Step-by-step: prove a registrant has no legitimate interest in a .au domain

A .au domain matching your brand is pointing at a pay-per-click parking page. The registrant is not Australian, has no trading history under the name, and has never responded to your outreach. You want it transferred. The question is whether the auDRP can reach that result – and exactly what evidence closes the case.

To prove a registrant has no legitimate interest in a .au domain, a complainant must satisfy the second element of the auDRP's three-part test – the procedure that governs .au disputes and tracks the UDRP's structure closely. The complainant's burden is to make a prima facie case of no legitimate interest; the burden then shifts to the registrant to rebut it. A standard case runs approximately two months from filing to decision, and the only remedies available are transfer or cancellation. No damages are awarded.

This guide walks each step in sequence, flags the trap each one conceals, and closes with the realistic cost picture and next moves.

What governs .au disputes and how the auDRP differs from the UDRP

The auDRP – Australia's domain-dispute procedure for .au domains – closely mirrors the UDRP adopted by ICANN in 1999, but with important distinctions that affect how you frame the second element. Where the UDRP requires a registrant to have registered and used a domain in bad faith, some readings of the auDRP treat the bad-faith limb with a degree of flexibility – closer in spirit to a "registered or used" formulation in certain fact patterns. Treat that nuance qualitatively and confirm the current rules with counsel, because panel reasoning at the auDRP level can vary.

What is firm: the auDRP applies the same three-element test under Paragraph 4(a). The complainant must establish (1) confusing similarity to a mark it holds, (2) no rights or legitimate interests on the registrant's side, and (3) registration and use in bad faith. All three must be satisfied. A failure on any one defeats the complaint entirely. The registrant has 20 days to respond once the case formally commences.

The .au namespace also carries an eligibility overlay. Holders of .au domains generally must have an Australian nexus – a registered company, trademark, or business presence. That structural requirement creates a built-in factual angle for complainants: a registrant who cannot demonstrate Australian eligibility may simultaneously struggle to show a legitimate interest in the name.

Step 1: confirm you have the trademark rights that anchor the complaint

Before building the second-element case, verify that the first element is solid – because a weak trademark foundation will unravel the rest. The registrant's counsel will probe it first.

The threshold question is whether you hold rights in a mark that the disputed domain is confusingly similar to. Registered Australian trademark rights are the clearest anchor, but common-law rights built through sustained use in trade are also recognized under the auDRP. Document them now: registration certificates, use-in-commerce evidence, advertising spend records, and examples of the mark in market-facing materials. A complainant without a registered mark must show the mark is sufficiently distinctive and has been used in Australia in a way that panel precedent accepts.

The trap here is assuming that international trademark registrations (including Madrid Protocol designations that do not yet have Australian effect) are automatically sufficient. They may not be. Confirm the current status of your Australian registrations and, where only common-law rights exist, assemble a credible evidence file before filing. A complaint filed with insufficient rights proof fails at element one and wastes the filing fee.

How do you make the prima facie case for no legitimate interest?

A complainant cannot directly prove a negative. The accepted method under both the UDRP and auDRP is to make a prima facie showing – establishing that, on the available evidence, no plausible legitimate interest exists – and then invite the registrant to demonstrate otherwise.

The Paragraph 4(c) safe harbors define what a legitimate interest looks like. A registrant can rebut a prima facie case by showing: (a) a bona fide offering of goods or services under the domain name before any notice of the dispute; (b) that it has been commonly known by the domain name; or (c) legitimate non-commercial or fair use, without misleading commercial intent. Your prima facie case is strongest when none of those three scenarios fits the facts.

Building that case requires methodical evidence work across several dimensions:

• WHOIS/RDDS records showing the registrant's name or business has no apparent connection to the domain string.
• A capture of the domain's current use – parking page, pay-per-click ads, or blank page – that cannot constitute a bona fide offering.
• Any demand made by the registrant to sell the domain, particularly if the price exceeds documented acquisition costs.
• The registrant's absence from Australian business registers (ASIC search) under the domain name.
• No trademark registration for the domain name held by or applied for by the registrant, confirmed by searches of IP Australia records.
• The registrant's registration date relative to your brand's date of first use – a name registered after the mark became distinctive in Australia is hard to characterize as a pre-existing interest.

The trap in this step is stopping too early. A list of WHOIS data and a parking-page screenshot is often enough for a clear case. But where the registrant has any commercial activity – even a dormant ABN, a social media handle, or a single page of website content – that activity will be the centerpiece of the response. Anticipate it, address it in the complaint, and explain why it does not rise to a bona fide offering.

For a read on whether the three auDRP elements are met on your specific facts, reach us at info@cognomenlaw.com.

Step 2: investigate the registrant's actual conduct before drafting

Investigation precedes drafting. A complaint filed without a complete picture of the registrant's conduct regularly misses the strongest arguments – and hands the respondent a road map to arguments the complainant overlooked.

The core investigation covers six areas:

1. Domain registration history. When was the domain registered? Who was the prior holder? Did it change hands after your mark became known in Australia? A registration date following your brand's rise in the market is a reliable bad-faith marker and simultaneously supports the no-legitimate-interest argument.
2. Current and historical use. Use a web archive to document what the domain has resolved to at different points. PPC parking at any stage undermines a bona fide-use defense. A history of misdirecting traffic to competitors is an independent bad-faith ground under Paragraph 4(b).
3. Registrant identity and ABN/ACN status. Does the registrant exist as an Australian legal entity? Does it trade under a name related to the domain? Public register searches often reveal a mismatch between the registrant name and any actual Australian business activity.
4. IP Australia trademark filings. Has the registrant ever applied for an Australian trademark covering the domain string? A genuine trader in the relevant class almost invariably seeks trademark protection. Absence of any application weakens the registrant's legitimacy claim.
5. Prior correspondence. Any demand to sell the domain is powerful evidence. Preserve the thread in native format with metadata. Even indirect demands – a broker inquiry following your approach – can be used.
6. Pattern of registrations. Does the registrant hold other domains corresponding to other parties' marks? A portfolio of such registrations is both a bad-faith indicator under Paragraph 4(b) and evidence that no particular domain in the set represents a legitimate interest.

The trap here is relying entirely on WHOIS data, which may be obscured by privacy services. Where the registrant identity is masked, the complaint process itself – through the provider – can compel disclosure by the registrar. Plan for that procedural step rather than letting obscured registration data stall the filing.

Step 3: draft the second-element argument with the safe harbors as your checklist

The complaint must address each Paragraph 4(c) safe harbor and explain, with evidence, why it does not apply. Panels expect this structure. A complaint that fails to address even one safe harbor invites the registrant to argue it in response, often effectively.

Safe harbor (a) – bona fide offering before notice: establish that no bona fide offering of goods or services existed under the domain before the registrant received notice of the dispute. The evidence is the archive captures, the parking-page screenshots, and the absence of any commercial activity under that name. "Before notice" is the operative phrase – a registrant who pivots to a bona fide-looking website after receiving your demand letter does not cure the defect, and panels have consistently treated post-notice use skeptically.

Safe harbor (b) – commonly known by the name: your registrant identity research closes this. If the registrant's legal name, any trade name it uses, or any ABN/ACN registration does not match the domain string, this harbor is unavailable. A single isolated use of the name does not qualify.

Safe harbor (c) – fair or non-commercial use: a purely informational or criticism site can, in narrow circumstances, engage this harbor. The defense collapses if the site carries PPC advertising, affiliate links, or any commercial content. Capture and archive the content carefully. Note that even a genuine criticism site must not cross into misleading commercial use, and panels have drawn that line with some consistency.

In a recent matter – a .au typosquat matter handled in late 2025 – we documented a parking-page history across multiple archive snapshots, paired it with an ASIC search showing no registered entity under the domain string, and mapped the gap between the domain registration date and the client's trademark priority date. The panel found the second element satisfied without the registrant filing a response.

Step 4: address the timing and process steps inside the auDRP

Filing a complete and compliant complaint is itself a step that can be bungled. The auDRP is administered through WIPO's Center among other approved providers, and each provider's rules govern the formal requirements for a valid complaint.

The formal sequence runs: complaint submission → provider review for compliance → commencement → the registrant's 20-day response window → panel appointment → decision → registrar implementation. A case without procedural complexity is typically decided within approximately two months of filing. That is the realistic planning window for .au recovery – not days, not a quarter.

The trap in this step is under-investing in the complaint document itself. Providers check formal compliance before commencement. A deficient complaint is returned for re-filing, which loses time and resets the clock. The compliance checklist covers: verified trademark rights with supporting annexes, a domain-by-domain analysis of each element, identification of the mutual jurisdiction clause, and the requested remedy (transfer or cancellation – no other remedy is available).

Where the registrant files a response, the timeline extends by whatever time the panel takes to deliberate after the close of pleadings. Supplemental filings are rare and are at panel discretion; plan on the complaint bearing the full weight of your argument. We regularly advise clients that the complaint is the filing that wins or loses the case – not the reply.

To weigh the auDRP against alternative routes for your .au domain, email info@cognomenlaw.com.

What evidence decides the outcome – and what the registrant can use against you

Panels decide on the documentary record. Oral hearings do not exist under the auDRP. What you file is what the panel reads. That places a premium on evidence quality, completeness, and presentation.

The strongest evidence packages combine: a clean trademark certificate with priority date visible; dated archive captures showing non-bona-fide use at multiple time points; any correspondence containing or implying a sale demand; ASIC and IP Australia search results; and a factual chronology that maps the registrant's conduct against the development of your brand in Australia.

What can the registrant use against you? Several things. A registrant who can show any prior use of the domain for a genuine purpose – even a modest one – before receiving notice of the dispute creates a factual issue that is genuinely difficult to dispose of at summary level. A registrant who holds a matching business name registration, even a dormant one, complicates the safe harbor (b) analysis. And a complainant who delayed for years after becoming aware of the domain invites an argument that the delay itself signals acquiescence.

Is acquiescence a defense in the strict sense? The auDRP does not formally recognize laches as a bar to filing. But panels have noted unreasonable delay when assessing the credibility of the complainant's rights claim, and delay weakens the inference that the registrant acted opportunistically. File when you have the evidence – not years after first discovery.

One scenario we watch carefully in our practice: a respondent who registers a domain in good faith for a genuinely unrelated purpose, then faces a complaint from a larger brand that expanded into the domain's original namespace. Those cases are close, and a well-prepared respondent can both defeat the complaint and seek a finding of Reverse Domain Name Hijacking (RDNH) – a formal panel finding that the complaint was brought in bad faith. RDNH carries no financial penalty, but the reputational mark for the complainant is real, and some panels use the RDNH finding to highlight overreach.

Choosing between the auDRP, UDRP, and Australian court action

The right route depends on the domain's zone and the remedy you need. A .com version of the same name follows the standard UDRP at WIPO (filing fee from USD 1,500 for a single-member panel) or the Forum, with the same three elements but without the Australian eligibility overlay. If you need both the .au and .com recovered, the two proceedings run in parallel but are separate filings. A single complaint cannot span both zones.

If the domain is a .au and the registrant's conduct also involves broader trademark infringement – using the name in trade, not merely holding a domain – the auDRP delivers domain-only relief. It cannot award damages, issue an injunction against the trading use, or prevent the registrant from re-registering a similar domain. For those remedies you need Australian court action, typically with local litigation counsel in the relevant jurisdiction.

If the registrant has registered a cluster of .au domains corresponding to your brand's product lines or regional variants, a single complaint may cover multiple domains where the registrant is the same holder. That multi-domain approach consolidates the second-element argument because the pattern itself is evidence that no domain in the set reflects a genuine legitimate interest.

The URS (Uniform Rapid Suspension) procedure is not applicable to .au; it covers new gTLDs only. Do not conflate the two procedures when advising a brand client who holds both a new-gTLD domain and a .au domain in dispute.

Legal fees for a well-prepared auDRP complaint – separate from the forum filing fee – sit in a range that is comparable to a standard UDRP complaint: commonly in the market range of USD 3,000–7,000 for a straightforward single-domain matter, depending on the evidence file's complexity. That is a market range, not a COGNOMEN quote. Get an itemized scope of work before engaging any counsel.

Related at COGNOMEN

• UDRP Domain Recovery – full-service complaint and strategy across gTLD zones
• Recovering a typosquat under .de – comparing the UDRP route and German court action
• Proving legitimate interest in a .org – respondent-side strategy and RDNH defense

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.