Step-by-step: prove a legitimate interest in your .com domain

Step-by-step: prove a legitimate interest in your .com domain. UDRP and ccTLD domain recovery and defense across .com. Email the firm to assess your case.

A UDRP complaint lands in your inbox. A brand owner – sometimes a well-resourced one – claims your .com is a cybersquat and demands transfer. The allegation feels wrong. You registered the name for a real reason, you have used it in business, and you never heard of the complainant's trademark until now. The question is whether that story, told correctly, is enough to keep your domain.

To prove a legitimate interest in your .com domain under the UDRP, a registrant must satisfy at least one of the Paragraph 4(c) safe harbors: a bona fide offering of goods or services before notice of the dispute, a demonstrated course of being commonly known by the name, or a legitimate noncommercial or fair use without intent to mislead. A respondent who does so shifts the burden back to the complainant. The process is documentary and strategic; the 20-day response window is tight.

This guide walks each step in sequence, flags the trap that each one hides, and explains when an RDNH finding – a formal declaration that the complaint was itself abusive – becomes a realistic goal.

What "legitimate interest" means under the UDRP – and why it matters for .com registrants

A legitimate interest is the second of the three elements a complainant must prove under Paragraph 4(a) of the UDRP. Specifically, the complainant must show that the registrant has no rights or legitimate interests in the domain. Because a negative is difficult to establish conclusively, the consensus interpretation – consistently applied by panels at WIPO and the Forum – places a prima facie burden on the complainant to make that showing first. Once the complainant does so, the burden shifts to the registrant to produce evidence of a legitimate interest.

For .com domains, that procedural posture matters enormously. The complainant files first, shapes the narrative, and selects the evidence. A respondent who submits nothing, or who submits a conclusory denial, typically loses. A respondent who understands the safe-harbor structure and builds a concrete record often prevails. In our practice defending .com registrants, the single most common failure we see is a respondent who has a genuine story but tells it badly – too late, too vague, or in the wrong format.

The UDRP does not require the registrant to hold a registered trademark. It requires a demonstrable interest: use, a business plan, a personal name connection, or a fair-use rationale. Each safe harbor has its own evidence profile, and they are not interchangeable. Choosing the right one for your facts is the first strategic decision in any defense.

Step 1: Understand which Paragraph 4(c) safe harbor fits your situation

The three Paragraph 4(c) safe harbors are distinct legal tests, and attempting to satisfy the wrong one wastes the limited response window. The first – a bona fide offering of goods or services before notice of the dispute – is the most commonly invoked and the most frequently litigated. The second – being commonly known by the domain name – typically applies where the registrant's legal or trading name matches the domain. The third – legitimate noncommercial or fair use – covers fan sites, criticism pages, and similar uses, but only where no commercial intent to mislead is present.

Trap: "before notice of the dispute" does not mean before you received the UDRP complaint. Panels treat the filing of the complaint, a cease-and-desist letter, or even documented correspondence from the trademark owner as the triggering moment. Evidence of use that post-dates any of those events carries sharply reduced weight. The very first question to answer is: when did notice arrive, and what is the date of your earliest use evidence?

We regularly advise registrants who discover, on examining their records, that the only clear evidence of use is material they created after a cease-and-desist letter. That scenario is survivable but requires a different strategy – often pivoting to the third safe harbor or mounting a challenge to the complainant's trademark rights in the first element. Identifying the gap before drafting saves time and avoids concessions that can undermine the whole response.

Step 2: Assemble the documentary record before you draft a single word of the response

The response is only as strong as the exhibits behind it. Drafting the narrative first and then hunting for supporting documents is the second most common mistake we observe in pro se respondents. Build the record first; the argument follows the facts.

For the bona fide-use safe harbor, the core evidence categories are:

• Dated business registration documents naming the entity associated with the domain.
• Website screenshots with metadata confirming publication dates – use a tool that stamps retrieval time, or rely on Internet Archive records where they exist.
• Invoices, contracts, or purchase orders that reference the domain or the trade name predating notice.
• Email correspondence on the domain address with clients or suppliers, showing active commercial use.
• Domain WHOIS or registrar records confirming the original registration date.
• Advertising, social media profiles, or trade directory listings under the name predating notice.

For the "commonly known by the name" safe harbor, the priority exhibits are evidence of the registrant's own legal name, DBA registration, or long-standing trade usage – not the domain record alone. A domain registration in a name does not prove the registrant is "known by" that name; it proves only that they registered it.

Trap: panels scrutinize the date of every piece of evidence. A website launched one week before the complaint was filed, with no prior content visible on archive tools, raises an inference of fabrication rather than demonstrating pre-notice use. Gather only what is genuinely contemporaneous with the use it is meant to prove.

How does the 20-day response deadline shape your defense strategy?

The response must be filed within 20 days of formal commencement – not 20 days from when you received the complaint, and not 20 days from when you first learned a complaint had been filed. The UDRP provider determines the commencement date, and that is the clock that runs. Missing it means the panel decides on the complainant's record alone, almost always resulting in transfer.

That window is short for a dispute that may turn on years of business history, multiple rounds of document collection, and a legal argument that requires careful structuring. A one-time extension of the response period – typically five calendar days – is available on request from most providers, but it is discretionary and not guaranteed. Plan as though no extension will be granted.

In practice, the first two to three days should be devoted entirely to evidence collection (Step 2). The argument should be drafted only once the full factual record is in hand. Leave the final 24 hours for review, exhibit labeling, and formatting. Filing a complete, well-organized response a day early is almost always preferable to a rushed filing on day 20.

If you have received a UDRP complaint and the clock is already running, the fastest path to a structured defense is a focused case assessment. Contact COGNOMEN at info@cognomenlaw.com to weigh your evidence and select the right safe harbor.

Step 3: Build the affirmative argument – and anticipate the complainant's reply

A successful response does more than deny the complainant's allegations. It constructs an affirmative account of who the registrant is, what the domain was registered for, and how it has been used – a story that a panel can follow without recourse to the complaint at all. Each exhibit is tied explicitly to a factual claim. Each factual claim is tied explicitly to a Paragraph 4(c) safe harbor.

Panels decide on the written record. There is no oral hearing. That means the response is the only opportunity to present the registrant's position. Vague assertions – "I registered this for a legitimate business purpose" – carry no weight unless supported by dated, independent evidence.

Anticipate the counterargument. If the complainant's trademark predates your registration, address the likelihood that you knew of it: what were the circumstances of your registration? Was the mark well known in your jurisdiction at that time? Was it registered in a different class or geography? A response that ignores a plausible bad-faith inference invites the panel to draw it.

In a recent .com defense matter (spring 2025), we prepared a response for a registrant who had held a descriptive-term domain for nearly a decade before a newly formed brand owner filed a UDRP complaint. The registrant's original business had wound down, and the domain was not in active commercial use at filing. We argued bona fide historical use, supported by archived invoices and trade directory listings, and supplemented with evidence that the complainant's trademark post-dated registration by several years. The panel denied the complaint.

Step 4: Address bad faith directly – and consider whether RDNH is in reach

The third element of the UDRP – bad faith in registration and use – is the complainant's burden. But respondents who merely assert "I did not register in bad faith" without analysis rarely persuade panels. A stronger approach is to walk through the Paragraph 4(b) bad-faith indicators and explain, with evidence, why none of them fits your facts.

The key Paragraph 4(b) factors are: registration primarily to sell the domain to the mark owner at a profit; a pattern of abusive registrations; registration to disrupt a competitor; and use to attract users for commercial gain through confusion. For a registrant with a genuine pre-notice use, the most common factor in play is the last one – and the rebuttal is the evidence of legitimate commercial use assembled in Step 2.

RDNH – reverse domain name hijacking – is available where the panel concludes that the complaint was brought in bad faith, knowing it could not succeed, or for the purpose of depriving a legitimate registrant of their domain. RDNH findings are reputational in nature: the Policy confers no monetary penalty. But they matter. They are published; they identify the complainant and the complainant's representative; and they are routinely cited in subsequent disputes involving the same parties. In our experience, the clearest RDNH scenarios arise where a complainant files against a domain that predates the trademark by years, or where the asserted trademark is descriptive and the complainant's goods bear no plausible confusion with the registrant's business.

Trap: requesting RDNH without the facts to support it is counterproductive. A panel that views the RDNH argument as overreach may give the complainant's bad-faith case more credit than it deserves. Reserve the RDNH argument for cases where the predation is clear and documented.

If you believe the complaint against your .com was filed without genuine merit, a second read by experienced defense counsel can identify whether the evidence supports an RDNH argument. Email info@cognomenlaw.com for an assessment.

Step 5: Consider the forum and panel-selection dynamics

UDRP providers are not interchangeable for respondents. The complainant chooses the forum – WIPO, the Forum, CAC, or ADNDRC are the four accredited options. The respondent cannot veto that choice. But the respondent does have one meaningful lever: if the complainant requested a single-member panel, the respondent may request a three-member panel. That shifts the composition of the decision-making body and typically produces more deliberate analysis in close cases. The cost, however, rises. Where the complainant requested a single-member panel, the parties split the differential for a three-member panel – a figure that varies by provider.

The decision to request a three-member panel should be made by the end of the first week of the response period, alongside the evidence-collection phase. In a case where the legitimate-interest argument is strong and well-documented, a single panelist is often sufficient. In a case where the outcome is genuinely uncertain – where the complainant's trademark is strong and the pre-notice use evidence is thinner than ideal – a three-member panel adds a layer of protection because all three panelists must reach the same conclusion on transfer.

The choice of forum also affects timing. WIPO offers an expedited procedure for single-member cases covering up to five domains, targeting a decision in roughly one month. The Forum typically operates on the standard timeline. CAC, the least-used of the four major providers, is primarily encountered in lower-stakes disputes. Each provider publishes its own supplemental rules, and a respondent's strategy should account for any procedural nuances specific to the forum where the complaint has been filed.

Step 6: Decide whether to settle – and when settlement talks are worth pursuing

Settlement is always available before a panel renders a decision. The domain industry sees a meaningful share of UDRP disputes resolved by agreement – transfer at a price, a licensing arrangement, or a simple withdrawal by the complainant after reviewing the response. Panels may suspend proceedings to allow settlement negotiations, though they do not facilitate them.

When should a respondent consider settling? Where the legitimate-interest record is thinner than ideal and bad faith is a genuine risk; where the domain's commercial value to the respondent is less than the cost and management burden of the proceeding; or where the complainant has signaled willingness to pay fair value for a transfer. Settling does not constitute an admission. The UDRP has no precedential effect on subsequent trademark infringement litigation, and a settlement agreement can be structured to preserve the respondent's right to contest trademark validity in a different forum if needed.

What should a respondent never do? Never transfer the domain under a threat, without documentation, and without understanding the tax and business implications of the transfer. Never enter a settlement that includes an admission of bad faith, as such language can resurface in subsequent disputes. And never treat a withdrawal by the complainant as a permanent resolution: a withdrawn UDRP can be refiled, and a domain that survives one complaint may attract another from the same or a related party.

In a separate .com matter (autumn 2024), we advised a registrant who had received a complaint alongside an unsolicited acquisition offer. The offer was structured to lapse if the response was not withdrawn. We identified the settlement-pressure tactic, filed a complete response on the merits, and the complainant withdrew after reviewing it. The registrant retained the domain without payment.

For a broader comparison of UDRP respondent options, the analysis at our guide on responding within the deadline covers the procedural mechanics and the options available at each stage.

What evidence actually decides the outcome?

Panels at WIPO and the Forum are experienced in separating genuine pre-notice use from retrofitted evidence. The documents that consistently carry the most weight are those that are contemporaneous, independently verifiable, and specific to the domain in question rather than to a general business name. A screenshot with a URL and a visible date in the page header carries more weight than a sworn declaration that the site was live for years without any archived record.

The following evidence hierarchy reflects the consensus view across UDRP decisions:

• Highest weight: Internet Archive records of the domain resolving to a functioning site with commercial content predating notice; dated invoices or contracts referencing the domain address; third-party business registrations or trade directory entries predating notice.
• Moderate weight: Declaratory evidence from the registrant with independent corroboration; correspondence on the domain email address with unrelated third parties; social media profiles with creation dates predating notice.
• Lower weight (standing alone): Unverified registrant declarations; domain registration records alone; post-notice website content without earlier archived versions.

One question panels consistently return to: does the totality of the evidence describe a real, functioning business, or does it describe activity that appears designed to manufacture a legitimate interest after the dispute began? No single document answers that question. The pattern across all exhibits does.

Cross-zone considerations: when the same dispute spans .com and a ccTLD

Brand owners who file UDRP complaints over a .com frequently control trademarks that span multiple jurisdictions. A respondent holding both a .com and a country-code domain may face parallel proceedings. The rules differ materially. The UDRP's cumulative "registered and used in bad faith" standard is distinct from the Nominet DRS for .uk, which requires only "registered or used" abusively – a lower bar that can produce different outcomes on the same facts.

A respondent who prevails in a UDRP proceeding over a .com is not automatically protected in a parallel Nominet DRS proceeding over the corresponding .co.uk. The two decisions are made under different rules, by different panels, with no binding precedential relationship. Similarly, a .de domain cannot be addressed under the UDRP at all – that dispute proceeds in the German courts, typically with a DENIC DISPUTE entry to block any transfer while litigation is pending.

If your dispute involves a domain portfolio that straddles zones – a .com, a .co.uk, and a .de registered to the same entity, for example – the legitimate-interest evidence must be assembled with each forum's evidentiary standard in mind. For details on how zone differences affect strategy, see our FAQ comparing UDRP against national procedures.

The right route depends on where the registrations sit and what the complainant holds. A .com dispute with a clear UDRP path is a different calculation from a multi-zone scenario where a court action in a relevant jurisdiction may be the more efficient route to a binding outcome. We work with local litigation counsel in the relevant jurisdiction for disputes requiring court action outside the UDRP's reach.

Related at COGNOMEN

• Respondent defense and RDNH services – how COGNOMEN builds the legitimate-interest record for .com registrants
• Responding within the UDRP deadline – procedural mechanics and options at each stage
• UDRP vs. national procedures – how forum choice changes the outcome across zones