Step-by-step: respond to a UDRP complaint within the deadlin… (.com 2)

Step-by-step: respond to a UDRP complaint within the deadlin… (.com 2). UDRP and ccTLD domain recovery and defense across .com. Email the firm to assess your c…

A UDRP complaint arrives. The domain name is yours, registered in good faith, and now a stranger is claiming it. You have a narrow window to act — and missing it can cost you the name entirely, even if your case is strong.

To respond to a UDRP complaint within the deadline for a .com domain, a registrant must file a written response with the chosen provider — most commonly WIPO — within 20 days of formal commencement. That window is fixed by the UDRP Rules. The response must address all three elements of Paragraph 4(a) and, where applicable, invoke the Paragraph 4(c) safe harbors to establish legitimate interest. Missing the deadline forfeits the right to be heard.

This guide walks each step, flags the trap it hides, and explains what evidence actually decides the outcome.

What governs .com UDRP disputes — and why the deadline is not negotiable

Every .com domain is registered through an ICANN-accredited registrar bound by the UDRP Policy. That means all three UDRP elements apply automatically, regardless of where the registrant is located or where the registrar is based. There is no opt-out and no jurisdictional escape.

The case commences — and the 20-day clock starts — when the dispute-resolution provider formally notifies you of the complaint. WIPO and the Forum both send that notice by multiple methods: email, courier, and fax where available. The commencement date is the date WIPO records, not the date you open the email. In our practice we regularly advise registrants who discovered the notice days late because it landed in a spam folder tied to an outdated WHOIS contact address. That delay does not extend the clock.

The trap: registrants sometimes assume the commencement date is the date they personally became aware of the filing. It is not. Check your WHOIS record — or RDDS entry under the newer terminology — regularly, because that is the address the provider uses. Outdated contact information is one of the most common reasons a default goes uncontested.

For an assessment of your domain dispute, contact info@cognomenlaw.com.

Step 1: Identify the forum and confirm the exact deadline

The complainant chooses the forum; you do not. For .com disputes that means WIPO, the Forum, or — less commonly — CAC or ADNDRC. Each provider's rules set the same 20-day response window, but the commencement notice from each forum will state the precise deadline in your local date. Read that notice first. Do not calculate from the filing date or the date you received the complaint document itself.

Once you know the forum, log into its online filing portal. WIPO's electronic filing system allows submission right up to 23:59 Geneva time on the deadline date. The Forum uses its own platform. Neither accepts late responses as of right — an extension requires a written request before the deadline expires, and providers grant extensions sparingly. If you need more time, apply early and give a concrete reason. A bare request citing "complexity" is unlikely to succeed.

The trap: assuming the deadline is a soft courtesy. Panels treat a missing response as a technical default. They still examine the complaint on its merits, but without your evidence, your arguments, and your safe-harbor invocations, the panel works only from what the complainant filed — and that document was written to make you look bad.

Step 2: Read the complaint and map it against the three UDRP elements

Before drafting a single word of your response, read the complaint carefully and map each allegation to the element it is supposed to satisfy under Paragraph 4(a): (1) identity or confusing similarity to a trademark; (2) your lack of rights or legitimate interests; (3) bad-faith registration and use. This mapping exercise tells you where the complainant's case is strong, where it is thin, and where it may fail entirely.

Element (1) is almost always the weakest battleground for a respondent. If the complainant owns a registered trademark that resembles the domain, the similarity test is usually met — panels apply it as a straightforward string comparison. Your energy is better spent on elements (2) and (3).

Element (3) deserves the closest scrutiny. The UDRP requires the complainant to show the domain was registered and used in bad faith — both limbs, cumulatively. A complaint that can only show bad use after registration, without evidence that the registrant knew of the trademark at the time of registration, faces a real hurdle. We have defended registrants successfully where the registration date predated the complainant's trademark filing by years, leaving the complainant unable to satisfy the conjunctive bad-faith test.

The trap: fixating on the similarity element when the real fight is on bad faith. Read the complaint for what it cannot prove, not just for what it claims.

How do the Paragraph 4(c) safe harbors work — and can you rely on them?

Paragraph 4(c) of the UDRP provides three safe harbors that, if established, demonstrate a registrant's rights or legitimate interests. Each is a complete answer to element (2) of the Policy. The safe harbors are: (a) use of the domain in connection with a bona fide offering of goods or services before any notice of the dispute; (b) the registrant or business being commonly known by the domain name; and (c) legitimate noncommercial or fair use without intent to mislead or tarnish.

Safe harbor (a) is the most frequently invoked and the most fact-sensitive. "Before any notice of the dispute" means before the complaint was filed — not before the UDRP commencement notice arrived. Panels look for concrete evidence of genuine commercial activity: live website content, invoices, business registrations, contracts, or correspondence tied to the domain. A parking page with pay-per-click links generally does not qualify, even where the registrant argues it was a placeholder for a future business.

Safe harbor (b) is powerful when you have it. If your legal name, your company's registered name, or your well-known nickname corresponds to the domain, document it fully: identity documents, registration certificates, business filings, and any public record that predates the dispute. Panels weigh how genuinely the registrant is "commonly known" by the name rather than how convenient the correspondence is.

Safe harbor (c) applies to fan sites, criticism sites, and genuinely noncommercial uses, provided the domain is not being used to mislead consumers into thinking it is the mark owner's official site. Adding a disclaimer helps but does not by itself guarantee the harbor. The key question is whether the use was in good faith from the outset.

The trap: invoking a safe harbor without the evidence to back it. A bare assertion that you were making a bona fide offering fails. Assemble the documentary record before filing the response, not after.

Step 3: Build the legitimate-interest record — what evidence panels actually weigh

The response is not a brief argument. It is an evidence package. The documents you attach carry more weight than the prose you write. In our experience advising registrants across dozens of .com defenses, the cases that succeed share one characteristic: the evidence existed before the dispute, and it tells a coherent story of why the registrant held this name.

The record to assemble — before you draft a word of argument — includes the following, where applicable:

• Screenshots of the domain's website as it existed throughout the registration period, with timestamps and archive.org captures where available.
• Business registration documents, trading names, DBA filings, or LLC articles that tie the registrant's identity to the domain name.
• Invoices, contracts, or correspondence in which the registrant used the domain as a business address or storefront.
• Evidence of the registration date and any prior WHOIS history showing continuous registration.
• Trademark search results at the date of registration, demonstrating whether the complainant's mark existed and was known at that time.
• Communications from the complainant before the complaint was filed — especially any demand letters or purchase offers, which can support an RDNH argument.

Panels assess this evidence holistically. A gap — say, no evidence of live use between year two and year five — invites an inference that the domain was parked or held passively. Where the domain is a common dictionary word or a generic phrase, that gap matters less. Where the domain is a coined mark distinctive to the complainant, it matters more.

The trap: treating the response as a legal argument when the panel is actually looking for facts. Polish the evidence first; the argument should flow from what the record shows.

To weigh UDRP against a court action for your case, email info@cognomenlaw.com.

When is a claim of Reverse Domain Name Hijacking realistic?

Reverse Domain Name Hijacking — known in the industry as RDNH — is a finding that the complaint was brought in bad faith to deprive a legitimate registrant of a domain they lawfully hold. It carries no monetary penalty, but it is a reputational mark against the complainant and their counsel, and it is noted in the public record of the case.

Panels award RDNH findings in a narrow set of circumstances. The most common patterns, based on the consensus view that has emerged across published decisions, are: the complainant knew or should have known that the registration predated any trademark rights; the complaint relied on a newly obtained trademark registration as a retroactive hook; the complainant had already offered to buy the domain at a market price, signaling they knew it was a legitimate asset; or the complainant failed to conduct basic due diligence on the registration history before filing.

RDNH is not a consolation prize. We regularly advise registrants to seek it only where the record clearly supports it. A weak RDNH argument can undermine an otherwise solid defense by suggesting that the respondent is pursuing grievance rather than presenting facts. The better approach is to win on the merits first and then invite the panel to consider RDNH if the complaint's defects warrant it.

In a recent matter involving a .com domain in the generic-word category (spring 2025), we secured both a denial of the complaint and an RDNH finding after demonstrating that the complainant's trademark registration postdated our client's domain registration by several years and that the complainant had made a five-figure purchase offer before filing — a classic indicator of bad faith in the complaint itself.

Step 4: Draft the response — structure, word limits, and what to include

A UDRP response under WIPO's rules has a word limit — currently set at a level comparable to the complaint — and must conform to the provider's formal requirements: contact information, the domain and case number, a statement of the substantive position, and an annexure of evidence. The Forum and CAC have their own formatting rules; check the current procedural guidelines from whichever provider is handling the case.

Structure the argument in the same order as Paragraph 4(a). Even where you concede element (1) — similarity is rarely worth contesting unless the trademark itself is weak or descriptive — say so briefly and move on. Spend the response on element (2) and element (3), where the facts are live and the outcome is genuinely uncertain.

Address each allegation in the complaint directly. Panels notice when a respondent ignores a specific allegation; silence reads as concession. Where the complainant overstates a fact — for example, claiming the domain was used to divert its customers when there is no documented evidence of actual confusion — challenge the evidence specifically rather than in general terms.

If you want a three-member panel rather than the single panelist the complainant chose, you must request it in the response and pay the additional panel fee — or, more accurately, you will pay a share of the three-member fee differential. Under WIPO's current schedule, a three-member panel for a single domain costs USD 4,000, versus USD 1,500 for a single-member panel; the parties typically split the difference. A three-member panel is worth considering where the case involves a genuinely contested factual record or where the complainant is a well-resourced brand owner likely to pursue an aggressive filing.

The trap: spending the entire word budget on the confusing-similarity element that you cannot win anyway, leaving the legitimate-interest and bad-faith sections thin. Allocate your argument where the outcome is actually decided.

Step 5: File before the deadline — and keep proof

File through the provider's online system. Email alone is not a sufficient response in most UDRP procedures, and a response submitted by email to the wrong address may not be accepted. Print or download the provider's acknowledgment of receipt immediately. Keep the timestamp. If a technical error occurs during submission — system outages happen — you need a contemporaneous record that you attempted to file on time.

In a .com dispute handled at WIPO in autumn 2024, a registrant we later advised had attempted to file a response through the WIPO portal, encountered a timeout error near the deadline, and had no screenshot of the attempt. The case proceeded as a default. Technical failure is not grounds for reinstatement unless documented. The lesson: do not wait until the final hours. File with at least 48 hours to spare, and if you must file close to the deadline, capture every screen.

After filing, WIPO will confirm receipt and proceed to panel appointment. At that point the record closes unless the panel issues a procedural order requesting further submissions — a rare step. There is no appeal within the UDRP, though a party dissatisfied with a final decision may seek relief through the courts of the jurisdiction designated in the registration agreement. That is a different, slower, and more expensive route, and it falls outside the UDRP itself.

How does WIPO compare with filing in a national court for a .com dispute?

The right route depends on what you want and what you are up against. A UDRP response at WIPO or the Forum is faster and cheaper than court litigation for almost every .com dispute. A standard case resolves in roughly two months; the filing fees are published and fixed; and the only remedies in play are transfer or cancellation — no damages, no injunction, no costs order against you.

A national court — typically in the US, where the registrar is often based and anticybersquatting legislation applies — can award monetary damages and gives you full procedural rights including discovery. But that speed advantage disappears, the costs are substantially higher, and the timeline extends from months to potentially years. Courts also lack the domain-industry fluency of specialist UDRP panels.

Where does court action make sense for a .com registrant? Primarily where you have already lost a UDRP decision and believe the panel committed a serious error — for example, misapplying the bad-faith conjunctive test or ignoring dispositive evidence. The registrar's registration agreement typically designates a mutual jurisdiction where you may seek a court review of a UDRP outcome. Act promptly; the registrar will implement the transfer order in due course after the decision, and a court action must be filed before implementation to have practical effect.

For non-.com zones, the analysis shifts. National dispute procedures in other zones — including the .au auDRP — operate under different rules, different timelines, and different eligibility requirements. What works for a .com defense does not automatically translate.

Related at COGNOMEN

• UDRP respondent defense and RDNH services — how COGNOMEN builds the legitimate-interest record and files the response
• Seek an RDNH finding — when the complaint itself is abusive and a public finding is worth pursuing
• National dispute procedure guide for .au — responding under the auDRP and how it differs from the UDRP