Step-by-step: recover a .store domain through a UDRP complaint

Step-by-step: recover a .store domain through a UDRP complaint. UDRP and ccTLD domain recovery and defense across .store. Email the firm to assess your case.

A cybersquatter registers the .store version of your brand before you do — or immediately after you launch a product line — and then parks it, redirects your customers, or simply waits for a buy-back offer. You want the name. The question is whether a UDRP complaint is the right instrument, and exactly how you use it.

To recover a .store domain through a UDRP complaint, you must satisfy all three elements of Paragraph 4(a) of the Policy: the domain must be identical or confusingly similar to a trademark you hold; the registrant must have no rights or legitimate interests in it; and it must have been registered and used in bad faith. The UDRP applies to .store because that gTLD is operated by a registrar accredited under ICANN's system, which makes the Policy mandatory. A standard WIPO case typically resolves in about two months, with the only available remedies being transfer or cancellation — no damages, no costs award.

This guide walks each step in sequence, flags the trap hidden in each one, and closes with the evidence and the forum-choice decisions that determine whether you win.

Why does the UDRP apply to .store domains?

The UDRP applies to .store because every ICANN-accredited registrar — including those operating under the .store new-gTLD registry — is contractually bound to include the UDRP in its registration agreements. This is not optional. The registrant accepted the Policy the moment the domain was registered, regardless of which registrar was used.

That contractual chain matters in practice. It means a complaint filed at WIPO or the Forum carries direct authority over the registrar: once a transfer order issues, the registrar is obligated to implement it without requiring the registrant's cooperation. Compare this with the .de situation, where no UDRP applies and a court action is the only route. For .store, the arbitral path is available and is usually faster and less costly than litigation.

One nuance specific to new-gTLD zones like .store is the URS — the Uniform Rapid Suspension system — which also applies. The URS suspends a domain rather than transferring it, uses a higher evidentiary standard ("clear and convincing"), and charges lower filing fees. In our practice, brand owners who want ownership of the domain — not just suspension — choose the UDRP. The URS is a stopgap, not a recovery tool.

Step 1: Confirm you hold a qualifying trademark right

The first UDRP element requires that you have rights in a trademark and that the disputed domain is identical or confusingly similar to it. A registered trademark is the strongest foundation. An unregistered or common-law mark can qualify, but you must be able to demonstrate that the mark acquired distinctiveness through use before the domain was registered — a significantly harder evidentiary task.

The trap at this step is assuming that owning a brand name is the same as holding trademark rights. They are not. If your trademark application is still pending, most panels will not treat that as sufficient. If your registration post-dates the domain's registration date, you face a secondary battle: you must show either that your mark had common-law recognition before registration, or — in bad-faith cases involving opportunistic registrations timed to a public announcement — that the registrant targeted you specifically.

Before drafting a word of the complaint, pull a certified copy of your trademark registration (or your common-law evidence file) and align the goods/services description against the domain use. That alignment — or the gap in it — will shape every subsequent element of the case.

For a read on whether your trademark record supports a UDRP filing, reach us at info@cognomenlaw.com.

Step 2: Build the confusing-similarity analysis

Confusing similarity under Paragraph 4(a)(i) is assessed by comparing the textual string of the domain name against the trademark, generally ignoring the TLD suffix itself. A domain that reproduces your mark exactly — "yourbrand.store" — is identical to the mark and satisfies the element without further analysis. The harder cases involve added characters: a prefix like "buy-", a suffix like "-shop", or deliberate misspellings designed to intercept traffic.

Panels apply a low threshold here. The question is whether a typical internet user would find the domain confusingly similar, not whether actual confusion has been proven. That said, highly generic additions — "buy", "shop", "sale" — rarely break confusing similarity when the core mark is reproduced. The trap is treating a clean comparison as automatic. Where the domain includes a geographic term, a competing brand fragment, or a descriptive word that is also part of your brand's own sub-marks, the analysis needs to be explicit and detailed.

Write the comparison out in the complaint. Do not assume the panel will make the connection unaided. State: the mark, the domain string (minus the TLD), the similarities character-by-character, and if relevant, the phonetic or visual equivalence. Panels expect the work to be done for them — they decide; they do not research.

Step 3: Demonstrate that the registrant has no legitimate interest

Paragraph 4(a)(ii) requires you to show the registrant lacks rights or a legitimate interest. Because proving a negative is inherently difficult, panels have adopted a burden-shifting approach: once you make a prima facie showing, the burden of production shifts to the registrant to come forward with evidence of legitimacy.

The three safe harbors in Paragraph 4(c) define what the registrant could assert: (1) a bona fide offering of goods or services before notice of the dispute; (2) being commonly known by the domain name; (3) legitimate noncommercial or fair use without intent for commercial gain or to mislead. Your job at Step 3 is to pre-empt each of those defenses with facts.

The trap here is a complaint that simply states "the registrant has no rights" without anticipating the safe harbors. If the domain resolves to a website selling competing goods, address whether that qualifies as a bona fide offering (panels generally say it does not, when the registrant knew of your mark at registration). If the registrant is an individual whose name matches the domain, say so and explain why that scenario does not apply. A sloppy second-element section is one of the most common reasons otherwise strong cases produce unexpected results.

Step 4: Establish bad faith — registration and use

The third element is where most disputes are won or lost. Under the UDRP, both registration and use in bad faith must be shown — this is a cumulative standard, not an alternative. A domain registered innocently but later used abusively, or registered abusively but then parked without any use, can each create difficulty. Paragraph 4(b) provides a non-exhaustive list of circumstances that evidence bad faith:

• Registration primarily to sell the domain to the mark owner for an amount exceeding out-of-pocket costs.
• Registration to disrupt the business of a competitor.
• Registration to attract users for commercial gain by creating a likelihood of confusion with the mark.
• A pattern of registering marks owned by others across multiple domains.

The trap is the passive-holding situation. A registrant who registers a domain and does nothing — no website, no use at all — might seem to be in bad faith by inaction. Panels have addressed this doctrine extensively. The consensus view is that passive holding can constitute bad faith when the complainant's mark is well-known, there is no plausible legitimate use of the domain, and the registrant provides no explanation for the registration. But passive holding alone, for a domain incorporating a relatively weak or common mark, is harder. Document what the domain resolves to at the time of filing — and preserve a screenshot — because the content can change during proceedings.

In a recent matter (a .store typosquat, spring 2025), we assembled a bad-faith record based on the registrant's pattern of registering variant spellings of the complainant's brand across multiple new gTLDs. The panel accepted that pattern as Paragraph 4(b) evidence and issued a transfer order. The case resolved in under nine weeks from filing.

Step 5: Choose the forum and file the complaint

Three forums handle the substantial majority of UDRP cases: WIPO, the Forum, and the Czech Arbitration Court (CAC). WIPO and the Forum together account for approximately 97% of all UDRP proceedings. For a standard .store recovery involving a single domain and a single respondent, the choice between WIPO and the Forum is largely one of institutional preference and fee structure.

WIPO charges USD 1,500 for a single-member panel handling one to five domains. The Forum begins at approximately USD 1,300 for one to two domains on a single-member panel. The CAC starts lower — around USD 500–800 — but is less frequently used and may matter for budget-sensitive situations. These are filing fees only; legal fees for complaint preparation are separate and typically fall in the USD 3,000–7,000 range for a straightforward case.

The forum-choice trap is assuming any forum will do. WIPO publishes a detailed jurisprudential overview that its panelists actively use; that consistency can favor a complainant in close cases. If your case involves a serial cybersquatter with a pattern across multiple zones, WIPO's deep institutional record on pattern evidence is worth considering. File the complaint in the format specified by the chosen forum's Supplemental Rules — non-conforming complaints are rejected or returned for amendment, which adds delay.

A complaint may cover multiple domains in a single proceeding only if the registrant of record is the same for all of them. Confirm WHOIS/RDDS data before grouping domains; privacy or proxy registration can complicate this and may require contact with the forum for guidance before filing.

To assess which forum fits your .store complaint and to weigh the filing-fee structure, email info@cognomenlaw.com.

Step 6: Understand what happens after you file

Once a complaint is accepted, the forum commences the proceeding and formally notifies the registrant. From that commencement date, the respondent has 20 days to file a response. If the respondent defaults — files nothing — the panel still evaluates the complaint on its merits; default is not automatic victory. Panels regularly deny complaints on default if the evidence is insufficient.

After the response window closes, the forum appoints a panel. A single-member panel is the default unless a party requests three members. If the complainant requested a single panelist and the respondent requests a three-member panel, the parties generally split the higher three-member fee — currently USD 4,000 at WIPO for one to five domains. The panel then typically has 14 days to issue a decision, though extensions occur.

Implementation follows the decision. The registrar is notified and must implement the transfer or cancellation — absent a court challenge by the registrant within the specified period — typically within a few business days of the deadline passing. The full cycle, from filing to domain in your account, runs about two months in an uncontested or lightly contested case. A strongly contested matter with supplemental filings can run longer.

In a second matter we handled (a .store domain used to redirect e-commerce traffic to a counterfeit goods page, autumn 2024), the respondent filed a response asserting fair use. We addressed each Paragraph 4(c) safe harbor directly in our reply brief. The panel transferred the domain approximately eleven weeks after the initial filing date.

Step 7: Assess the evidence that decides the outcome

What evidence actually moves a panel? In our experience, three categories carry the most weight: contemporaneous WHOIS or RDDS data captured at or near registration; screenshots of the domain's resolved content over time; and any communications between the registrant and the trademark owner — particularly offers to sell the domain for an above-cost sum.

Prior dispute history is underused. If the registrant has appeared as a respondent in earlier UDRP cases and lost, that pattern is directly probative under Paragraph 4(b). It can be found through the WIPO Decision Search database and the Forum's online records — both publicly accessible. Panels weight that history seriously, and presenting it systematically can convert a marginal bad-faith showing into a clear one.

What does not move panels as much as complainants expect? Reputation evidence that is not tied to the date of registration. A brand's current fame matters less than whether it was recognizable — and therefore targetable — on the day the registrant pressed "register." Assemble evidence of the mark's public profile as of that specific date. Press releases, product launches, retail distribution announcements, and advertising spend contemporaneous with or prior to registration are far more useful than current traffic data or a current social-media following count.

What if the complaint fails or produces an RDNH finding?

A failed UDRP complaint has two main consequences. First, you may refile, though panels scrutinize re-filed complaints carefully and expect materially new arguments or evidence, not a rerun of the original. Second — and more seriously — if a panel finds that the complaint was brought in bad faith to deprive a legitimate registrant, it may issue a Reverse Domain Name Hijacking (RDNH) finding. An RDNH finding carries no monetary penalty, but it is public and reputational, attached permanently to the case record.

RDNH risk is real when the complainant has a weak trademark, the registrant has a plausible legitimate interest that was not properly addressed before filing, or the complaint relies on a legal theory that panels have consistently rejected. We regularly advise brand owners who are eager to file that the RDNH risk in their specific fact pattern outweighs the recovery benefit — and that the stronger path may be a direct negotiated purchase or, where the domain is used in a way that causes identifiable harm, a court-based anticybersquatting action.

Is the court route ever preferable to the UDRP for a .store domain? Yes — specifically when you also need damages, an injunction, or discovery. The UDRP's remedies are limited to transfer or cancellation. If a registrant's conduct has caused quantifiable commercial harm and you want compensation, US anticybersquatting litigation is the only path that reaches money. That route involves substantially higher legal fees and timelines but can justify itself when the harm is significant.

Related at COGNOMEN

• UDRP recovery services — how COGNOMEN prepares and files UDRP complaints across gTLDs
• Handling a serial cybersquatter across .ae and multiple zones — strategy and evidence
• Court-based recovery for hijacked .org domains — when arbitration is not enough