Step-by-step: request a three-member panel to defend a .com domain

Step-by-step: request a three-member panel to defend a .com domain. UDRP and ccTLD domain recovery and defense across .com. Email the firm to assess your case.

Twenty days. That is how long a registrant has to answer a UDRP complaint before defaulting – and every strategic choice for the defense has to be made inside that window. One of those choices is whether to request a three-member panel to defend a .com domain rather than accepting the single panelist the complainant selected. The decision looks administrative. It is not.

To request a three-member panel in a .com UDRP proceeding, the respondent must elect that option in the Response and pay an additional share of the increased forum fee – at WIPO, the single-member rate of USD 1,500 rises to USD 4,000 for a three-member panel, with the additional cost split between the parties. Three panelists are not automatically stronger for the respondent, but they are statistically harder to swing by a single aggressive complainant, and they are the only panel configuration that can produce a dissent – which matters when the RDNH claim is the real objective.

This guide walks each step: the timing rules, the fee mechanics, the safe-harbor record you must build, and the evidentiary threshold for an RDNH finding.

Why does the panel composition decision matter in a .com UDRP defense?

A single panelist decides the case alone, at speed. The outcome is binary: transfer or no transfer. A three-member panel produces a majority decision, but it also produces a written record of any dissent, and panels – precisely because they deliberate rather than rule alone – tend to scrutinize weak complaints more carefully. For a respondent with a strong legitimate-interest record, that extra scrutiny is worth paying for.

The .com zone matters here. The UDRP, adopted by ICANN in 1999, applies to all accredited registrars for .com, and the Policy's Paragraph 4(a) requires the complainant to prove all three elements cumulatively: confusing similarity to a mark, absence of registrant rights or legitimate interests, and registration and use in bad faith. The "and" in that third element is not an accident. A complainant who cannot prove registration in bad faith – who filed because your domain has commercial value, not because you targeted their mark – is exposed to a Reverse Domain Name Hijacking finding.

RDNH findings are almost exclusively issued by three-member panels or in cases where a single panelist found the complaint so obviously abusive that no dissent was possible. In our practice, the respondent who wants RDNH on record nearly always needs three panelists. That is the first strategic reason to elect the option. The second is deterrence: a well-resourced complainant filing a marginal case may withdraw before a decision when it sees a sophisticated response and a three-member panel request, rather than risk a published RDNH finding against its brand.

Step 1 – Confirm the complaint and start the response clock

The response deadline runs from the date of formal commencement, not from the date you first heard about the complaint. Those can differ by several days. The selected provider – WIPO or the Forum for the overwhelming majority of .com proceedings – sends a commencement notice when it confirms the complaint is formally complete. That notice starts the 20-day response window. Miss it, and the panel decides on the complainant's papers alone.

The trap at this step: assuming the clock starts when you receive the complaint by email. It does not. Log in to the provider's portal, find the commencement notice, and count 20 days from that date. If the 20th day falls on a weekend or provider holiday, confirm the provider's rules on extensions – some providers allow a short automatic extension on request; others do not. Do not assume.

While confirming the deadline, pull the full complaint document – not just the cover sheet. Read the trademark the complainant relies on: its registration date, its jurisdiction, its goods and services. Read the bad-faith allegation in detail. Both facts determine whether a three-member panel election is worth the additional fee or whether the case is strong enough to win (or weak enough to ignore) in front of a single panelist.

For an assessment of your domain dispute before the response deadline, contact info@cognomenlaw.com.

Step 2 – Elect the three-member panel option in the Response and pay the fee

The panel-composition election is made inside the Response itself, in the designated section of the provider's response form. At WIPO, the form contains an explicit checkbox or equivalent. At the Forum, the election is similarly made in a standard response template. You cannot elect three panelists after the response is filed. The election is irrevocable once the Response is submitted.

The fee mechanics work as follows. The complainant paid the single-panel filing fee when it filed – at WIPO, USD 1,500 for one to five domains. When the respondent elects a three-member panel, the total fee rises to USD 4,000. The additional USD 2,500 is split equally between the parties: the complainant pays an additional USD 1,250, and so does the respondent. The provider invoices both sides and holds the appointment until both amounts are received.

The trap here is the payment deadline. WIPO and the Forum each set a short window in which the respondent's share must be received – typically a matter of days after the Response is filed. If the payment is late, the election fails and the provider defaults to a single-panel appointment. Bank wire delays, currency conversion, and public holidays have cost respondents their panel election. Pay immediately after filing, and confirm receipt with the provider's case management team.

A secondary trap: the complainant can refuse to pay its share of the three-member fee. If it does, the proceeding ordinarily continues with a single panelist. The provider's rules govern exactly how this plays out, so read them for the specific case. In our experience, a complainant that refuses the three-member fee often signals that it preferred a faster, lower-scrutiny single-panel decision – itself a data point about the strength of its case.

Step 3 – Build the Paragraph 4(c) legitimate-interest record before you draft a word of the Response

Paragraph 4(c) of the UDRP sets out three safe harbors demonstrating legitimate interests: a bona fide offering of goods or services before notice of the dispute, being commonly known by the domain name, and legitimate noncommercial or fair use. The respondent does not have to establish one of those three categories exclusively – the list is illustrative, not exhaustive. But in practice, almost every successful .com defense anchors on one of them.

Before drafting, gather evidence for whichever safe harbor applies. For bona fide offering: screenshots of the site as it operated before the complaint was filed or the demand letter was sent, order records, invoices, advertising materials, business registration documents, and third-party references to the business at the domain. The "before notice" element is critical – evidence of use that post-dates the complainant's demand letter carries less weight with a panel.

For "commonly known by the name": corporate filings, business licenses, letterhead, vendor agreements, and press references that predate the dispute. This safe harbor is harder to establish for an individual registrant with no formal entity, though it is not impossible where a personal name or long-standing online identity is at issue.

For legitimate noncommercial or fair use: the record needs to show that the site is genuinely commentary, criticism, or fan content – not a commercial vehicle in disguise. Panels will look at whether the site carried pay-per-click advertising or solicited sales. Even a single ad unit can undermine this safe harbor.

The trap at this step is underestimating what "legitimate" requires. Parking a domain at a PPC page while waiting to sell it is not a bona fide offering. Holding a domain in passive reserve with no use at all is difficult to defend unless registration pre-dates the complainant's trademark by years. Assemble the evidence first; then assess honestly which safe harbor it supports. If the evidence is thin, the three-member election costs money without improving the outcome.

How do you build the bad-faith rebuttal for a .com defense?

The complainant must prove registration and use in bad faith – both, cumulatively. Challenging each element separately is legitimate defense strategy. The most effective bad-faith rebuttals are factual and chronological: the domain was registered before the complainant's trademark existed or before the complainant achieved recognition; the registrant did not know of the complainant; the registration reflected a descriptive, geographic, or personal name with obvious independent value.

Panels considering bad faith look at the Paragraph 4(b) non-exhaustive factors: whether the domain was registered primarily to sell to the mark owner at a premium; whether it was registered to disrupt a competitor; whether it was used to attract users by creating confusion with the complainant's mark for commercial gain; and whether there is a pattern of abusive registrations. Each of those factors is a rebuttal target. If none of them applies to your facts, say so, with evidence.

Documentary evidence carries far more weight than bare assertions in the Response. Contemporaneous communications – emails, notes, records of why the domain was registered – are the most valuable. Screenshots of the site as it existed at the time of registration, if preserved, matter. WHOIS history showing the original registration date and the absence of prior disputes matters. A domain portfolio log showing that the registrant has not targeted the complainant's sector in other registrations can rebut a pattern allegation.

What panels consistently find insufficient: a declaration by the registrant stating good faith in conclusory terms, with no supporting documents. The respondent who says "I had no idea this mark existed" but cannot produce a single document from the period of registration will lose to a well-documented complainant even in front of three panelists.

In a recent matter – a .com domain held by a small software developer, spring 2025 – we assembled registration-era business plan documents, contemporaneous email threads, and a timeline of the complainant's trademark filings to demonstrate that registration predated any plausible awareness of the mark. The three-member panel found for the respondent. Passive good faith is not enough; documented good faith is.

When is an RDNH finding realistic in a .com UDRP proceeding?

RDNH – Reverse Domain Name Hijacking – is a panel finding that the complaint was brought in bad faith to deprive a legitimate registrant of a domain. It carries no monetary penalty; its weight is reputational. A published RDNH finding against a sophisticated complainant or its counsel can be damaging precisely because those decisions are searchable and cited in subsequent proceedings.

Panels issue RDNH findings where the complainant knew – or should have known – it could not satisfy the three-element test. The clearest RDNH cases involve: registration that pre-dates the complainant's trademark by years; a complainant with a weak or narrowly-scoped mark filing against a domain with an obviously descriptive or generic character; or a complainant that had actual knowledge of the respondent's legitimate use before filing. Some panels have also found RDNH where the complaint made false or misleading factual representations.

Is RDNH realistic in your case? Ask these questions. Did the complainant's trademark post-date the domain registration? Is the complainant a well-resourced brand owner who had the resources to investigate before filing? Does the domain consist of a generic or descriptive term that anyone could have registered legitimately? If the answer to two or more of those is yes, and if you have the evidence to prove it, the RDNH request belongs in the Response – but it must be substantiated, not tactical.

The trap: respondents who include a boilerplate RDNH allegation with no supporting argument. Panels view that as noise and ignore it. Worse, some panels have treated an unsubstantiated RDNH allegation as evidence that the respondent is not engaging seriously. If you cannot articulate specifically why the complainant knew or should have known its case was deficient, omit the RDNH request or reserve it for a well-documented argument in the alternative.

If you have already filed a Response and want a second read on whether the RDNH argument is properly framed, email info@cognomenlaw.com.

What happens after the Response is filed and the panel is appointed?

Once the Response is submitted and both parties' fee shares are received, the provider appoints a three-member panel from its roster. Each party typically has an opportunity to nominate panelists from a published list – though the provider makes the final appointment. The panel is charged with deciding the case on the written submissions. No oral hearing takes place in standard UDRP proceedings.

The panel may request additional submissions – supplemental filings – but the rules governing them are strict. Most providers require a showing of exceptional circumstances before permitting a supplemental filing by either party. A respondent who saved key evidence for a supplemental filing risks having it excluded. Put everything material into the Response itself.

The decision typically issues within the overall two-month window from commencement. A three-member panel sometimes takes a few additional days beyond a single-panelist decision, because the three panelists must deliberate and reach a majority. Once the decision is published, the registrar has a short implementation period before transferring (or declining to transfer) the domain. If you lose, you have a narrow window to seek a stay by commencing litigation in a court of competent jurisdiction before the registrar implements the transfer.

A note on the cross-zone dimension. The UDRP governs .com and most other generic TLDs. If the complainant also filed or threatens to file against a ccTLD version of the same name – a .uk, .eu, or .de equivalent – those proceedings run under different rules and on separate timelines. The Nominet DRS for .uk uses a lower bar ("abusive registration" without the strict "registered AND used" cumulative requirement). A .eu dispute proceeds through ADR.eu under EURid's rules. And for .de, there is no UDRP at all – that route runs through the German courts, with DENIC's DISPUTE entry used to block transfer during litigation. Winning a UDRP in front of a three-member panel does not automatically protect you in those other zones; each requires its own assessment.

Related at COGNOMEN

• Respondent defense and RDNH services – protecting domain registrants across gTLDs and ccTLDs
• How to prove legitimate interest under Paragraph 4(c) – a detailed analysis of the safe harbors
• URS versus UDRP globally – choosing the right suspension or transfer route for new gTLDs