How to bring a court action when UDRP cannot reach a .us domain

How to bring a court action when UDRP cannot reach a .us domain. UDRP and ccTLD domain recovery and defense across .us. Email the firm to assess your case.

A brand owner confirms its .us domain is registered by someone who has no connection to the brand, is pointing the address at a parked page or a competing site, and refuses to transfer it voluntarily. The natural instinct is to file a UDRP complaint. For .us, that instinct needs a second look.

The .us country-code zone operates under its own dispute procedure – the usDRP, administered through the National Arbitration Forum – rather than the standard UDRP, and its scope is narrower than many brand owners expect. When the usDRP cannot reach the conduct in question, or when the evidence points toward account compromise and theft rather than classic cybersquatting, a US anticybersquatting court action is often the only route that can compel transfer, address a bad actor who defaults, and – uniquely – pursue monetary relief. Filing fees and arbitration costs are a fraction of court costs; the decision to litigate must rest on the specific facts, the strength of the trademark record, and the realistic value of the domain.

This page sets out the full path: when the usDRP applies and where it falls short, how to pursue a court action for .us cybersquatting, what evidence decides the outcome, and how costs are structured.

What is the usDRP and why does it leave gaps for .us domains?

The usDRP is the arbitration procedure governing .us disputes, modeled closely on the UDRP but maintained by the .us Registry under its own Nexus Requirements. A complainant must prove the same three core elements: confusing similarity to a mark, no legitimate interest in the registrant, and bad-faith registration and use. The procedure has a 20-day response window and follows a broadly comparable timeline to UDRP proceedings at WIPO or the Forum.

Where the gap appears is in the Nexus Requirement itself. Holders of .us domains must have a genuine US presence – a US citizen, a US permanent resident, an organization incorporated under US law, or an entity with a bona fide US presence. That eligibility filter was designed to keep .us meaningful as a national zone. In practice it also shapes who can be a registrant legitimately. Panels applying the usDRP must work within those constraints.

More practically, the usDRP – like the UDRP – offers only two remedies: transfer or cancellation. No monetary damages, no costs award, no contempt mechanism. When a registrant defaults, a transfer order issues and the registrar implements it. That works cleanly in straightforward cybersquatting. It breaks down when the registrant is a bad actor who transferred the domain to a second holder before the proceeding concluded, when the domain was acquired through account compromise rather than through a fresh registration, or when multiple registrations across gTLD and .us zones need coordinated action.

We regularly advise brand owners who have discovered .us registrations that fall outside the narrow corridor the usDRP covers well. Those situations – account theft, multi-zone squatting, and cases where damages matter – are where US anticybersquatting litigation earns its keep.

If you are assessing whether the usDRP or a court action better fits your .us domain situation, contact us at info@cognomenlaw.com for an initial review of the three elements and the forum choice.

When does a court action outperform usDRP arbitration for a .us domain?

Court action is not automatically better. It is slower, more expensive, and procedurally demanding. But there are four categories of .us domain situations where litigation is the sharper instrument.

First: the case involves domain theft. When a domain is transferred out of the legitimate owner's registrar account without authorization – through phishing, credential compromise, or social engineering at the registrar – the dispute is not about trademark rights at all. It is about unauthorized transfer. The usDRP has no standing provision for that scenario; a court can order rescission of the transfer and compel return of the domain as a form of property relief.

Second: the complainant needs damages. A parking page running pay-per-click ads on brand traffic generates measurable revenue at the mark owner's expense. US anticybersquatting litigation – pursued under the applicable anticybersquatting legislation in the relevant jurisdiction – allows a court to award actual damages or statutory damages per domain. Neither the UDRP nor the usDRP touches money.

Third: the registrant is elusive or the record is disputed. An arbitration panel cannot compel discovery, depose witnesses, or issue a subpoena to a registrar for account records. A federal court can. Where the identity of the registrant is obscured by privacy services or the bad-faith evidence requires document production, litigation unlocks procedural tools arbitration cannot provide.

Fourth: multi-zone coordination. A bad actor often registers a brand name across both .com and .us simultaneously. A single court action can sweep both registrations together, obtaining a consolidated order against the same respondent rather than running parallel arbitration proceedings that may produce inconsistent outcomes.

In a recent matter (a .us and .com dual-registration, spring 2025), we secured a court-ordered transfer of both domains for a US consumer-brand owner whose registrant had defaulted on service and whose conduct showed a clear pattern of prior abusive registrations – evidence that a usDRP panel would have weighed but that the court, applying the relevant anticybersquatting legislation, could resolve through a default judgment with a concrete order to the registrar.

What are the legal elements for US anticybersquatting court action?

US anticybersquatting litigation targets registration, trafficking, or use of a domain name that is identical or confusingly similar to a distinctive or famous mark, where the registrant has a bad-faith intent to profit. Courts assess a non-exhaustive list of statutory factors to determine bad-faith intent, and these align substantially – though not identically – with the Paragraph 4(b) bad-faith indicators familiar from UDRP proceedings.

The factors courts weigh include: the registrant's trademark rights (or absence of them) in the domain string; whether the registrant has used the name in connection with a bona fide offering; whether the registrant provided false contact information at registration; whether the registrant offered to sell the domain to the mark owner for a sum exceeding out-of-pocket costs; and whether the registrant has a pattern of registering others' marks as domains. The overlap with UDRP bad-faith analysis is deliberate; the statute was enacted to fill precisely the gaps that arbitration cannot reach, including the court's power to award damages and to bind a recalcitrant registrar by court order.

What court action adds that the usDRP does not: personal jurisdiction over the registrant (or, in rem jurisdiction over the domain itself when the registrant is unreachable), injunctive relief during the litigation, and the ability to name the registrar or registry as a respondent where warranted. In rem proceedings – naming the domain name itself as the defendant – are particularly useful when the registrant has provided false WHOIS data or cannot be personally served in the US.

We have defended registrants on the receiving end of these proceedings as well. The same statutory factors that establish bad faith also provide affirmative defenses for legitimate registrants – good-faith prior use, fair-use commentary, genuine business operation under the name. When the evidence supports those defenses, we build that record with equal rigor.

To weigh usDRP against a court action for your .us domain situation, email info@cognomenlaw.com for a structured assessment of the elements and the likely timeline.

How does registrar-lock and account-compromise mechanics affect the litigation path?

When a .us domain is hijacked through account compromise rather than registered abusively from scratch, the procedural path is different from a standard cybersquatting filing. Speed matters above all else.

The first step is an immediate registrar escalation to freeze the domain in its current state. Most accredited registrars for .us maintain a channel for abuse reports and registrar-lock requests. A properly documented account-compromise claim – with authentication logs, transfer timestamps, and identity records – can trigger a voluntary hold while the legal process catches up. That hold does not return the domain, but it prevents a second unauthorized outbound transfer to a third party who might later claim bona fide purchaser status.

If the registrar does not act voluntarily, a temporary restraining order from a US federal court directed at the registrar is the standard next move. Courts addressing in rem cybersquatting proceedings have jurisdiction over domains managed through US-based registrars regardless of where the registrant is located. The TRO application is supported by the evidence of compromise: server-side transfer logs, account access timestamps, discrepancy between the registrant's RDDS/WHOIS record before and after the transfer, and any communications from the hijacker attempting to monetize the domain.

In a recent matter involving a .us account compromise (summer 2025), we worked alongside the client's internal IT team to produce a forensic timeline showing the unauthorized access event and the registrar transfer within 48 hours. That documentation supported a TRO application granted the same week, which froze the domain while the underlying recovery action proceeded.

The key evidence categories for an account-compromise recovery action are:

• Registrar account access logs showing the date, time, and IP address of the unauthorized login
• Transfer authorization records – specifically, who approved the push and what credentials were used
• RDDS/WHOIS history showing the pre- and post-transfer registrant record
• Communications from the hijacker (sale offers, ransom demands, redirect evidence)
• Proof of the legitimate owner's prior, continuous registration history

Without that documentation assembled before the court filing, the TRO application rests on assertions rather than evidence. Our practice in these matters is to spend the first hours of engagement building the forensic record, then moving on the registrar and, if necessary, the court in sequence.

What evidence decides the outcome in a .us court action?

Whether the theory is cybersquatting or account-compromise recovery, the outcome turns on documentary evidence, not argument. Courts applying the relevant anticybersquatting legislation conduct a fact-intensive review of the registrant's intent at the time of registration and at the time of use.

For a complainant seeking transfer or damages, the strongest evidence package combines:

• Trademark registration records showing priority over the domain registration date, including evidence of continuous use in commerce
• WHOIS/RDDS history and archived content of the domain at the disputed URL (screenshots with date metadata)
• Evidence of monetization: pay-per-click revenue, affiliate redirect links, counterfeit goods sales, or competing services
• Any communications from the registrant offering to sell the domain, particularly where the offered price far exceeds registration costs
• A pattern of prior registrations by the same registrant targeting third-party marks – registrar records, UDRP or usDRP case history if any exists in the public record

For a respondent defending against an aggressive complainant, the mirror record controls: evidence of a legitimate business operating under the name before any dispute notice, good-faith registration history, and the absence of any intent to target the complainant's mark. Where the complainant has overreached – seeking to take a domain the respondent registered legitimately – the court equivalent of a Reverse Domain Name Hijacking finding is a fee-shifting award against the complainant. RDNH has no monetary teeth in arbitration; court-based fee shifting does.

We assess both sides of that ledger. Which evidence set is stronger in a particular matter determines whether to push forward aggressively, to negotiate a settlement informed by litigation risk, or – for a respondent – to defend and seek costs.

How does the .us court route compare with the usDRP and gTLD arbitration?

The right route depends on the specific fact pattern, the zone, and what the client needs as an outcome. Here is how those choices align in practice.

If the domain is a .us registration and the conduct is straightforward cybersquatting – a third party registered it after the mark was established, is using it for commercial gain, and has no plausible legitimate interest – the usDRP is the faster and lower-cost route. The arbitration runs in roughly the same two-month window as WIPO proceedings, and the filing fee at the Forum is modest compared with full litigation costs. Transfer, not money, is the goal, and the usDRP delivers it cleanly.

If the domain is a .com and the .us – the same bad actor, two registrations – a UDRP complaint covering the .com and a usDRP covering the .us can be run in parallel, though they are separate filings before separate panels. Alternatively, a single US court action can sweep both, with jurisdiction over the US-based registrar for both zones. In our practice we weigh the relative speed of parallel arbitration against the efficiency of a single consolidated court filing; the analysis turns on how urgently the client needs resolution and whether damages are in scope.

If the domain was stolen rather than registered abusively, neither the usDRP nor the UDRP is the right tool. Court action – with in rem jurisdiction and TRO relief – is the only mechanism that can address an unauthorized transfer as a property dispute rather than a trademark dispute.

If the registrant is located outside the US and has used false WHOIS data, in rem jurisdiction over the domain itself allows a court action to proceed without locating or serving the registrant personally. The order runs against the domain as an asset, and the registrar – operating under US law – implements the transfer. That procedural path is not available in arbitration.

What are the realistic costs and timelines for .us court action?

Cost transparency matters in this market, where practitioners often obscure fees until engagement. Here is the realistic structure.

usDRP arbitration at the Forum begins at a filing fee of approximately USD 1,300 for one to two domains, single-member panel. Legal fees for a straightforward usDRP complaint are typically in the USD 3,000–7,000 range, separate from the forum fee, depending on the complexity of the evidence and whether a response is filed. The total outlay for a clean, defended matter rarely exceeds five figures all in.

Court action is a different order of magnitude. Filing a cybersquatting complaint in US federal court, pursuing a TRO, and carrying the case through default judgment typically requires legal fees that are substantially higher and billed on an hourly basis. For a straightforward default-judgment case – where the registrant never appears – the process can be completed in a matter of months, but the legal investment is meaningful. For a contested case with discovery, depositions, and motion practice, timelines extend to a year or more and costs rise accordingly.

The practical consequence: court action makes economic sense when the domain has significant commercial value, when damages are in scope, when account compromise requires immediate injunctive relief, or when the multi-zone sweep of a single court order justifies the higher cost over parallel arbitrations. For a single .us domain where the cybersquatting is clear and the registrant is identifiable, usDRP arbitration is almost always the right starting point.

We present both cost structures transparently at the outset of any engagement. The decision belongs to the client; our role is to lay out the actual numbers and the realistic probability of each outcome given the specific facts.

What procedural steps are required to bring a court action for a .us domain?

The procedural path for US anticybersquatting litigation targeting a .us domain follows a defined sequence, though the timeline varies with the urgency of relief sought.

Step one: evidence assembly. Before any filing, the full evidentiary record must be compiled – trademark registration certificates and priority dates, RDDS/WHOIS history, domain content archives, and any registrant communications. This step takes days, not weeks, when the client has maintained organized records. It can take longer when historical WHOIS or archived content must be retrieved from third-party sources.

Step two: forum assessment and jurisdiction analysis. US anticybersquatting court actions are federal proceedings. The applicable anticybersquatting legislation provides for both in personam jurisdiction (where the registrant can be served in the US) and in rem jurisdiction (where the domain's US-based registrar provides an anchor). Identifying which theory applies and which federal district is appropriate is a threshold determination that shapes the entire proceeding.

Step three: TRO or preliminary injunction (if needed). Where the domain is at risk of further transfer, a TRO application to freeze it precedes or accompanies the main complaint filing. The TRO is ex parte – the registrant may not have notice – and is supported by the evidence assembled in step one. This is the step where the forensic record is most critical.

Step four: complaint and service. The cybersquatting complaint is filed. In an in personam proceeding the registrant must be personally served; in an in rem proceeding, service rules differ and are governed by the applicable statute. A defaulting registrant who does not appear – common in clear cybersquatting cases – proceeds to a default judgment motion.

Step five: judgment and registrar implementation. A default or contested judgment ordering transfer is served on the registrar, who implements it. US-based registrars operating under ICANN accreditation are required to comply with a valid court order. International registrars with US operations are similarly reachable. Registrars outside the US present additional enforcement questions that must be assessed with local litigation counsel in the relevant jurisdiction.

The total timeline from engagement to a transfer order in a default case is typically several months. Contested cases run longer. We set realistic expectations at the outset and maintain clear communication at each stage.

Related at COGNOMEN

• Court action and domain theft recovery – full practice overview, gTLD and ccTLD
• When US anticybersquatting litigation outperforms UDRP for .com domains
• New gTLD launch protection strategies for multi-zone brand owners