How to bring a court action when UDRP cannot reach a .online domain

How to bring a court action when UDRP cannot reach a .online domain. UDRP and ccTLD domain recovery and defense across .online. Email the firm to assess your c…

A .online domain bearing your brand is diverting customers, hosting fraudulent invoices, or sitting parked behind a five-figure ransom demand. You have looked at the UDRP. It covers .online – Radix, the registry, has adopted the UDRP through ICANN accreditation, so transfer via arbitration is normally available. But some situations fall outside what an arbitral panel can do: the registrant is anonymous and uncooperative, the domain was seized through account compromise, a prior UDRP decision went unenforced, or you need monetary relief that an arbitral panel simply cannot award. When those gaps appear, a court action becomes the operative route.

To bring a court action when UDRP cannot reach a .online domain, the complainant identifies the gap that arbitration cannot fill – damages, injunctive relief, or a case of domain theft where a transfer-reversal proceeding has stalled – then files in a competent national court under the applicable anticybersquatting or trademark statute. The UDRP remedy is transfer or cancellation only; no monetary damages and no injunction are available through the panel. Court action is the path that fills that gap, typically in coordination with local litigation counsel in the relevant jurisdiction.

This page covers when a court route is warranted for a .online domain, how to build the evidence record, how the registrar-lock and transfer-reversal mechanics interact with litigation, and how fees split as the case escalates.

Why .online sits within UDRP reach – and where that reach ends

.online is a new gTLD administered by Radix under ICANN accreditation, which means all three UDRP elements of Paragraph 4(a) apply: confusing similarity to a trademark, no legitimate interest, and registration and use in bad faith. A standard WIPO single-member panel case on a .online domain costs USD 1,500 in filing fees and typically resolves within about two months. That covers the large majority of .online cybersquatting disputes cleanly.

But the UDRP's boundary is structural, not accidental. A panel cannot award damages. It cannot enjoin the registrant from harassing your customers or continuing a fraud scheme on a second domain. It cannot order a registrar to reverse a transfer that happened because someone hijacked the registrant account. And it cannot reach a registrant who files a lawsuit to delay the UDRP under a "lock" that pauses arbitration while litigation is pending. Each of those gaps is real, and each creates a situation where a court filing is not a fallback – it is the primary instrument.

We regularly advise brand owners who discover the UDRP's ceiling only after filing. The honest answer at that point is to assess whether the missing remedy is worth the cost difference and, if it is, to escalate immediately rather than wait for an arbitral outcome that cannot deliver what you actually need.

For an assessment of whether your .online domain dispute exceeds what the UDRP can deliver, contact info@cognomenlaw.com.

When does a court action beat arbitration for a .online domain?

The decision to file in court rather than – or alongside – a UDRP complaint turns on four recurring fact patterns that we see in practice.

Pattern one: you need monetary relief. The registrant has operated a fraudulent site that generated real harm – misdirected payments, phishing damage, or a counterfeiting operation. A UDRP panel transfers the name; only a court can attach a damages award. Where the harm is quantifiable and the registrant is identifiable, the cost of litigation is weighed against a recovery that arbitration simply cannot produce.

Pattern two: the domain was transferred without authorization – account compromise or theft. A hijacker gains access to the registrant's account, changes registrar or ownership, and the domain moves. The UDRP governs disputes between a trademark holder and a cybersquatter; it was not designed to unwind a fraudulent registrar transfer. Court orders and registrar escalation procedures, reinforced by an injunction, are the correct mechanism. The UDRP may run in parallel to obtain a transfer order, but a court is usually required to freeze the name during the process.

Pattern three: the registrant has filed a lawsuit to stall a UDRP. Under the UDRP Rules, a registrar that receives notice of a court filing may pause the arbitration or the implementation of a decision. A sophisticated bad-faith registrant uses this tactically. The answer is to be the one who filed first – or to respond to the registrant's lawsuit aggressively rather than waiting for arbitration to resume.

Pattern four: a prior UDRP decision went unenforced. A panel ordered transfer; the registrar did not implement it or the registrant moved the domain before implementation. Court enforcement of the decision is then the route, and a jurisdiction that recognizes the UDRP outcome as persuasive authority shortens that path materially. We address this route in our companion page on enforcing a prior UDRP decision through forum selection.

How does the registrar-lock mechanism interact with litigation?

A registrar lock – sometimes called a "registrar hold" or a domain-level lock status – prevents unauthorized transfers or deletions. It is the first operational step in any domain recovery, whether via arbitration or court. When a UDRP complaint is filed with WIPO or the Forum, the registrar is notified and typically places the domain in a locked status for the duration of proceedings. That lock survives until the decision is implemented or the case is withdrawn.

In a court proceeding, obtaining a temporary restraining order or preliminary injunction – directing the registrar to lock the domain – is the procedural equivalent. It must be sought early, sometimes ex parte (without notice to the registrant), before a sophisticated registrant can move the domain to a different registrar or privacy service in a jurisdiction that does not cooperate with court orders. Speed matters here more than in arbitration, where the UDRP lock is quasi-automatic.

Transfer-reversal mechanics work differently depending on whether the unauthorized transfer crossed registrar boundaries. An intra-registrar transfer – same registrar, different account – may be reversible through the registrar's own abuse escalation, particularly where the original account holder can demonstrate the compromise with authentication logs, email headers, and WHOIS/RDDS change records. A cross-registrar transfer is harder: the gaining registrar received the domain in apparent good-faith, and reversal requires either a court order directed at that registrar or, where applicable, ICANN's Inter-Registrar Transfer Policy escalation path.

In our practice, we have seen cases where a brand owner sent a cease-and-desist, triggered a panic transfer, and lost the leverage of the original registrar relationship. The lesson is to lock before you communicate – or to understand that any external notice may accelerate an evasive move.

What evidence decides the outcome in a .online court action?

The evidence kit for a court action targeting a .online domain overlaps significantly with a UDRP complaint but goes further in two directions: it must support a higher evidentiary burden in most court systems, and it must address the specific remedy sought – damages, injunction, or transfer.

For the trademark foundation, the record is the same as in a UDRP: registered trademark certificates, evidence of common-law use, priority dates, and the connection between the brand and the disputed domain. The confusing similarity analysis is the starting point in either forum.

For bad faith, the court record benefits from being broader. Arbitral panels work from the UDRP's Paragraph 4(b) non-exhaustive list. A court applies the relevant national trademark or anticybersquatting statute, which may reach conduct that a panel would find marginal – for example, registrations in multiple names in a pattern, or conduct that is part of a broader fraud scheme against the brand owner. Screenshots, WHOIS/RDDS history, traffic analytics, phishing reports, consumer complaints, and communications demanding payment are all relevant.

For a theft or account-compromise case, the evidence set expands further:

• Authentication and access logs from the original registrar showing the unauthorized login
• Email chain showing the phishing or social-engineering vector used to compromise the account
• WHOIS/RDDS change history and timestamps showing the transfer sequence
• Communications between the current holder and any buyer in an attempted secondary sale
• Registrar abuse-team correspondence showing the escalation history
• IP geolocation data, device fingerprints, or other forensic indicators where available

The evidentiary record must be assembled before filing. A court will set a hearing on the preliminary injunction application quickly, and incomplete evidence at that stage can be determinative. We have defended registrants in cases where an under-evidenced complainant lost the injunction and then had no practical path to recovery for months.

To weigh UDRP against a court action for your .online domain, email info@cognomenlaw.com.

Which courts have jurisdiction over a .online domain dispute?

Jurisdiction over a .online domain dispute is determined by the law of the forum chosen, not by the registry. A court filing is not governed by ICANN accreditation; it is governed by the plaintiff's choice of where to sue and whether that court can exercise personal or in rem jurisdiction over the domain or the registrant.

The dominant approach in jurisdictions with developed anticybersquatting law is in rem jurisdiction over the domain itself. Where the domain's registrar or registry is located in that jurisdiction – or where the domain can be deemed to be located there under applicable law – a court may proceed even without personal jurisdiction over the registrant. This is particularly significant when the registrant's identity is concealed behind a privacy service or operates from a jurisdiction where enforcement is impractical.

A competent jurisdiction analysis for a .online court action typically asks: Where is the registrar located or incorporated? Where did the harm occur? Where does the trademark owner hold registered rights? Where is any known registrant entity organized? The answers shape both the filing venue and the speed to a preliminary injunction. We engage local litigation counsel in the relevant jurisdiction for all court filings; cross-border coordination between trademark counsel and local litigators is standard in our practice.

One practical point: filing in a jurisdiction where the registrar routinely cooperates with court orders matters materially. A technically valid order directed at a non-cooperating registrar produces no domain transfer. Counsel's familiarity with the specific registrar's compliance posture is part of the venue analysis, not merely an operational detail.

A decision matrix: when to file in court, when to file UDRP, and when to do both

The right route for a .online domain dispute is not always obvious before the evidence is assembled. Here is how we work through the choice in practice.

If the domain is a straightforward cybersquatting case – the registrant is identifiable, the bad-faith evidence is clear, and transfer is the only goal – the UDRP at WIPO or the Forum is faster and less expensive. The filing fee is USD 1,500 for a single-member panel at WIPO, and a decision typically arrives within about two months. Court adds time and cost without a corresponding benefit where damages are not in play.

If the domain involves a theft or account compromise and the name has already moved to a different registrar, the UDRP and a court injunction should run in parallel. The UDRP builds the transfer order; the injunction prevents a further transfer during the arbitration window. Running both simultaneously is more expensive, but the alternative – watching the domain disappear into another jurisdiction while arbitration proceeds – is worse.

If the registrant has caused quantifiable financial harm – a phishing campaign, a fraudulent invoice operation, a counterfeit goods site – and the registrant is identifiable and has assets worth pursuing, a court action is the only route to a damages award. The UDRP runs alongside to obtain the name transfer, but the damages claim belongs in court. We coordinate both tracks and keep the evidentiary records synchronized.

If a prior UDRP decision was issued but never implemented, court enforcement of that decision is the next step rather than a fresh arbitration. The prior panel decision is persuasive authority and can anchor a motion for summary judgment in the right jurisdiction. That route is covered in detail in our page on enforcing a prior UDRP decision through forum selection.

And if the registrant is a foreign state-owned entity or a sovereign-adjacent body, neither the UDRP nor a domestic court action may be straightforwardly available – that situation requires a jurisdiction-specific analysis that goes beyond the standard routes described here.

How do fees split as the case escalates?

Fee transparency is a firm commitment at COGNOMEN. The cost picture for a court-route .online dispute differs structurally from a UDRP proceeding, and clients deserve a clear breakdown before deciding how to proceed.

A UDRP complaint at WIPO for a single .online domain carries a filing fee of USD 1,500 for a single-member panel, with legal fees in the range commonly seen in the market of approximately USD 3,000–7,000 for a straightforward case. Those are the ceiling figures for the arbitration track.

A court action adds: local litigation counsel fees in the relevant jurisdiction (hourly, and jurisdiction-dependent – describe qualitatively as substantially higher than arbitration), court filing fees that vary by forum, and process-server or service costs if the registrant is overseas. If an ex parte application for a temporary restraining order is required – and it frequently is in theft cases – that hearing preparation is a distinct cost item. Translation and authentication of documents for foreign-court submissions adds further.

Where both tracks run in parallel, the budgets compound. The UDRP costs are fixed at the forum fee plus legal. The court costs are variable and depend on contested hearings, registrar compliance, and whether the registrant mounts a defense. In our experience, clients who enter the parallel-track process with a clear budget ceiling and a clear statement of their primary goal – transfer only, or transfer plus damages – make better decisions about whether to settle mid-stream or press to judgment.

What does the escalation path actually look like in practice? In a matter involving a .online domain used in a phishing scheme (spring 2025), we assessed the three UDRP elements, identified that the financial harm exceeded what a panel could remedy, coordinated a parallel court injunction with local litigation counsel in the registrar's home jurisdiction, and secured both a registrar lock and a UDRP filing within the same week. The parallel track cost materially more than arbitration alone – but the client recovered the name and preserved a damages claim that arbitration would have extinguished.

Respondent perspective: when a court action targets you

Not every .online court action targets a bad-faith registrant. Reverse domain name hijacking – the abuse of dispute procedures to deprive a legitimate holder of a name they registered in good faith – occurs in court proceedings as well as in UDRP filings. A domain investor, a small business with a legitimate acronym, or a registrant who simply registered a common word as a .online domain is a potential target of an aggressive complainant who prefers the procedural leverage of a court filing to the neutral three-element test of the UDRP.

Respondent defense in a court action requires a different toolkit than a UDRP response. The legitimate-interest record under Paragraph 4(c) of the UDRP is relevant background, but a court will apply the national statute, which may require its own elements of proof. The registration history, the business use before any notice of the dispute, the absence of any intent to profit from a trademark owner's goodwill – all of these must be documented in a form admissible in the relevant court, not merely as exhibits to an online response.

Where a court filing is combined with a UDRP complaint, the UDRP may be suspended while the court proceeding is pending. That suspension can be used tactically by either side. A legitimate registrant who is being targeted may find that the court route – where discovery is available and where the complainant must meet a higher evidentiary standard – actually produces a better outcome than the UDRP would have. We have pursued RDNH findings and respondent victories in parallel tracks, and the strategy depends entirely on the facts and jurisdiction.

Our full respondent-side and court-action service portfolio is described at COGNOMEN's court recovery and domain theft services.

Related at COGNOMEN

• Court recovery and domain theft – the full service overview for all zones
• Enforcing a prior UDRP decision through forum selection when a registrar does not comply
• How to verify chain of title before a domain acquisition or dispute filing