Assess my case

Step-by-step: prove a registrant has no legitimate interest in a .org domain

By Cordelia Roe, UDRP complainant practice & gTLD recovery ·

Your brand name sits in a .org domain registered by someone you have never heard of. The registrant is not offering goods or services under that name. The site is parked, redirects to a competitor, or sits dark. You want it back — and the second element of the UDRP is the step where most complainants either build an airtight case or quietly hand the respondent a lifeline.

To prove a registrant has no legitimate interest in a .org domain, a complainant must satisfy the second element of Paragraph 4(a) of the UDRP: that the registrant has no rights or legitimate interests in the domain. Because .org operates under standard UDRP rules, a WIPO panel applies the same test as for .com, and the only remedies available are transfer or cancellation. A standard case resolves in roughly two months, with the respondent holding a 20-day window to reply.

This guide walks each step of building that proof — the evidence you gather, the traps each step conceals, and the respondent's safe harbors you must anticipate.

Why the second UDRP element is both pivotal and misunderstood

The second UDRP element does not require the complainant to prove a negative in the ordinary sense. Panels have consistently held that once a complainant makes a prima facie case — meaning it puts forward enough evidence to suggest the respondent lacks any legitimate interest — the burden of production shifts to the respondent to rebut. The complainant does not have to disprove every conceivable basis for legitimacy before the respondent has said a word.

That procedural shift is the element's defining feature. Miss it, and you may file a complaint that reads as though you must exhaustively prove the absence of something that only the respondent knows. Catch it, and you understand why targeted, well-organized evidence of the complainant's exclusive use of the name is often sufficient to trigger the shift — leaving the respondent to explain itself or default.

The trap here: some complainants treat the second element as obvious and give it two thin paragraphs. Panels notice. A complaint that breezes past the second element signals that the complainant has not engaged with the respondent's likely arguments — and a prepared respondent will exploit that gap.

The .org zone is administered by the Public Interest Registry, but the dispute procedure is the UDRP in its standard form. For your purposes, every WIPO precedent on the second element applies directly. There is no modified "abusive registration" test as under the Nominet DRS for .uk. All three cumulative elements of Paragraph 4(a) must be satisfied for a transfer or cancellation order to issue.

Step 1: Confirm your trademark rights before addressing the registrant's interest

The second element cannot stand alone; it must pair with the first — your rights in a mark that the domain is identical or confusingly similar to. Before you document the registrant's lack of interest, confirm that your trademark foundation is solid, because panels assess all three elements together.

In our practice, the most common preventable failure at the second-element stage is a trademark record that is thinner than the complainant believed. If your mark registered after the domain did, panels will scrutinize your bad-faith argument at the third element — but the second element may still be satisfied independently, because the registration date does not determine whether the registrant currently has a legitimate interest.

Gather the following before you turn to element two:

The trap: confusing "I own a trademark" with "the registrant therefore has no legitimate interest." They are related but not identical propositions. A person can, in theory, hold a legitimate interest in a domain that coincidentally resembles a third-party mark — if, for instance, they are commonly known by the name, or have used it in a genuine business before notice of the dispute.

For a read on whether the three UDRP elements are met in your specific situation, reach us at info@cognomenlaw.com.

Step 2: Document whether the registrant is commonly known by the domain name

The first safe harbor under Paragraph 4(c) is that the registrant is "commonly known" by the domain name — even without trademark rights of its own. This is the safe harbor most frequently invoked by respondents in .org disputes, because .org historically attracts nonprofit organizations, advocacy groups, and community projects. A panel will look at the WHOIS record, business registration records, any prior use, and any public association between the registrant and the name.

Your job in Step 2 is not to prove the registrant is unknown — it is to make the record clear enough that the respondent cannot credibly claim this safe harbor without submitting verifiable evidence of genuine use.

Collect the following for your complaint:

The trap in this step is the privacy or proxy registration. Many .org registrants shield their identity through privacy services. A WIPO panel will request disclosure of registrant identity at the commencement stage, but if the underlying registrant's details are still obscured at the time you assemble your complaint, note the privacy registration in your filing and explain what the public record does and does not reveal. Do not speculate about who the registrant is; panels penalize overreach.

Step 3: Establish that no bona fide offering existed before notice of the dispute

The second safe harbor under Paragraph 4(c) is a bona fide offering of goods or services under the domain before the registrant received notice of the dispute. "Before notice" is a term of art: panels have consistently held that notice generally arises when the complainant contacts the registrant, or when the complaint is filed — not when the complainant first discovers the domain.

This is the step where archive research becomes essential. You must document what the domain resolved to — and when — to show the panel that whatever the registrant is doing now was not an established, good-faith business use that predates your dispute.

Evidence for this step:

The trap: complainants sometimes omit Wayback Machine history that cuts both ways. If an early archive snapshot shows the registrant briefly posted content that could be characterized as a legitimate project — even an abandoned one — a prepared respondent will raise it. Review the full archive history yourself before the respondent does. If that content exists, address it proactively in your complaint and explain why it does not constitute a bona fide offering (for example, the site was thin, was taken down shortly after registration, or appeared only after the complainant's first cease-and-desist letter).

In a recent matter — a .org cybersquatting complaint involving a nonprofit sector name, spring 2025 — we identified through archive research that the respondent's claimed "community project" had been live for fewer than three weeks before it disappeared, and that no content had appeared in the two years preceding our filing. The panel accepted that no bona fide offering had been established.

Step 4: Address the fair use and noncommercial use safe harbor — and its limits

The third safe harbor under Paragraph 4(c) is legitimate noncommercial or fair use of the domain, provided the registrant is not making commercial use of it and is not misleadingly diverting consumers or tarnishing the complainant's mark. This safe harbor is particularly relevant in .org disputes because the zone carries a historical association with noncommercial purposes.

A panel will weigh whether the domain was used for criticism, commentary, or parody of the complainant's brand — these can, in limited circumstances, constitute protected fair use. The domain must genuinely reflect that purpose and must not be a pretext for commercial gain or consumer confusion.

How do you address this in your complaint?

The trap: dismissing a criticism or commentary site too quickly. If the respondent's site is genuinely critical commentary under a domain that adequately signals that it is not the complainant's official site, a UDRP panel may deny the complaint. In those fact patterns, a different strategic route — or simply a stronger third-element record — may be the better path. We regularly advise complainants who discover mid-preparation that the respondent may have a genuine fair-use argument, and the honest answer is to assess that risk before filing rather than after a denial.

Step 5: Assemble and sequence the evidence package

Proving the second element is ultimately an exercise in organized, sequenced evidence. A WIPO panel does not give extra credit for volume; it gives weight to evidence that is labeled, sourced, and directly responsive to the Paragraph 4(c) safe harbors.

A well-structured second-element section of a UDRP complaint should follow this sequence:

  1. Opening statement of the prima facie case: the complainant holds the mark, is the exclusive legitimate user of the name in the relevant market, has not licensed or authorized the respondent, and the respondent is not known by the name.
  2. Rebuttal of Safe Harbor 1 (commonly known): WHOIS record, absence of entity registration, no public association between the respondent and the name.
  3. Rebuttal of Safe Harbor 2 (bona fide offering): archive history, current site content, any communications showing the domain was acquired to sell or monetize.
  4. Rebuttal of Safe Harbor 3 (noncommercial fair use): site content showing commercial use, consumer-confusion evidence, or an affirmative demonstration that even a nominally critical site crosses the line through misleading presentation.
  5. Anticipation of any respondent argument: if there is any aspect of the record that a respondent might invoke, address it directly rather than leaving it for the panel to discover.

The exhibit numbers in your complaint must correspond precisely to the exhibits you actually attach. Panels at WIPO are thorough; a citation to "Exhibit C" that does not exist, or that contains something other than what the complaint describes, undermines your credibility on all three elements.

If a prior filing produced a bad outcome, or if you are assessing a complex second-element record before filing, email info@cognomenlaw.com for a focused review.

Step 6: Understand the respondent's 20-day window and what default means

Once the WIPO case formally commences, the respondent has 20 days to file a response. If the registrant does not respond, the panel does not automatically transfer the domain — it still evaluates all three elements on the record submitted by the complainant. A default does not mean the complainant wins; it means the panel decides on the complaint alone.

This matters for how you build the second-element case. If the respondent defaults — which happens in a meaningful share of .org cybersquatting cases — the panel will examine whether your evidence makes a sufficient prima facie showing on element two. A complaint that assumes the respondent will respond and rebut, but fails to lay out the full safe-harbor analysis, may leave the panel short of what it needs to find in the complainant's favor even without opposition.

Conversely, if the respondent does respond, expect them to attach whatever evidence supports their claimed legitimate interest. The most common responses we see in .org disputes invoke: prior use for a community project, claimed fair use as a criticism or commentary site, or an assertion that the complainant's mark is descriptive or generic and that the respondent registered the domain for its ordinary meaning. Prepare for all three before you file.

How does the second element interact with the choice of forum for a .org dispute?

The .org zone sits squarely in UDRP territory. The standard UDRP applies, and both WIPO and the Forum are accredited providers for .org complaints. Choosing between them is a strategic decision, not a legal one.

WIPO is the world's most-used UDRP forum, administering the vast majority of proceedings alongside the Forum — together they handle roughly 97% of all UDRP cases. For .org complaints involving complex second-element questions — particularly if a fair-use or commentary argument is likely — WIPO's deeper panel pool and published decision database give you a larger body of precedent to cite in your favor. The WIPO filing fee starts at USD 1,500 for a single-member panel covering one to five domains.

The Forum offers a comparable process at a filing fee that begins at around USD 1,300 for a one-to-two domain, single-member panel. The Czech Arbitration Court (CAC) operates at a lower entry fee still, beginning around USD 500–800, though it handles a far smaller share of UDRP volume.

Decision matrix: if you are a brand owner with a well-registered mark and the domain appears to be a straightforward parking or monetization case with no plausible legitimate interest argument, WIPO or the Forum both work efficiently. The two-month standard timeline applies either way. If you believe the respondent will raise a developed fair-use or identity argument, WIPO's panel pool and precedent depth are advantages worth the marginal fee difference. If the .org dispute is paired with a parallel .com problem — meaning the same registrant holds both — a single complaint covering multiple domains at WIPO may be possible, provided the registrant of record is identical across all of them.

If the registrant's conduct is so egregious that you want monetary damages — not just a transfer — the UDRP cannot help. Only US anticybersquatting litigation reaches money, and that route involves local litigation counsel and substantially higher costs. We assess that trade-off with clients early, because the answer depends on the dollars at stake, the registrant's location, and whether monetary recovery is achievable.

Related at COGNOMEN

Frequently asked questions

What are the chances to prove a registrant has no legitimate interest in a .org domain?

No outcome can be guaranteed — panels weigh the specific facts and the respondent's record. That said, where the respondent has no evident connection to the name, holds no trademark rights, and neither the WHOIS record nor the resolving site reflects any genuine use, panels have consistently found the second element satisfied once the complainant makes a solid prima facie showing. The key variable is whether the respondent responds and what evidence they produce in support of a Paragraph 4(c) safe harbor. A complaint built to anticipate all three safe harbors leaves the respondent less room to maneuver.

What evidence do I need to prove a registrant has no legitimate interest in a .org domain?

Core evidence includes: a timestamped WHOIS / RDDS record showing no association between the registrant and your mark; Wayback Machine archive screenshots showing the domain's content history; current screenshots of the resolving site (parking page, redirect, or blank); any prior communications with the registrant revealing commercial intent; and business registry searches in the registrant's apparent jurisdiction confirming no entity is known by the disputed name. Each piece maps to one of the three Paragraph 4(c) safe harbors the respondent might invoke.

Can I prove a registrant has no legitimate interest in a .org domain without going to court?

Yes. The UDRP is an administrative procedure, not litigation. A WIPO complaint for a .org domain proceeds entirely outside the court system. The process runs from filing to decision in roughly two months, and the only remedies — transfer or cancellation — are implemented directly by the registrar on WIPO's instruction. Court is an option only if you also seek monetary damages, which the UDRP cannot award. For most brand owners disputing a .org, the UDRP is both faster and less costly than litigation.

Author: — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.