How to defend a .au domain against a UDRP complaint

How to defend a .au domain against a UDRP complaint. UDRP and ccTLD domain recovery and defense across .au. Email the firm to assess your case.

By Anton Grant, Respondent defense & RDNH · 2025-06-23

A complaint lands in your inbox. Someone is filing under the auDRP – Australia's adaptation of the UDRP – and wants your .au domain transferred to them. You have 20 days to respond once the case commences. What you do in those days determines whether you keep the name or lose it without a hearing.

To defend a .au domain against a UDRP complaint, a registrant must answer all three elements of Paragraph 4(a) of the auDRP: the domain is not confusingly similar to a valid trademark, or the registrant holds rights or legitimate interests in the name, or the domain was not registered and is not being used in bad faith. Defeating any single element defeats the complaint. The auDRP tracks the UDRP closely but treats the bad-faith limb in ways that require careful handling at the Australian level.

This page covers the governing rules, the safe harbors that protect registrants, the evidence that decides outcomes, the realistic prospect of a Reverse Domain Name Hijacking finding, and how to choose the right forum strategy for your .au dispute.

What governs .au domain disputes – and how does the auDRP differ from the UDRP?

The auDRP is Australia's adaptation of the UDRP, administered for .au domains under the rules of auDA – the .au Domain Administration – and handled by approved dispute resolution providers. The three-element test is structurally identical to the global UDRP: confusing similarity, no legitimate interest, and registration and use in bad faith. That said, nuances in how Australian panels have applied the bad-faith element mean that reasoning from a WIPO .com decision does not always carry over without adjustment.

A critical initial question is jurisdiction. The auDRP governs second-level registrations in the .au namespace – including .com.au, .net.au, .org.au, .asn.au, and .id.au. If your domain is a direct .au registration (the relatively recent second-level .au space), confirm with current registry rules whether it falls under the same provider and procedure; the governing rules should be verified with counsel. For any namespace where the auDRP applies, the remedies available to the complainant are transfer or cancellation only. No monetary award, no costs order, no injunction.

The UDRP Policy's Paragraph 4(b) bad-faith factors – registering to sell to the mark owner, disrupting a competitor, attracting users for commercial gain by confusion, or a pattern of abusive registrations – apply in the auDRP as non-exhaustive indicators. In our respondent work, we have seen Australian panels apply those factors with close attention to whether the registrant had actual or constructive knowledge of the complainant's trademark at the time of registration. That timing question is often the decisive battleground.

Which of the three elements is the strongest line of defense for your .au domain?

Experienced respondents focus their response where the facts are strongest, not where the complaint is loudest. Each element offers a distinct defensive position, and a well-built response will press all three while leading with the most defensible ground.

Element one: confusing similarity. This is the easiest element for a complainant to satisfy, and the hardest for a respondent to defeat outright. Generic or descriptive terms, geographic names, and surnames are the exceptions. If the complainant's mark is highly distinctive and the domain reproduces it exactly, challenge here is rarely the primary defense. But if the mark is a common English word, a geographic term, or a phrase with independent descriptive meaning – "sydneyhomes.com.au", say – the similarity argument weakens considerably. Raise it, but do not rely on it alone.

Element two: legitimate interest. This is usually the respondent's most productive ground. Paragraph 4(c) of the Policy sets out three safe harbors that, if demonstrated, establish legitimate interest: a bona fide offering of goods or services using the domain before notice of the dispute; being commonly known by the domain name; or making legitimate noncommercial or fair use without intent to divert consumers for commercial gain or to tarnish the mark. In practice, the most frequently successful defense is the first: the registrant was using or demonstrably preparing to use the domain for a genuine business purpose before receiving any complaint or cease-and-desist. Evidence of that preparation – business plans, correspondence, invoices, ABN registration, website development records – must be assembled and documented. A response that states a legitimate use without supporting it with contemporaneous records rarely succeeds.

Element three: bad faith. The auDRP, like the UDRP, requires the complainant to prove both that the domain was registered in bad faith and that it is being used in bad faith. The cumulative nature of that requirement is a genuine respondent advantage. A domain registered years before a complainant's mark was filed cannot, as a logical matter, have been registered with that mark in mind. Panels have consistently held that bad-faith registration cannot be inferred retroactively from circumstances that arose only after registration. Documenting the date of registration and the state of the complainant's trademark rights at that time is therefore foundational to every response we file in Australian proceedings.

If you have received a .au complaint, the 20-day window begins at commencement, not at service. For an assessment of whether your defense meets the three-element test, contact info@cognomenlaw.com.

How do you build a legitimate-interest record for a .au domain defense?

Building the legitimate-interest record is partly legal and partly factual. The legal work identifies which of the three Paragraph 4(c) safe harbors your fact pattern most naturally fits. The factual work assembles the contemporaneous evidence that panels require to make that finding.

The most common defensive scenario we handle is the registrant who used the domain in a genuine business context – and can prove it – but whose documentation is scattered across email threads, archived web pages, and accounting records. Reconstruction from those sources is possible, but the work must start immediately. An auDRP panel deciding a case on documentary evidence cannot be told that the records "exist somewhere"; they must be produced in a form the panel can evaluate within the response period.

Useful contemporaneous evidence includes: screenshots from web archive services showing the domain's historical use, dated invoices or contracts that identify the registrant by the domain name or business name, Australian Business Number registration records, social media history predating the dispute, and any correspondence with the complainant or its advisors. The registrant's subjective understanding of its registration is relevant but must be corroborated. "I registered it because it described my trade" is an assertion; an invoice from a domain reseller at the time of registration, accompanied by a business plan document of the same date, is evidence.

Where the registrant is a domain investor or secondary-market buyer, the analysis shifts. Paragraph 4(c)(i)'s bona fide offering of goods or services has been interpreted by panels – in UDRP proceedings and in the auDRP context – as requiring something more than passive holding with an intent to sell. If the domain was purchased for investment value in a mark-neutral term, that can be defensible; if it was purchased precisely because it matched a well-known mark, the complainant has a strong case for bad faith that is hard to rebut. We regularly advise registrants in the secondary market on whether the profile of their acquisition fits a credible legitimate-interest case before they invest further in a response.

When is a Reverse Domain Name Hijacking finding realistic in an auDRP proceeding?

A Reverse Domain Name Hijacking (RDNH) finding – the panel's declaration that the complaint was brought in bad faith to deprive a legitimate registrant – carries no monetary sanction under the UDRP or auDRP. The remedy is reputational and corrective: the finding is published, on the record, as a panel's conclusion that the complainant (or its counsel) filed an abusive complaint. For respondents who are domain investors or who hold portfolios, an RDNH finding is a meaningful outcome; it signals to the market, and to future complainants, that the registrant does not roll over.

What fact patterns support an RDNH finding? Panels have described several: the complainant knew the registrant had a plausible legitimate interest and filed anyway; the complainant's trademark postdates the domain registration by a substantial margin and the complaint omitted that fact; the complaint relied on fabricated or misleading evidence; or the primary motivation was clearly to obtain a domain the complainant could not or would not purchase at market price. We have pursued RDNH arguments in auDRP-adjacent proceedings where the complainant filed despite holding no trademark at the time of the domain's registration and despite the domain clearly predating any rights claimed.

The standard for an RDNH finding is, however, not automatic upon a respondent's win. A complainant can lose all three elements and still not have the complaint characterized as abusive. Panels require something beyond weak evidence: an element of bad faith in the very act of filing. If that element is present, pressing for RDNH is worthwhile, both for this proceeding and as a deterrent to future filings against your portfolio.

What is the auDRP process and timeline for a .au respondent?

The auDRP process follows the same structural stages as the UDRP: complaint filed and formally checked, case commenced, response period opens, panel appointed, decision issued, registrar implements. The respondent has 20 days from commencement to file a response. That is a tight window for assembling the evidence record described above, particularly if the domain is central to an active business.

Unlike some ccTLD procedures, there is no mandatory mediation stage in the auDRP. The default is a single-member panel. If the respondent believes a single panelist may not be well-suited to the specific facts – or if the complainant has requested a three-member panel – either party may request or require a three-member panel, with the cost consequences that flow from that choice. If the complainant requests a single panelist but the respondent prefers three members, the parties generally split the three-member fee, based on the same UDRP-derived approach to fee-splitting that governs other major panels.

After the panel is appointed, the process is essentially documentary. Unlike litigation, there is no oral hearing; no cross-examination of witnesses; and no discovery of the complainant's internal files. Everything turns on what is in the complaint, the response, and any annexes. Supplemental filings – additional submissions beyond the complaint and response – are generally not permitted unless the panel expressly invites them. That constraint cuts both ways: the respondent cannot wait to see what new arguments the complainant raises and then reply, but equally the complainant cannot introduce new evidence after seeing the strength of the response. The response must be comprehensive the first time.

A standard auDRP proceeding is typically resolved within approximately two months of filing, absent extensions or procedural complications. Default – where the registrant files nothing – is not the same as concession. Panels still assess the three elements on the complaint's merits, but in practice an unanswered complaint succeeds at a substantially higher rate. Filing a well-reasoned response, even in a difficult case, changes the probability distribution materially.

How does .au compare to UDRP proceedings at WIPO or the Forum?

The choice of forum is made by the complainant, not the respondent. However, understanding the differences helps a registrant calibrate the response and plan the defensive strategy correctly.

For a .au domain, the auDRP applies and the complainant files with an approved Australian provider – not WIPO or the Forum directly. That is a key distinction from .com, .net, .org, and other gTLDs where WIPO and the Forum together account for roughly 97% of proceedings and where the large body of WIPO jurisprudence provides relatively predictable panel reasoning. In the auDRP context, the .au provider's panel body draws on that same UDRP jurisprudential consensus – including the well-known WIPO Overview – but the local application can differ on the margins, and there is less published .au decision volume to draw on for precedent on unusual fact patterns.

Consider a cross-zone scenario: a brand owner holds a .com through a WIPO proceeding and files a parallel auDRP complaint over the corresponding .com.au. The WIPO decision is not binding on the auDRP panel. Panels in both systems are aware of related proceedings and may consider them as persuasive authority, but an auDRP panel will assess the three elements independently against the evidence before it. A respondent who lost the .com cannot assume the .au is also lost; the timing of the .au registration, the registrant's Australian connections, and the local trademark record may produce a different outcome.

If a brand owner holds only international trademark registrations and no Australian mark at the relevant date, that gap matters to element one. The complainant must demonstrate trademark rights – and panels have been rigorous about the sufficiency and timing of those rights in the auDRP context. A filing that relies on a single Madrid Protocol designation first claimed years after the domain's registration faces a more difficult path than a WIPO complaint might, where the panel body's scale and diversity of fact patterns may have softened that edge.

In our practice we regularly advise registrants who face both a .com and a ccTLD complaint simultaneously. The .com defense is argued at WIPO or the Forum; the .au defense runs in parallel under the auDRP. Coordinating those two responses – particularly where the core legitimate-interest argument is the same – requires care about what each record says, because inconsistency between a WIPO response and an auDRP response can be used against the registrant.

If your dispute spans a .com and a .au, or if you are weighing whether to engage or default, email info@cognomenlaw.com for a read on the two records.

What evidence decides an auDRP defense – and what gets respondents in trouble?

The single most common failure in respondent defenses we have reviewed is a response that argues facts it cannot prove. The argument "I had no idea who the complainant was when I registered this domain" is perfectly valid – but only if the registrant can point to something contemporaneous that makes that plausible. A registration date that predates the complainant's trademark by several years, corroborated by archived website data, makes the argument compelling. A registration date that falls one week after a widely-reported product launch and trademark filing, with no supporting documentation, makes the argument look contrived.

The evidence that most consistently supports a respondent's case in auDRP proceedings includes:

Web archive records of the domain's use before the dispute, showing a consistent business or information purpose;
Business name or ABN registration records predating the complainant's trademark or the dispute notice;
Correspondence – email, contracts, or invoices – that identifies the registrant by the domain name in a commercial context;
Domain purchase records from the registrar or reseller, showing the acquisition price and date (relevant to investment-value arguments);
Prior dispute history, if clean: a registrant with no RDNH record and no prior abusive registrations is a stronger respondent than one with a pattern of mark-matching registrations;
Evidence of the complainant's trademark status at the registration date – drawn from trademark registry records – demonstrating that the mark did not exist or was not filed in Australia when the domain was registered.

What gets respondents in trouble? In a recent matter – a .com.au cybersquatting defense, autumn 2024 – we reviewed a response that the registrant had prepared without counsel. It contained a legitimate-interest argument based on a business concept, but the only documentary evidence was a website screenshot from six months after the complaint was filed. The panel found the evidence unpersuasive, correctly noting that it postdated the dispute notice. The registrant had strong underlying facts; the failure was presentational and evidentiary, not substantive. We resolved a parallel .com matter by reframing the same core facts with contemporaneous documentation already in the registrant's files, records that had simply not been organized for the .com.au response.

A second common error is defaulting. Registrants who believe the complaint is meritless sometimes decide that not responding sends a signal of confidence or forces the panel to assess the complaint on its weakest ground. That is generally wrong. A default shifts the proceeding dramatically in favor of the complainant. Most panels in a default scenario grant the complaint unless the complaint itself is defective on its face. "The complaint is obviously wrong" is not a strategy; a filed response that demonstrates exactly why it is obviously wrong is.

Should you request a three-member panel in your .au domain defense?

The three-member panel option is available to respondents in both the UDRP and the auDRP, and the decision to exercise it is more consequential than many registrants appreciate. A single panelist decides the case alone; three panelists require a majority and offer a hedge against an outlier reading of the facts.

When is a three-member panel worth the additional cost? The case for three panelists is strongest where: the facts are genuinely contested and reasonable panelists could read them either way; the case involves a significant domain with meaningful secondary market value; or the respondent intends to press for an RDNH finding, which is more credibly delivered by three independent voices than by a single panelist. The case for a single panelist is strongest where the defense is clean and factually clear, cost sensitivity matters, and the extra deliberation of a three-member panel would not change the outcome.

In our practice, we have defended cases where a respondent's request for a three-member panel proved decisive – one panelist found for the complainant, two for the respondent, and the RDNH finding made it into the published record. We have also seen the reverse: a respondent who requested three panelists on a straightforward generic-term case, incurred the additional fee, and received the same outcome a single panelist would have delivered. The decision is tactical and fact-specific. We advise on it as part of the initial case assessment.

Related at COGNOMEN

Frequently asked questions: defending a .au domain

Is it worth it to defend a .au domain against a UDRP complaint?

In almost every case where there is a credible legitimate-interest argument, yes. Defaulting is not neutral: an unanswered complaint succeeds at a substantially higher rate than one met with a well-reasoned response. The auDRP process is document-based, relatively fast – typically resolved within approximately two months – and the cost of a focused defense is generally proportionate to the value of the domain. A default that loses a domain generating commercial traffic, or a domain with secondary-market value, is almost always the more expensive outcome.

What are the most common mistakes when you defend a .au domain against a UDRP complaint?

The three most frequent errors are: defaulting on the mistaken belief that the complaint will fail without a response; filing a response that asserts legitimate use without contemporaneous documentary support; and failing to identify and produce evidence of the complainant's trademark status at the date of registration, which is often the most powerful single element of a respondent's case. A fourth, less common but significant, mistake is submitting inconsistent responses in parallel .com and .au proceedings involving the same underlying facts.

Can a three-member panel change the outcome?

Yes – and in both directions. Three panelists introduce a genuine deliberative layer that a single panelist cannot replicate. In contested cases with a reasonable argument on each side, a three-member panel offers the respondent a hedge against a single adverse reader. It also makes an RDNH finding more authoritative. The trade-off is cost: the respondent who requests a three-member panel where the complainant sought a single panelist generally bears half the additional fee. Whether that cost is justified is a tactical call that depends on the domain's value, the strength of the defense, and the respondent's interest in an RDNH record.

About COGNOMEN

COGNOMEN is an independent boutique focused exclusively on domain-name disputes. We recover, defend, and transact internet domains across generic and country-code zones, before WIPO, the Forum, CAC, ADNDRC, and national procedures, and in court where arbitration cannot reach. We act for brand owners, domain investors, and registrants – including respondent-side defense and reverse domain name hijacking. Our practice covers .au and other ccTLD proceedings alongside the full UDRP and URS caseload. Fee ranges for standard matters are published on our services pages; there are no hidden consultation fees for an initial assessment. To discuss a .au domain dispute, contact info@cognomenlaw.com.

By Anton Grant – Respondent defense and RDNH practice, UDRP and ccTLD proceedings.

Disclaimer: This article is general information about domain-name dispute procedures and does not constitute legal advice. Outcomes depend on the specific facts, the zone, and panel or court discretion. For advice on your domain, contact info@cognomenlaw.com.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.