Step-by-step: recover a .com domain through a UDRP complaint

A brand owner discovers that a .com matching their trademark was registered by a stranger weeks after their product launch. The registrant is offering to sell it back for a five-figure sum. The question is immediate: is a UDRP complaint the right move, and exactly what will it take to win?

To recover a .com domain through a UDRP complaint, a complainant must satisfy all three elements of Paragraph 4(a) of the Policy: the domain must be identical or confusingly similar to a mark the complainant holds; the registrant must have no rights or legitimate interests in it; and the domain must have been registered and used in bad faith. A standard WIPO case runs about two months from filing to a transfer order, with the forum filing fee starting at USD 1,500 for a single-member panel on one to five domains. Transfer and cancellation are the only remedies available.

This guide walks each step in sequence, identifies the trap hidden in each one, and closes with the evidence and forum choices that decide outcomes on .com.

Step 1: Confirm the domain is actually subject to the UDRP

The UDRP applies to all gTLD domains held by ICANN-accredited registrars – and .com sits squarely within that category. That confirmation matters because the same-named dispute under a ccTLD such as .de or .fr runs on an entirely different rulebook, with different standards, different remedies, and sometimes no arbitral path at all.

Check the WHOIS or RDDS record to confirm the registrar and the controlling registry. For .com the registry is Verisign, and every accredited registrar for .com is bound by the UDRP. One hidden trap at this step: if the registrant holds the same abusive name in both a .com and a ccTLD, the UDRP handles only the .com. A parallel ccTLD filing under the applicable national procedure may be necessary to clear the full namespace.

Also confirm that the domain name is still actively registered. A domain that has already expired and lapsed reverts to the registry pool; a UDRP complaint filed against a dropped domain will not be accepted. Act before expiry, not after.

Does your trademark qualify as a basis for a UDRP complaint?

Paragraph 4(a)(i) of the Policy requires that you hold rights in a mark to which the disputed domain is identical or confusingly similar. That mark may be registered or, in many cases, established through unregistered use – but the evidentiary bar for unregistered mark claims is higher, and panels scrutinize the evidence carefully.

The similarity test under 4(a)(i) is largely mechanical: the panel strips the generic top-level domain (.com itself) and then compares the remaining string to your mark. A domain that simply adds a generic word – "shop," "official," "store" – to your trademark will typically still be confusingly similar. The trap is overconfidence here. A typosquat that transposes two letters may clear this hurdle easily. A domain that genuinely combines your mark with a descriptive term in a way a panel could read as a separate brand creates a harder argument on elements two and three.

Where trademark rights are thin or contested, we regularly advise brand owners to shore up the registration record before filing – obtaining a registration, or at minimum assembling the unregistered-use evidence into a timeline – because a weak element-one argument tends to undermine the entire complaint.

For a read on whether the three UDRP elements are met in your situation, reach us at info@cognomenlaw.com.

Step 2: Establish that the registrant has no legitimate interest

Paragraph 4(a)(ii) requires the complainant to show that the registrant has no rights or legitimate interests in the domain. This is the element that most complaints underestimate. The burden formally shifts: once a complainant makes a prima facie case, the registrant must come forward with evidence of a legitimate interest. But making that prima facie case requires more than a bare assertion.

The three safe harbors in Paragraph 4(c) define what a legitimate interest looks like from the respondent's side: a bona fide offering of goods or services before any notice of the dispute; being commonly known by the domain name; or a legitimate noncommercial or fair use without intent to mislead for commercial gain. Each of those safe harbors has a factual profile a complainant should investigate before filing.

Common traps at this step: the registrant operates a small but genuine business under a name that happens to share your mark's string. Or the domain was registered for a personal name that coincidentally resembles a brand. Panels have consistently held that a complainant who ignores an obvious legitimate-interest argument and proceeds anyway risks a Reverse Domain Name Hijacking (RDNH) finding – a reputational sanction with no monetary penalty but a published record that the complaint was abusive.

In our practice, we treat the element-two analysis as a pre-filing investigation, not an afterthought. We look at the registrant's use of the domain, its WHOIS history, its trading record, and any prior correspondence before advising a client to file.

Step 3: Build the bad-faith case under Paragraph 4(b)

The third element – that the domain was registered and used in bad faith – is where most contested UDRP disputes are actually won or lost. Both limbs must be present: registration in bad faith at the point of acquisition, and ongoing bad-faith use. A domain registered innocently that later became problematic may not meet the cumulative test.

Paragraph 4(b) of the Policy lists non-exhaustive bad-faith indicators: registration with intent to sell to the mark owner at a profit; registration to disrupt a competitor; registration to attract users for commercial gain through confusion with the complainant's mark; and a pattern of abusive registrations. None of these is conclusive alone, and none of these is the only path to bad faith.

Panels have also developed the doctrine of "passive holding" – a domain that points nowhere, PPC-parks, or simply sits idle can still be used in bad faith if the circumstances make any good-faith use inconceivable. That doctrine is particularly relevant on .com where a registrant acquires a well-known brand name, receives a demand letter, goes silent, and takes the domain offline. Silence is not innocence.

One hidden trap: a demand letter sent before the UDRP complaint is filed creates a record – a useful one if the registrant responded with a buy-back offer, and a dangerous one if your letter included language that could be read as an offer to pay. We have defended registrants who used a complainant's own pre-complaint correspondence to defeat the bad-faith element. Draft pre-dispute correspondence carefully.

Step 4: Choose the forum and file the complaint

For a .com domain, four ICANN-accredited providers accept UDRP complaints: WIPO, the Forum, CAC, and ADNDRC. The choice is not merely procedural. Each forum has different caseload characteristics, panelist pools, and processing habits.

WIPO and the Forum together handle approximately 97% of all UDRP proceedings. WIPO's filing fee is USD 1,500 for a single-member panel on one to five domains; the Forum's entry fee begins around USD 1,300 for one to two domains. The Czech Arbitration Court (CAC) is the lowest-cost entry point, beginning around USD 500–800, and is suitable for straightforward single-domain cases. ADNDRC begins around USD 1,300 for one to two domains on a single panel.

Which forum fits depends on the case. A high-value brand dispute with a registrant in a jurisdiction that respects WIPO's international reputation often warrants the WIPO filing fee. A portfolio of typosquats by one registrant – a single complaint can cover multiple domains if the registrant is the same holder – may suit the Forum's volume-pricing structure. WIPO also offers an expedited option delivering a decision within about one month, available for single-panel cases of up to five domains, which is worth considering when urgency is genuine.

The trap at this step: filing at the wrong forum rarely invalidates a complaint, but choosing a three-member panel when you cannot demonstrate why one is warranted adds cost without adding certainty. A three-member WIPO panel costs USD 4,000, and if only the complainant requests it, that full cost shifts to the complainant. If the respondent later requests three members, the parties generally split the higher fee.

The complaint itself must comply with the applicable provider's supplemental rules: word limits, exhibit requirements, and the formal identification of the registrant's name, the registrar, and each disputed domain. A complaint that fails administrative compliance review is returned for refiling, costing time and momentum.

To weigh UDRP forum options and filing mechanics for your .com dispute, email info@cognomenlaw.com.

Step 5: Manage the 20-day response window

Once a UDRP complaint commences, the respondent has 20 days to file a response. That window is set by the Rules and is not a suggestion. A registrant who defaults does not automatically lose – panels review the complaint on the merits regardless – but a default removes any opportunity to place evidence of legitimate interest or good-faith registration into the record.

For complainants, the response window is a waiting period. It is also the period during which registrar lock is in place: the domain may not be transferred, deleted, or modified once a complaint is filed. Verify the lock by checking the registrar status codes in RDDS. If a registrant transfers the domain after a complaint is filed but before the lock confirms, that raises its own set of escalation options with the registrar and the provider.

The trap: using the response window to continue trying to negotiate a buy-back while the complaint is live. Settlement during a UDRP is possible – parties may agree to a transfer and notify the provider, and WIPO offers a partial refund of approximately USD 1,000 of the filing fee on withdrawal before panel appointment. But negotiating in parallel while the complaint proceeds creates factual confusion, particularly if your pre-complaint correspondence was incautious.

What evidence decides the outcome of a UDRP complaint?

The record presented in the complaint – and any response – is the entirety of what the panel sees. UDRP proceedings have no discovery, no depositions, no oral argument. Evidence not in the file does not exist for the panel.

For complainants, the core evidence bundle typically includes: trademark registration certificates (and, for unregistered marks, use evidence showing secondary meaning); WHOIS and RDDS records showing registration date and registrant identity; screenshots of the domain's current use (parking page, redirect, competitor content, or blank); any correspondence showing a buy-back offer; and evidence of the complainant's priority – dates of mark use, advertising spend, press coverage, online presence – predating the domain's registration.

Timing is critical. If your mark was not publicly associated with you before the domain was registered, bad faith at registration is very difficult to establish. Panels have consistently declined to infer retroactive knowledge of a mark that did not exist yet.

In a recent matter – a .com comprising an established consumer brand's mark plus the word "official," spring 2025 – we assembled a trademark registration predating the domain by several years, screenshots of a PPC parking page generating revenue through competitor links, and an email thread in which the registrant offered to sell the domain at a significant premium above registration cost. The three elements were met on the face of the record. Transfer was ordered.

The trap for complainants: submitting a complaint with screenshots taken after the complaint was filed. A domain operator who learns a complaint is coming often changes the site's content quickly. Preserve evidence before you file – ideally through a timestamped capture service. A panel that sees contradictory evidence of use may give the benefit of the doubt to the registrant.

Step 6: Receive the panel decision and implement the transfer

A standard UDRP case is normally completed within about two months from filing, absent procedural complications. After the panel issues its decision ordering transfer, the registrar is notified and implements the transfer following a brief waiting period that allows the respondent to seek a court stay.

If the respondent files a court proceeding in the relevant jurisdiction within that window and notifies the registrar, implementation is paused until the court acts. For most .com registrants who have already lost the UDRP, the court route is not pursued. But for high-value domains, the possibility is real. Confirm that the registrar has confirmed implementation before treating the dispute as closed.

What happens if you lose? A complainant who does not prevail under the UDRP is not barred from a subsequent court action – US anticybersquatting litigation, handled with local litigation counsel, is the path that allows damages and a court order. It is substantially more expensive and takes longer, but it reaches remedies the UDRP cannot. A UDRP loss is not a final adjudication on the merits for court purposes.

In a second matter – a .com cybersquatting dispute, summer 2025, involving a five-figure buy-back demand and a registrant who claimed common-name use – the panel rejected the legitimate-interest defense and ordered transfer roughly eight weeks after filing. The registrant did not seek a court stay. The domain transferred without incident.

Related at COGNOMEN

• UDRP recovery service – how COGNOMEN handles .com and gTLD domain recovery complaints end to end
• Case study: recovering a domain after a buy-back demand in a cross-border dispute
• Analysis: protecting a brand during new gTLD launches and the evolving online namespace

Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Domain in disputeYour sideI want to recover a nameI received a complaint — I need a defensePortfolio / brand protectionWhat happenedEmailI agree to the processing of my enquiry as described in the privacy policy.Assess my case

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.