Step-by-step: prove a registrant has no legitimate interest in a .ai domain
A brand owner launches an AI-era product, only to discover that its exact brand name is already registered as a .ai domain — pointing at a parked page or a pay-per-click directory. The registrant has no apparent connection to the name. The question is not whether to act, but exactly how to build the case that takes the domain back.
To prove a registrant has no legitimate interest in a .ai domain, you must satisfy the second of all three UDRP elements under Paragraph 4(a) of the Policy: that the respondent holds no rights or legitimate interests in the disputed name. Because .ai (Anguilla's ccTLD) has designated WIPO as its dispute-resolution provider, the standard UDRP procedure applies — a decision is normally reached within about two months from filing, with transfer or cancellation as the only available remedies.
This guide walks through the step-by-step process: what the Policy requires, how each evidentiary step works, where the traps lie, and what a realistic case looks like for a complainant targeting a .ai domain.
Does the UDRP actually apply to .ai disputes?
Yes — .ai is among the ccTLDs that have appointed WIPO as their dispute-resolution provider, and the governing rules are the UDRP and its associated Rules. That means every element, every procedural deadline, and every remedy from the standard UDRP framework applies to .ai exactly as it does to .com or .net. The Policy is not a local Anguillian rule adapted for .ai; it is the same text, administered by the same WIPO arbiters.
Why does this matter? It means a complainant targeting a .ai domain can use the expertise, filing infrastructure, and case law developed across the entire UDRP jurisprudence — more than 80,000 WIPO-administered cases across gTLD and ccTLD zones over 25 years. The body of panel reasoning on legitimate interests is directly on point. There is no separate national procedure to satisfy, no separate eligibility condition specific to Anguilla that a gTLD complainant would lack. The practical consequence is that a brand owner with a registered trademark can file a UDRP complaint at WIPO for a .ai domain on the same basis as a .com complaint, paying the same filing fee of USD 1,500 for a single-member panel covering one to five domains.
One trap at this step: some practitioners assume that ccTLDs always require local counsel or a separate national procedure. For .ai, that assumption is wrong. Check the current registry rules with counsel before assuming any ccTLD behaves like .de, which has no UDRP equivalent and requires German court action.
What does "no legitimate interest" mean under the UDRP?
The second UDRP element — the absence of rights or legitimate interests in the domain — sits at the center of most contested cases. Paragraph 4(a)(ii) requires the complainant to show that the respondent has no rights or legitimate interests in the domain, but the UDRP softens the complainant's burden: once the complainant makes out a prima facie showing, the burden of production shifts to the respondent to come forward with evidence of a legitimate interest.
What does a legitimate interest actually look like? Paragraph 4(c) of the Policy identifies three safe harbors the respondent may invoke to rebut the complainant's showing:
- Bona fide use before notice: The respondent was using the domain — or demonstrably preparing to use it — in connection with a bona fide offering of goods or services before receiving notice of the dispute.
- Commonly known by the name: The respondent, as an individual, business, or organization, is commonly known by the domain name, even without a formal trademark registration.
- Legitimate noncommercial or fair use: The respondent is making a legitimate noncommercial or fair use of the domain, without intent to mislead consumers or tarnish the complainant's mark.
The trap here is assuming that the complainant must affirmatively disprove each safe harbor in exhaustive detail. That standard is too high. The complainant's task is to present a coherent prima facie case; the respondent then either invokes a safe harbor with evidence or defaults. A clear, well-assembled factual record does most of the work — which is why the evidentiary steps below matter so much.
For a read on whether the three UDRP elements are met in your .ai dispute, reach us at info@cognomenlaw.com.
Step 1: Establish your trademark rights first — the foundation the rest depends on
Before attacking the respondent's interest, confirm the first UDRP element is solid — because a complaint that stumbles on element one never even reaches element two. Under Paragraph 4(a)(i), the complainant must show rights in a trademark that is identical or confusingly similar to the disputed domain. Panels have consistently held that a registered trademark is the clearest foundation, but unregistered marks supported by evidence of acquired distinctiveness can also qualify.
Gather the following before proceeding:
- Trademark registration certificates (any jurisdiction; the UDRP is not limited to marks registered where the respondent operates).
- The registration date — ideally predating the domain registration date, which you can check through historical WHOIS/RDDS records.
- Evidence of continuous use: branded website captures, product or service launch dates, press coverage, advertising spend records, or social media presence pre-dating the domain registration.
The trap: a brand owner who chose a name because it sounded generic — a common word, a descriptor of AI functionality — faces a harder element-one argument. If the mark is weak or descriptive, panels apply closer scrutiny across all three elements. Strengthen element one before filing, not after.
Step 2: Search for any authorized connection between the registrant and your mark
The fastest way to build the second-element case is to document what is absent. Run a systematic search to confirm the respondent has no relationship with your trademark or business. This step sounds obvious; it is regularly underworked in practice.
Check the following:
- Your own licensee and authorized-user records — does the registrant appear anywhere as an authorized partner, distributor, or reseller?
- Trademark registries in the respondent's apparent jurisdiction — does the respondent hold a registered mark in the disputed name or anything similar?
- Business registration databases — is the respondent incorporated under or operating as a business commonly known by the disputed name?
- Historical website content — what has the domain actually resolved to? Screenshots with timestamps (use an archival crawl service) showing a parked page, pay-per-click links, or a blank holding page all work against a legitimate-interest claim.
The trap: registrants who receive a cease-and-desist letter before a complaint is filed sometimes build a rapid post-notice website to manufacture the appearance of bona fide use. Panels are alert to this tactic. The Policy requires that bona fide use predate notice of the dispute — and panels have consistently held that a website erected after the complainant makes contact carries little or no weight as a legitimate-interest defense. Document the domain's status before sending any demand letter, and preserve that evidence carefully.
Step 3: Identify and neutralize each Paragraph 4(c) safe harbor in your evidence file
By this step, you have confirmed that the respondent appears to have no authorized connection to your mark. Now work through each safe harbor in Paragraph 4(c) as a structured checklist — not to prove each is absent (that is not the standard), but to ensure your complaint does not inadvertently leave a gap a panel might read as a concession.
Safe harbor 1 — bona fide use before notice. Does the archived evidence show the domain resolving to any content that could constitute a genuine goods or services offering? A parked page monetizing your trademark's traffic is the opposite of bona fide use. Note the parking network, the keywords displayed, and any revenue-generating structure visible in captured pages.
Safe harbor 2 — commonly known by the name. Does the registrant's own name, trade name, or brand match the domain? If WHOIS/RDDS data (where available) shows a registrant name that bears no resemblance to the disputed domain, and no public-facing business under that name can be located, the safe harbor is unavailable. Document the search.
Safe harbor 3 — noncommercial or fair use. Is there commentary, criticism, parody, or fan-site use? For .ai domains, the AI-industry context means the occasional registrant argues the domain is intended for an AI project in early development. Panels require more than bare assertion — they look for evidence of genuine preparation. Check for corporate filings, product development artifacts, public announcements, or developer-platform registrations that would corroborate a pre-dispute intent to build.
The trap in this step is filing without addressing safe harbor two when the respondent has a personal name or business name that partially overlaps with the domain. A partial overlap is not automatically a legitimate interest, but an unexplained gap in the complaint invites a panel to fill it charitably for the respondent. Address the overlap head-on.
Step 4: Build the bad-faith record — because elements two and three travel together
Panels have repeatedly observed that the second and third UDRP elements are analytically linked: where the evidence strongly supports bad faith under Paragraph 4(b), that same evidence typically dismantles any plausible claim to a legitimate interest. Assembling the bad-faith record in parallel with the legitimate-interest analysis is more efficient and produces a more coherent complaint narrative.
Under Paragraph 4(b), panels may find bad faith in the following non-exhaustive circumstances:
- The domain was registered primarily to sell it to the trademark owner or a competitor for an amount exceeding out-of-pocket costs — for example, a five-figure unsolicited offer received before the dispute was contemplated.
- The registration was designed to disrupt the complainant's business.
- The domain is used to attract users by creating a likelihood of confusion with the complainant's mark for commercial gain.
- A pattern of conduct — registering multiple domains corresponding to trademarks of different owners — that demonstrates systematic abusive registration.
In a recent matter (a .ai brand-match, spring 2025), a registrant had acquired the domain within days of a complainant's public product launch and immediately listed it for sale through a broker at a price reflecting the brand's public valuation — far beyond any plausible registration cost. The conduct simultaneously eliminated any bona fide-use defense and anchored the bad-faith finding. The complaint succeeded on all three elements without a response being filed.
The trap here: passive holding. Not every .ai domain is listed for sale. A registrant who simply renews the domain and does nothing with it is not automatically using it in bad faith. Panels have developed a nuanced body of reasoning about passive holding — in short, the circumstances of the registration and the nature of the mark determine whether inaction constitutes bad faith. Where the mark is highly distinctive and the registrant has no conceivable legitimate use, passive holding can satisfy element three. Document the distinctiveness of your mark for this reason.
If you have already identified a passive holder or received an unsolicited buy-back demand for your .ai domain, email info@cognomenlaw.com to assess the full three-element case.
Step 5: Choose WIPO and file — timeline, mechanics, and the respondent's 20 days
Once the evidence file is assembled, the complaint is drafted and submitted to WIPO. For a .ai domain, WIPO is the designated provider; there is no competing-forum choice to make (as there is for .com, where the Forum or CAC are also options). The USD 1,500 filing fee covers a single-member panel for one to five domains. If the complainant wants a three-member panel — appropriate for high-value or factually complex cases — the WIPO fee rises to USD 4,000.
After WIPO formally commences the case, the respondent has 20 days to file a response. That window is fixed by the UDRP Rules. A respondent who misses it is in default — the panel proceeds on the record as submitted by the complainant. Default does not mean automatic transfer; the panel still reviews the complaint on its merits. But a well-prepared complaint against a defaulting respondent almost always produces a decision on the complainant's terms.
The full procedural timeline — filing, WIPO's administrative review, commencement, the response window, panel appointment, the decision, and the registrar's implementation — runs to approximately two months in a straightforward case. A three-member panel, a request for a supplemental filing, or a suspension for settlement discussions will each extend that timeline. WIPO also offers an expedited option for single-member cases covering up to five domains, targeting a decision within approximately one month — worth considering when time-sensitive product launches or investor events are pending.
The trap at filing: an incomplete complaint that fails WIPO's formal requirements triggers an administrative deficiency notice and delays commencement. The most common deficiency in our practice is a trademark certificate that has not been annexed to the complaint in the required format, or a cease-and-desist history that is referenced in the body but not attached as an exhibit. File complete.
What if the registrant defends? How the response shapes the outcome
A contested .ai dispute — one where the respondent files a substantive response — turns on the quality of both parties' evidence. The complainant cannot simply rest on the prima facie record assembled in Steps 1 through 3; the panel will evaluate the respondent's safe-harbor evidence critically, and any gap in the complainant's rebuttal capability may cost the case.
The most common respondent defenses in AI-sector .ai disputes are:
- A claim to have registered the domain for a genuine AI project in development, supported (or not) by evidence of preparation.
- A nominative or descriptive fair-use argument — that the domain describes a category of AI technology rather than the complainant's specific mark.
- Prior rights in a jurisdiction where the complainant holds no registration, argued as a shield against element one.
Where a respondent files a credible defense, the forum choice matters less than the completeness of the complainant's evidence file. A well-assembled record — historical WHOIS captures, archived website screenshots, trademark certificates, third-party press coverage pre-dating the domain registration, and direct rebuttal of each safe harbor — is the asset that decides a contested case. A panel reading two competing submissions reaches for the side that has answered every question the Policy raises.
In a different recent matter (a .ai parked domain, autumn 2024), a respondent filed a response asserting an AI-development project but produced no corroborating exhibits — no corporate filing, no developer registration, no publicly accessible roadmap. The panel found the assertion unsupported and transferred the domain. The complainant's pre-filing archival of the parked page — capturing pay-per-click links targeting the complainant's own industry — was the decisive exhibit.
Cross-zone strategy: when a .ai dispute should trigger action on other zones
A brand owner who discovers an abusive .ai registration rarely finds the problem limited to a single zone. The same registrant frequently holds the .com, the .io, or a cluster of AI-adjacent new gTLDs. The UDRP permits a single complaint to cover multiple domains — provided the registrant is the same holder of record. Consolidating related domains into a single WIPO filing avoids duplicated forum fees and produces a single, consistent factual record.
The zone-and-forum decision matrix for parallel registrations looks like this. If the registrant holds both the .ai and the .com, a single WIPO complaint covering both is the most efficient path — the filing fee for a single-member panel covering one to five domains is still USD 1,500, unchanged from a single-domain filing. If the registrant also holds a .de version of the name, the UDRP cannot reach that domain: .de has no UDRP equivalent, and the route there is a DENIC DISPUTE entry combined with German court action handled with local litigation counsel. If the registrant holds a .uk version, Nominet's DRS applies — a distinct procedure with a free mediation stage, a different legal test ("abusive registration" rather than UDRP bad faith), and a lower evidentiary bar in one respect: the Nominet DRS reads "registered or used" abusively, compared to the UDRP's cumulative "registered and used in bad faith."
The practical implication: start by mapping every zone the registrant controls before filing. A parallel or sequential multi-forum strategy is more efficient than discovering a .uk version after the WIPO decision is already issued.
Related at COGNOMEN
Frequently asked questions
When should I prove a registrant has no legitimate interest in a .ai domain?
You should address the second UDRP element as soon as you decide to file a complaint — it is inseparable from the overall case. In practice, the evidence-gathering for element two (no legitimate interest) runs in parallel with the bad-faith evidence for element three. The earlier you lock down the historical WHOIS/RDDS data and archived website captures showing the registrant's lack of use, the stronger your complaint will be. Do not wait until after a cease-and-desist; send no demand until the pre-dispute evidence is preserved.
What happens if the other side ignores the case?
A respondent who files no response is in default under the UDRP Rules. The panel proceeds on the record as submitted and may draw adverse inferences from the failure to respond. Default does not guarantee a transfer — the panel still evaluates whether the complainant has met all three elements on the merits. A complete, well-evidenced complaint filed against a defaulting respondent typically results in a transfer order issued within the standard two-month timeline. If the respondent defaults but the complaint has a gap, the panel can still deny it.
How is WIPO different from a national court for .ai?
WIPO's UDRP procedure is faster, cheaper, and administratively simpler than national court litigation. The USD 1,500 single-member WIPO filing fee contrasts sharply with court filing costs, lawyer time, and multi-year timelines typical of national litigation. The UDRP is also remedially limited: the only outcomes are transfer or cancellation — no damages, no injunction, no costs award. A national court action can reach money but requires local litigation counsel, a jurisdictional basis, and a substantially longer timeline. For most .ai domain recoveries where transfer is the goal, WIPO is the appropriate and sufficient forum.
Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.
Speak with Cognomen Law
For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter
This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.