot be redirected to a UDRP provider. If you hold a parallel .com for the same brand, a UDRP defense strategy and a SACI-Adm defense strategy may need to run simultaneously but separately.

For an assessment of your .br domain dispute, contact info@cognomenlaw.com.

Step 1: Read the complaint before you do anything else

The first and most consequential step is a disciplined reading of the complaint itself – not a skim, but a structured analysis. The complainant must establish three elements. Your job is to find the one that breaks. Registrants who skip this step and file a generic denial typically lose, because the panel sees an unengaged response as corroboration of the complainant's narrative.

Read the complaint with these questions in mind. Does the complainant actually own a trademark registration, or is it relying on common-law rights that may be weaker than claimed? Is the trademark registration in Brazil, or only in other jurisdictions, and if so, what is the scope of its Brazilian use? Does the complaint correctly identify you as the registrant, or is there a factual error in the WHOIS data that undermines the filing? And critically: does the complaint correctly state the date on which you registered the domain? If you registered before the complainant's trademark was filed or became distinctive, the bad-faith limb almost certainly fails – and a complaint filed despite knowledge of that fact is a strong candidate for an RDNH finding.

Trap hidden in Step 1: many registrants focus on the bad-faith accusations and overlook the trademark-rights element. If the complainant's mark is weak, descriptive, or geographically limited, challenge it first. A panel that finds element one unproved never reaches element two. You cannot build a legitimate-interest defense if you have already conceded that a valid, enforceable mark exists.

Step 2: Identify which safe harbor applies to your situation

The Paragraph 4(c) safe harbors – incorporated into SACI-Adm's framework – are the primary tools for proving legitimate interest. There are three; most strong defenses rely on one as the centerpiece and support the others as secondary evidence.

Safe harbor A – Bona fide offering before notice of the dispute. If you were using the domain for a genuine commercial or service offering before you received notice of the complaint, you have the strongest factual foundation. The key word is "bona fide." A site erected overnight after a cease-and-desist letter does not qualify. The use must be genuine, pre-existing, and documented. Evidence includes: dated website archives (the Wayback Machine is useful but needs supplementation), invoices or purchase orders that carry the domain, email headers showing the domain was in active commercial use, advertising records, and screenshots with independent timestamps.

Safe harbor B – Commonly known by the name. If your personal name, trade name, or business name corresponds to the domain, and that correspondence predates the dispute, you may qualify even without a trademark of your own. This safe harbor is narrowly applied; a bare assertion that "people call me this" is insufficient. Supporting evidence includes business registrations (CNPJ or other Brazilian entity records), contracts executed under the name, and third-party references such as press mentions or directory listings predating the dispute.

Safe harbor C – Legitimate noncommercial or fair use. Fan sites, criticism sites, commentary, and certain community resources have succeeded under this safe harbor, but only when the use is genuinely noncommercial, clearly identified as such, and not deceptively similar in presentation to the complainant's own site. The trap here is significant: a site that displays third-party advertising undermines the "noncommercial" claim, even if the content itself is not commercial in nature.

Trap hidden in Step 2: choosing the wrong safe harbor for the facts you can actually document is a common and costly error. Do not claim bona fide commercial use if your site was thin or parked at the relevant time; a panel will check the archive. Do not claim the "commonly known" safe harbor if your entity was incorporated after the disputed domain was registered – the timeline must run in the right direction. Match the safe harbor to the documentary evidence, not to the story you wish you could tell.

Step 3: Build the legitimate-interest record – document by document

Selecting the right safe harbor is only the diagnosis. The work is assembling the record. Panels have consistently held that bare assertions – "I registered this name for legitimate purposes" – carry no weight once the complainant has made a prima facie showing of bad faith. What panels want is contemporaneous, independent documentation that predates the dispute.

Here is a practical checklist for constructing the record:

• Archived versions of the website at multiple dates prior to the complaint, captured through the Wayback Machine or a notarized screenshot service. Note the limitation: Wayback Machine captures are not universally accepted as conclusive; supplement them with hosting records or domain-email logs.
• Business registration documents showing the entity or trade name that corresponds to the domain, with incorporation or registration dates clearly visible.
• Commercial correspondence – contracts, invoices, proposals – sent or received using the domain-linked email address, dated well before the dispute arose.
• Third-party evidence of recognition: press mentions, review-site listings, social media references by third parties (not just your own posts), or professional-directory entries, each with verifiable dates.
• Evidence of the domain's registration history: the original registration date (which the registrar's WHOIS history or NIC.br records can corroborate), and any transfer or renewal history that confirms continuous ownership.
• If your registration predates the complainant's trademark: the trademark's application date, registration date, and the date on which the mark became publicly known in Brazil. A mark that was not filed until after your domain registration date is powerful evidence against bad faith – and powerful evidence that the complaint was filed without a valid basis.

In a recent matter (a .br descriptive-term dispute, early 2025), we assembled a record for a registrant who had operated a small services business under the same name for several years before the complainant's trademark was filed. The business registration, a set of dated invoices referencing the domain address, and a Wayback Machine archive showing a functioning site at the time of registration collectively supported the bona fide use argument. The outcome depended entirely on the quality and dating of the documentation, not on legal argument alone.

Trap hidden in Step 3: submitting evidence without authentication. A screenshot without metadata, a web archive without a corresponding hosting log, or a business certificate whose date cannot be independently verified will be discounted. In the SACI-Adm context, where proceedings are conducted in Portuguese and the panelist applies Brazilian legal standards, local certification of documents may be expected. Confirm with counsel what authentication standard applies at the current time.

Step 4: Address the complainant's bad-faith arguments directly

A legitimate-interest defense does not mean ignoring the bad-faith element. It means showing the panel that the complainant's bad-faith narrative is factually wrong, and doing so with evidence rather than indignation.

Paragraph 4(b) of the UDRP (reflected in the SACI-Adm framework) lists four non-exhaustive circumstances that may indicate bad faith: registration primarily to sell to the mark owner at a premium; registration to disrupt a competitor; registration to attract users for commercial gain by confusion; and a pattern of abusive registrations. The complainant will have picked at least one. Address each allegation in your response, with specific evidence that contradicts it.

If the allegation is "registered to sell" – did you actually approach the complainant and offer to sell the domain, or did they approach you? Unsolicited outreach from the complainant's side is not evidence of your bad faith; it is evidence of their interest. Document the direction of the contact.

If the allegation is "creating confusion" – does your site actually confuse users in a way that benefits you commercially? If your use is in a different industry or geography, show that. If there is no real competitive overlap, say so with specificity.

If the allegation is "passive holding" – passive holding without active use of a site can constitute bad faith in some panels' views, particularly if combined with other factors. Counter it by showing what use is actually present: even redirects to a social-media profile or a "coming soon" page with a verifiable timestamp may help, though the stronger evidence is active use.

Trap hidden in Step 4: conceding implied facts. Respondents sometimes fail to dispute factual assertions in the complaint because they seem minor or peripheral. Panels may treat unchallenged statements as admitted. If the complaint says your site displayed pay-per-click advertising targeting the complainant's customers, and you did not specifically deny or explain it, a panel may treat that as true. Go through every factual allegation, however small.

How strong does the record need to be for an RDNH finding?

RDNH – reverse domain name hijacking – is a finding that the complaint was brought in bad faith, typically to deprive a legitimate registrant of a domain they lawfully hold. It carries no monetary penalty, but the reputational cost to the complainant (and its legal counsel) can be significant. The question many respondents ask is: when does the strength of a defense translate into a realistic RDNH claim?

Panels have consistently held that RDNH requires more than a simple unsuccessful complaint. The baseline standard is that the complainant knew, or should have known, that it could not succeed. Common scenarios where RDNH findings have been made include: the complainant's trademark postdates the domain registration by a significant margin; the domain is clearly generic or descriptive and the complainant's trademark is narrow; or the complainant's counsel had access to the registration date but filed anyway, apparently in the hope of a default.

Is RDNH the right goal for your case? Ask whether the complaint was objectively unwinnable – not just wrong, but unsupportable on the publicly available facts at the time of filing. If the complainant had a plausible argument, even one that fails on the evidence, RDNH is unlikely. If the registration date alone defeats the third element and that date is a matter of public NIC.br record, the filing looks like an abuse.

We have pursued RDNH findings in .br-adjacent matters where the complainant's trademark application postdated the domain registration by more than two years and the registrant had documented commercial use throughout. The finding did not transfer money, but it did permanently affect the complainant's credibility in subsequent proceedings.

Trap hidden in this step: spending most of your response on the RDNH request and not enough on the substantive defense. RDNH is a secondary finding; if you lose the substantive elements, no RDNH finding protects the domain. Build the legitimate-interest record first, then add the RDNH argument as a coda.

To weigh the RDNH angle against the facts of your case, email info@cognomenlaw.com.

Step 5: Choose between the SACI-Adm process and other available routes

Most .br domain disputes run through SACI-Adm. But depending on the specific facts – particularly if the complainant files parallel proceedings elsewhere, or if the dispute involves conduct outside the scope of the administrative procedure – other routes may be relevant.

If the complainant holds a .com alongside the .br and files a UDRP complaint at WIPO or the Forum covering the .com while SACI-Adm handles the .br, you face two simultaneous proceedings under different rules. The UDRP's three elements and the UDRP's remedies (transfer or cancellation, no monetary award) apply to the .com; the SACI-Adm procedure governs the .br. The evidence you need overlaps substantially, but the procedural deadlines are independent. A WIPO single-panel case runs a standard 20-day response window after commencement; SACI-Adm has its own timeline that you should confirm with current NIC.br guidance.

If the complainant seeks damages rather than domain transfer – which the administrative procedures cannot award – a Brazilian court action may be filed in parallel or instead. In that scenario, the SACI-Adm finding is not binding on the court, but it can be offered as persuasive evidence. Court proceedings are substantially longer and more expensive; in our practice, we direct registrants to local litigation counsel in the relevant jurisdiction when court involvement is foreseeable.

The right route also depends on what you are trying to achieve. If you want to keep the .br domain and nothing else, SACI-Adm is the primary theater. If the dispute is part of a broader brand conflict involving multiple zones, a coordinated multi-forum defense strategy is worth planning early, before a default in one forum prejudices another.

What evidence actually decides the outcome?

Across the UDRP and comparable ccTLD procedures, the evidence that most often determines whether a respondent succeeds is contemporaneous and independently verifiable. The categories that panels weight most heavily are these:

• Registration date versus trademark date. If your domain predates the complainant's trademark by any meaningful margin, and that margin is documented with official registry records on both sides, this single fact will often defeat the bad-faith element entirely.
• Pre-dispute use of the domain. Site archives, commercial correspondence, and third-party references demonstrating active use before the complaint was filed are the most consistently persuasive category of respondent evidence.
• Business registration documentation. An entity or trade name registered under the law of the relevant jurisdiction, corresponding to the domain name, and predating the dispute, supports both the safe-harbor claim and the rebuttal of bad-faith intent.
• The complainant's own conduct. If the complainant approached you first asking to purchase the domain, document the contact. If the complainant's cease-and-desist letter arrived before the domain was parked or redirected, and you can show the timeline, that context matters.

What evidence does not help – and sometimes hurts – includes self-serving affidavits without corroboration, post-complaint website development, price demands made by the registrant to the complainant, and PPC advertising targeting the complainant's brand terms. Even if any of these existed for innocent reasons, the panel will weigh them against the respondent absent a clear explanatory context.

In a second recent matter (a .br tradename dispute, autumn 2025), a registrant came to us after receiving a complaint that alleged passive holding as evidence of bad faith. The domain had hosted a site for approximately three years, but the site had been taken down six months earlier while the registrant's business underwent restructuring. We located the archived site, the hosting termination record, and internal communications explaining the business pause. That combination rebutted the passive-holding argument and, combined with a pre-trademark registration date, led to a finding in the registrant's favor.

Related at COGNOMEN

• Respondent defense and RDNH – full service overview for registrants facing complaints
• Defending a UDRP complaint: strategy and evidence for the Italian ccTLD context
• URS versus UDRP for new gTLDs – choosing the right procedure when both are available