Step-by-step: recover a .online domain through a UDRP complaint

Step-by-step: recover a .online domain through a UDRP complaint. UDRP and ccTLD domain recovery and defense across .online. Email the firm to assess your case.

Your brand name is registered as a .online domain by someone who has no connection to your business. The registrant is parking the domain, pointing it at a competitor's site, or holding it for a ransom demand. You want it back. The question is not whether a remedy exists — it does — but whether you can satisfy the precise legal test that decides .online disputes and what evidence you need to do it.

The .online zone operates under the UDRP, meaning a complainant must prove all three elements of Paragraph 4(a): confusing similarity to a mark you hold, no legitimate interest in the registrant, and registration and use in bad faith. A standard case runs approximately two months from filing to decision; the only available remedies are transfer or cancellation of the domain. No monetary damages are available under the Policy.

This guide walks each step of that process, flags the practical trap inside each one, and tells you what the evidence record must show to cross the line.

Step 1: Confirm that the UDRP applies to your .online domain

The .online zone is a generic top-level domain whose registry has adopted the UDRP, so the standard Policy and Rules apply in full. That is the foundational check — and it is easier to miss than it sounds.

Not every new gTLD dispute works the same way. Some new gTLD registries impose additional eligibility requirements or route complaints through a different provider. For .online, the UDRP applies without modification, and you may file before WIPO, the Forum, the Czech Arbitration Court (CAC), or the ADNDRC. WIPO and the Forum together handle the overwhelming share of all UDRP filings. CAC offers the lowest entry-level filing fee, which makes it worth considering for straightforward single-domain matters.

The trap in Step 1: confusing the UDRP with the Uniform Rapid Suspension system (URS). The URS is also available for new gTLDs including .online, but it delivers only suspension — not transfer — and demands a higher evidentiary threshold ("clear and convincing evidence"). If you want to own the domain after the proceeding, the UDRP is the route you need.

One further threshold question: does the registrant hold both a .com and a .online version of the same infringing string? A single UDRP complaint can cover multiple domains only if the same registrant holds all of them. If the domains sit in different accounts, you will need separate complaints or a cross-zone strategy. We regularly advise brand owners on that choice before a single filing fee is committed.

Step 2: Establish your trademark rights — the first UDRP element

The first element of Paragraph 4(a) requires that the disputed domain be identical or confusingly similar to a trademark or service mark in which you have rights. Panels assess this by comparing the domain (stripping the ".online" suffix) against the mark.

Registered trademark rights are the cleanest evidence. A registration in any jurisdiction — not only the respondent's — can satisfy this element. Unregistered (common law) marks can also qualify, but you must document acquired distinctiveness through substantial use, sales figures, press coverage, or consumer recognition. For .online disputes in particular, panels apply the same similarity test used across the gTLD estate; the suffix itself is treated as non-distinctive and carries no weight either way.

The trap in Step 2: assuming the similarity question is obvious. Panels have found complaints deficient where the complainant held a stylized or device mark but the domain incorporated only the word element. Submit the word mark, or demonstrate that the textual component dominates the device mark, so the comparison is clean. A second trap: filing on an application rather than a registration. Pending applications do not satisfy the trademark-rights requirement; only registrations, or proven common-law rights, do.

Gather your trademark registration certificates, the relevant Nice classes, and the jurisdiction of registration before moving to Step 3. If you hold marks in multiple jurisdictions, identify the ones that most clearly cover the goods or services the registrant appears to be targeting.

For a read on whether the three UDRP elements are met in your .online situation, reach us at info@cognomenlaw.com.

Step 3: Prove no legitimate interests — the second UDRP element

The second element requires showing that the respondent has no rights or legitimate interests in the disputed domain. This is the element where complainants most often underestimate what is needed — and where respondents most often find an escape.

Under Paragraph 4(c), a respondent may rebut by demonstrating one of three safe harbors: a bona fide offering of goods or services under the domain before notice of the dispute; being commonly known by the domain name; or making a legitimate noncommercial or fair use of the name. Your job as complainant is to make a prima facie case that none of these applies, after which the evidential burden shifts to the respondent to show otherwise.

In practice, the prima facie case is built from what you can observe and document externally. Is the domain parked? Is it pointing to a pay-per-click landing page? Is it inactive, resolving to an error, or forwarding to a third-party site? Each of those facts, captured in a dated screenshot, supports your prima facie showing. What you cannot see — the respondent's internal intentions — is for the respondent to rebut.

The trap in Step 3: failing to address the safe harbors expressly. A complaint that ignores Paragraph 4(c) entirely, rather than arguing why each safe harbor is unavailable on the facts, gives a panel grounds for a deficiency ruling. We have seen cases stall at the compliance review stage for exactly this reason.

A second, subtler trap is the descriptive-term scenario. If your mark is also an ordinary English word — "Online," "Global," "Premier" — a respondent has an arguable basis for saying the domain was chosen for its descriptive value, not to target your mark. For .online disputes specifically, terms with inherent online-sector resonance carry a modest additional risk here. Document the strength and fame of your mark early.

Step 4: Build the bad-faith record — the third UDRP element

Bad faith is where most disputes are actually won or lost. Paragraph 4(a)(iii) requires that the domain was registered and is being used in bad faith — both limbs must be satisfied, not one or the other.

Paragraph 4(b) sets out four non-exhaustive circumstances panels treat as evidence of bad faith. The most commonly invoked in .online disputes are: registration primarily to sell the domain to the mark owner or a competitor at above-cost prices; registration to disrupt a competitor's business; and intentional attraction of users for commercial gain by creating confusion with the complainant's mark. A ransom demand — a direct email offering to sell the domain for a five-figure sum — is among the clearest bad-faith indicators and should be preserved in its original form.

Passive holding is also recognized. A domain that merely sits inactive, without active use, can still constitute bad-faith use where the mark is well-known, the registrant provides no credible explanation for the registration, and no plausible good-faith use is conceivable. Panels look at the totality: the strength of the mark, the lack of any conceivable legitimate use, and any conduct after registration (including the failure to respond).

The trap in Step 4: conflating registration date with the date of knowledge. The registrant must have known — or have been aware in practical terms — of your mark at the moment of registration. If your mark postdates the domain registration, the third element almost certainly fails, regardless of later bad-faith conduct. In a recent matter (a .online cybersquatting complaint, spring 2025), we advised a brand owner who had rebranded after the disputed domain was created; the correct strategy was not the UDRP but a different route entirely. Identifying that mismatch saved the filing fee and redirected the effort appropriately.

Assemble your evidence file before drafting the complaint: screenshots of the domain resolving, WHOIS/RDDS records (including archived historical data), any written communications from the registrant, and any prior instances of abusive registration by the same registrant — because a pattern of such registrations is itself a Paragraph 4(b) factor.

How do you choose between WIPO, the Forum, and CAC for a .online complaint?

All three providers apply the same UDRP rules, but the choice of forum carries practical consequences. WIPO is the most widely used and carries the strongest global recognition; its filing fee starts at USD 1,500 for a single-member panel covering one to five domains. The Forum's entry fee begins around USD 1,300 for one to two domains. CAC begins lower still, in the USD 500–800 range, making it the most cost-efficient entry point for a single straightforward .online dispute.

WIPO also offers an expedited procedure delivering a decision in approximately one month for single-panel cases of up to five domains — useful where the domain is actively diverting commercial traffic and time matters. The standard route at any forum runs roughly two months.

The decision matrix in practice: if speed is the priority and the claim is clean, WIPO's expedited option is worth the premium. If cost discipline matters more than speed, CAC is the rational choice. If the dispute involves a respondent in a jurisdiction where WIPO's institutional weight carries particular force, or where prior related proceedings were handled at WIPO, consistency favors filing there again.

One cross-zone consideration: if the same registrant controls a parallel .com or .net version of the infringing string, consolidating all domains in a single complaint is permitted under the Rules. That changes the forum-fee calculation, and the cost split shifts meaningfully at higher domain counts.

To weigh UDRP against a court action for your .online dispute, email info@cognomenlaw.com.

Step 5: Draft and file the complaint — what the document must contain

A UDRP complaint is a formal legal submission, not a letter of demand. Each provider's procedural rules specify the required elements, but the substantive structure is the same across forums: identification of the parties, the disputed domain, the trademark basis, the three-element argument, and the remedy requested.

The complaint must be precise about the trademark rights relied upon, must address each Paragraph 4(c) safe harbor expressly, and must set out the bad-faith argument with specificity — not a list of grievances but a reasoned analysis of which Paragraph 4(b) factors apply and why the evidence supports each one. Annexes (screenshots, WHOIS records, trademark certificates, correspondence) are filed simultaneously.

The trap in Step 5: submitting a complaint that does not clearly identify the registrant as the respondent. Where WHOIS data is masked behind a privacy service, the complaint names the privacy service as respondent and requests that the registrar identify the underlying registrant. Providers handle this automatically, but the complaint must acknowledge the privacy layer and address any anticipated identity substitution. Failure to do so can create a procedural gap that delays commencement.

Once filed, the provider conducts a formal compliance review. If the complaint is deficient, it is returned for correction within a short window. After compliance is confirmed, the case commences and the 20-day response window begins for the registrant.

Step 6: Manage the response window and prepare for a default or a contested case

After commencement, the registrant has 20 days to file a response. Default — a failure to respond — does not mean automatic transfer. The panel still examines the complaint on its merits and may deny the complaint if the three elements are not adequately established. A robust evidential record matters whether the respondent participates or not.

If the respondent does respond, expect the submission to invoke at least one Paragraph 4(c) safe harbor: prior use, a claim of common knowledge, or some form of alleged fair use. Evaluate the response when it arrives and consider whether supplemental submissions are warranted. Most providers allow supplemental filings only in limited circumstances — unsolicited supplements are generally not accepted — so the initial complaint must anticipate the likely defenses.

In a recent contested matter (a .online dispute, autumn 2024), the respondent filed a detailed response asserting prior use of a descriptive phrase in a different sector. We had anticipated that argument in the complaint, had documented the distinctiveness of the complainant's mark across the relevant class, and had addressed the good-faith registration chronology directly. The panel transferred the domain within the standard timeline, without extension. The lesson: a complaint written to survive a response outperforms a complaint written assuming default.

Where a three-member panel is requested — by either side — the fees increase, and if the complainant selected a single member but the respondent requests three, the parties generally split the higher fee. Budget for that possibility before filing.

Step 7: After the decision — implementation and what comes next

If the panel orders transfer, the registrar implements the decision after a short waiting period (typically ten business days) during which the losing party may seek a court stay. Absent a stay, the domain moves to the complainant's registrar of choice. If the panel orders cancellation, the domain drops and may become available for re-registration — meaning the complainant should be ready to register it promptly on release.

A decision against you — a denial — does not permanently foreclose other routes. If new evidence emerges (for example, the registrant subsequently attempts to sell the domain to a competitor), a fresh complaint is not barred, though refiling on the same facts and same parties is disfavored. Court-based anticybersquatting action may be available in some jurisdictions and is not precluded by a UDRP denial; that path requires local litigation counsel in the relevant jurisdiction.

What about a finding of Reverse Domain Name Hijacking (RDNH)? That finding — available where the complaint was brought in bad faith to strip a legitimate registrant — carries no monetary penalty but is a public reputational mark against the complainant. It also signals to panels in future proceedings. For brand owners, avoiding an RDNH finding means filing only when the three elements are genuinely satisfied, not as a commercial pressure tactic. We assess that risk explicitly at the outset of every engagement.

One portfolio-level point: a .online recovery should trigger a wider brand-protection review. If a registrant targeted your brand in .online, the same actor may hold parallel registrations in other new gTLDs or country-code zones. A monitoring program catches those before they become active threats.

Related at COGNOMEN

• UDRP recovery services: assessing and filing UDRP complaints across all gTLD zones
• Case study: proving no legitimate interest in a cybersquatting dispute
• Brand-protection monitoring: identifying domain threats before they escalate