Step-by-step: recover a lapsed .au domain that was re-registered

Step-by-step: recover a lapsed .au domain that was re-registered. UDRP and ccTLD domain recovery and defense across .au. Email the firm to assess your case.

Your .au domain lapsed. Someone else registered it the moment it dropped. Now it points at a parking page — or worse, at a competitor's site — and a broker is asking a five-figure sum to sell it back. That is the scenario we see regularly in our practice, and it is precisely where the auDRP dispute procedure, combined with careful pre-filing preparation, does its real work.

To recover a lapsed .au domain that was re-registered by a third party, you must file under the auDRP — Australia's adaptation of the UDRP — and satisfy all three elements: that the domain is identical or confusingly similar to a mark in which you hold rights, that the registrant has no rights or legitimate interests, and that the domain was registered or used in bad faith. The procedure is administered by approved dispute-resolution providers; a standard matter is resolved in a matter of weeks; and the only remedies are transfer or cancellation of the domain.

This guide walks each step in sequence, flags the trap hidden inside it, and explains what the evidence must show at every stage.

What is the auDRP and how does it govern .au recovery?

The auDRP is Australia's ccTLD adaptation of the UDRP, administered under rules set by auDA — the .au Domain Administration — and applied by approved dispute-resolution providers. It tracks the three-element UDRP test closely but carries one critical difference that shapes the entire filing strategy.

Under the standard UDRP, bad faith must be shown in both registration and use — a cumulative test. Some panels reading the auDRP treat the bad-faith limb as registering or using in bad faith. That single word — "or" versus "and" — matters when the domain's use is passive or when registration intent is ambiguous. We advise clients to build evidence covering both registration-time conduct and current use regardless, because panel treatment of this nuance is not uniform and you do not want your complaint to turn on the quieter interpretive question.

The auDRP applies across the .au namespace: .com.au, .net.au, .org.au, .id.au, and other second-level zones. The complainant must have rights in a name or mark. Unlike the UDRP, the auDRP permits reliance on a wider set of "rights" than registered trademarks alone — rights in a business name, a company name, or equivalent Australian recognition can qualify — though registered trademark rights remain the cleanest foundation. Confirm the current auDA rules and any recent auDRP supplemental rules with counsel before filing, because auDA has periodically updated its policies and eligibility requirements.

Step 1: Establish your rights before you do anything else

The first element of the auDRP requires rights in a name or mark. Before you spend time building a bad-faith record, confirm what rights you actually hold — and whether they existed before the domain was re-registered. That sequence matters because the panel will ask whether the registrant could plausibly have targeted you.

Check four things immediately. First, confirm your Australian registered trademark — number, filing date, classes covered, and current renewal status. If the mark was allowed to lapse alongside the domain, you have a rights problem that no procedural argument repairs. Second, identify any common law trademark rights built through trading history, advertising spend, and public recognition under the name in Australia. Panels accept unregistered rights where the evidence of reputation is concrete. Third, check whether the domain predates your mark. If it does, the registrant may argue prior use — a trap we address in Step 4. Fourth, pull the current WHOIS/RDDS record and the historical registration data. You need the exact date the lapsed domain re-registered, not the expiry date of your old registration. The gap between those two dates can reveal whether the re-registration was opportunistic.

The trap in this step: brand owners sometimes proceed on the assumption that their Australian Business Name registration alone is sufficient. A business name registered with ASIC is not automatically a trademark. It can contribute to a common law rights argument, but a panel that scrutinizes the foundation will look for the trading reputation behind it, not the registration certificate on its own.

Step 2: Run the chain-of-title and prior-dispute check

Before filing, audit the domain's complete history. A domain that has been through one dispute — or that was transferred between related entities to obscure a prior bad-faith finding — presents a different case than a clean opportunistic re-registration. And a domain with a prior auDRP or UDRP record against it is simultaneously stronger for you and more complicated to handle strategically.

The chain-of-title check covers: WHOIS history using a reputable domain history service; the auDA WHOIS record for the registrant's eligibility nexus (auDA requires an Australian nexus to hold a .com.au or .net.au — verify that the current registrant actually qualifies); prior auDRP or UDRP filings visible in public decision databases; and any prior court proceedings in Australian federal or state courts involving the name.

Why does prior dispute history matter? A panel presented with a complainant's own prior dispute loss will be skeptical. A panel presented with a respondent who re-registered knowing of a prior dispute against them — or who acquired the domain from someone with a tainted history — may use that pattern to satisfy the bad-faith element. The chain-of-title is also the document you will rely on if the case goes to Australian court rather than auDRP, and it is the foundation of any pre-acquisition due diligence if you consider buying the domain through negotiation rather than dispute.

The trap in this step: the registrant's WHOIS record may show a privacy or proxy service rather than the actual holder. You will need to verify the registrant's Australian nexus through the registrar's disclosed information. If the registrant cannot demonstrate an Australian presence or entity, that is independently relevant to auDA eligibility — a fact worth flagging to the provider and, if the eligibility issue is clear-cut, to auDA directly in parallel with any dispute filing.

For a chain-of-title audit and eligibility review before you file, contact info@cognomenlaw.com.

Step 3: Map the evidence of bad faith at registration and use

Bad faith is where most auDRP complaints either win cleanly or unravel. The evidence must speak to what the registrant knew — or should have known — at the moment of re-registration, and what it has done since.

The strongest bad-faith indicators in a lapsed-domain scenario are: a demand to sell the domain at a price well above registration cost; a pay-per-click parking page carrying content in the complainant's industry or using the complainant's trademark terms; redirection to a direct competitor's website; a history of similar registrations targeting known marks (a pattern of abusive registrations); or re-registration within hours or days of the domain expiring, suggesting automated monitoring.

Evidence to gather before drafting the complaint: screenshots of the domain's current use with timestamps; archived screenshots from the Wayback Machine showing use over time; any communications from the registrant or a broker including a price demand (preserve these in their original format, with headers); evidence of the complainant's trading reputation in Australia at the time of re-registration (press coverage, advertising, customer correspondence, turnover figures if disclosable); and Google search results showing the complainant's prior association with the name.

One pattern we handle regularly: the re-registrant holds the domain passively — no website, no content, no direct demand. Passive holding is not automatically good faith under the auDRP, as it is not under the UDRP. Panels look at the totality of circumstances. If the domain is identical to a well-known mark, if there is no conceivable legitimate use, and if the registrant has provided no explanation, panels have consistently found that passive holding in those circumstances satisfies the bad-faith element.

The trap in this step: complainants over-rely on the parking page. Pay-per-click content can be automatically generated by the registrar or a parking service and may not be directly traceable to the registrant's intent. Panels vary on how much weight they give to auto-generated content. Build your bad-faith case on the totality — the timing of re-registration, the absence of any plausible legitimate use, and any direct communications — rather than on the parking page alone.

How do you choose between auDRP and filing in an Australian court?

The right route depends on the remedy you need and the conduct you can prove. For most lapsed .au domain recoveries, the auDRP is the faster and more cost-efficient path — it produces a transfer or cancellation order, resolved by an approved dispute-resolution provider, without the procedural demands of litigation. The auDRP is also the only route if all you want is the domain name. It delivers no monetary damages.

When does Australian court action make more sense? Three situations: first, where you need monetary damages alongside transfer — the auDRP cannot award them; second, where the registrant's conduct implicates passing off, misleading or deceptive conduct under Australian consumer law, or other claims that a court can address in a single proceeding; third, where the auDRP is genuinely inaccessible because the domain does not fall within a zone that carries the auDRP rules, or where an auDRP decision has already been rendered against you and re-filing would be improper.

Cross-zone considerations are also relevant. If the same registrant holds both the .au and a .com version of your mark, the .com can be addressed in a UDRP proceeding before WIPO or the Forum simultaneously — with the auDRP handling the .au — because the rules do not prevent parallel filings across different zones. A complaint may cover multiple domains under the auDRP only if the registrant is the same holder. Coordinating simultaneous filings is complex, and we advise assessing timing carefully to avoid inconsistent results.

If the respondent has assets in Australia and the scale of harm justifies litigation costs, the Australian Federal Court or a state supreme court can hear passing-off or trade mark infringement claims. We work with local litigation counsel in the relevant Australian jurisdiction for court-based proceedings. Australian court timelines are substantially longer than the auDRP and the costs are correspondingly higher — those trade-offs belong in any honest assessment of the route.

In a recent matter involving a .com.au re-registration, spring 2025, we filed an auDRP complaint for a brand owner whose domain had been registered by a parking-focused operator within 48 hours of expiry. The respondent defaulted. The decision was issued in the complainant's favor and the domain was transferred to the brand owner without any need to escalate to court.

To weigh auDRP against a court action for your case, email info@cognomenlaw.com.

Step 4: Draft and file the auDRP complaint

The complaint is the document the panel reads first, last, and only. A weak complaint — one that asserts the three elements without grounding them in specific evidence — is difficult to rehabilitate in a supplemental filing, and most auDRP procedures limit supplemental submissions.

The complaint must cover, in sequence: your rights (with the trademark registration number and filing date, or the evidence of common law reputation); the identity or confusing similarity of the domain to your mark (a visual and phonetic comparison, noting any generic additions like ".com.au"); the basis for asserting that the registrant has no rights or legitimate interests (the absence of any known connection to the name, no bona fide offering before notice of the dispute, no personal name or common usage basis); and the bad-faith evidence assembled in Step 3.

Every exhibit must be described, dated, and linked to a specific element. Panels are not investigators. They read what is put in front of them. An exhibit marked "evidence of bad faith" without a sentence explaining what it shows and why it satisfies the auDRP element is an exhibit that may be disregarded.

The complainant also names the approved dispute-resolution provider. As of the current period, auDA has designated providers for the auDRP — verify the current list at auDA's published registry before filing, because approved-provider status can change. Filing fees vary by provider and panel composition (single-member versus three-member). A three-member panel costs more but may be warranted where the respondent is likely to be represented and the case involves a substantial asset.

The trap in this step: filing in haste after a parking-page screenshot without a complete rights and bad-faith record. An auDRP panel that finds the complaint deficient may deny it, creating a prior-decision record that the respondent will cite if you try again or move to court. Get the complaint right before you submit it.

Step 5: Handle the response period and what happens if there is no response

Once the complaint commences, the respondent has a period to file a response — consistent with UDRP-derived procedure, this is typically around 20 days. If no response is filed, the panel proceeds on the complaint record. Default is not automatic victory. The panel still tests whether the complaint satisfies all three elements on the evidence actually submitted.

What happens when the respondent does respond? The response may assert: legitimate interests through a bona fide business use of the name; registration before the complainant acquired trademark rights; or a claim that the domain was re-registered for a generic or descriptive purpose unrelated to the complainant's mark. Each of these arguments requires a factual rebuttal, not a legal one. "That is not true" is not a rebuttal. Specific evidence — trading records, prior trademark history, market surveys — is.

If the respondent responds and raises arguments you did not anticipate, the question is whether the procedure allows a supplemental filing. The auDRP rules, like the UDRP rules, generally limit additional submissions. Where a supplemental is permitted, it must be genuinely responsive to new matters raised in the response, not a second chance to shore up the original complaint. We advise building the complaint to withstand a full response without needing supplemental reinforcement.

The trap in this step: treating a default as a foregone conclusion. We have seen complaints fail in their entirety after default because the complainant's evidence of bad faith was circumstantial and the panel found it insufficient even without a respondent pushing back. Default removes the adversarial element; it does not relieve the complainant of the burden of proof.

Step 6: After the decision — registrar implementation and what to watch for

A transfer order is not self-executing. The approved provider communicates the decision to the registrar, which implements the transfer after a short waiting period — typically around ten business days — during which the respondent may seek a court stay. If no court order is obtained, the registrar completes the transfer.

Before the transfer completes, confirm that your auDA registrant eligibility is in order. The .com.au requires an Australian nexus — a registered Australian business name, company, trademark, or another qualifying basis. If your eligibility lapsed at the same time as the domain, you must restore it before the transfer is ordered into an account that can hold a .au domain. A transfer delivered into a non-eligible registrant account fails. This is a procedural trap that causes real delay in cases where the brand owner's corporate structure has changed since the domain was first registered.

After the transfer, secure the domain immediately: update the registrant contact details, set auto-renewal, enable registrar lock, and configure two-factor authentication on the registrar account. A domain recovered through dispute is a domain someone else wanted; operational security after recovery is not optional.

Also consider the forward chain: if the same registrant holds typosquats, country-code variants, or related domains, a second round of filings may be warranted. A single auDRP decision does not bind a respondent from re-registering adjacent names — it only transfers or cancels the specific domains named in the complaint.

In a recent matter involving a .net.au typosquat alongside the .com.au, autumn 2024, we coordinated the filing to cover both domains in one complaint — the registrant was the same holder — securing a single transfer order for both names and avoiding the cost of sequential filings.

How does escrow and purchase compare to filing a dispute?

Before filing, consider whether a negotiated purchase is faster and cheaper than a dispute — and when it is a trap of its own. If the registrant is holding the domain primarily as a monetization asset, a purchase through escrow may resolve the situation within days rather than weeks, at a price that is low relative to the auDRP costs plus legal fees. The risk is that negotiating — or paying — validates the registrant's position and sets a price expectation for the next dropped domain.

If you choose to negotiate, do so through escrow. A domain transaction without a proper domain assignment agreement — covering the transfer of the domain name, any associated trademark rights or common law claims, and the representations about chain of title — is a transaction that can be challenged later. We structure these as formal agreements with escrow through a reputable escrow provider, so both sides have certainty about timing and title.

Pre-acquisition due diligence also governs this decision. If the domain carries a prior auDRP or UDRP decision against a previous holder, buying it does not wash that history away. A complainant can argue that a transfer to a related or connected party was itself in bad faith. Confirm the dispute history before any purchase. Our domain transactions services include chain-of-title review and prior-dispute screening as a standard component of pre-acquisition diligence.

The practical decision matrix: if the registrant is a professional parking operator and the domain's commercial value to your business is moderate, negotiate and use escrow. If the registrant is making affirmative demands, redirecting traffic, or has a pattern of similar registrations, the auDRP is almost always the right first move — buying once signals that the tactic works and invites repetition.

Related at COGNOMEN

• Domain transactions and pre-acquisition due diligence services — chain-of-title review, escrow, and portfolio brand protection
• Domain assignment agreements — structured transfer documentation for .au and cross-zone acquisitions
• Suspending a new-gTLD domain via URS — the rapid-suspension route for new generic TLDs