Assess my case

How to defend a .com domain against a UDRP complaint

By Anton Grant, Respondent defense & RDNH ·

A UDRP complaint lands in your inbox. The complainant — a brand owner or, sometimes, an opportunist with a freshly filed trademark — is demanding transfer of your .com domain. You have 20 days to respond once the case formally commences. What you do in those three weeks can be the difference between keeping a domain you legitimately hold and losing it to a proceeding you never saw coming.

To defend a .com domain against a UDRP complaint, a registrant must answer all three elements of Paragraph 4(a) of the Uniform Domain Name Dispute Resolution Policy — and defeat at least one. The strongest defenses rest on Paragraph 4(c) safe harbors: demonstrating a bona fide offering of goods or services before notice of the dispute, showing that the registrant is commonly known by the name, or establishing legitimate noncommercial or fair use. A standard WIPO case closes in roughly two months; the window to file a response is 20 days from commencement. The only remedies available to the complainant are transfer or cancellation — no damages, no costs — but a successful defense can also produce a finding of Reverse Domain Name Hijacking (RDNH) against the complainant.

This page covers the governing test for .com disputes, the Paragraph 4(c) safe harbors in detail, the evidence that decides outcomes, the choice between a single and a three-member panel, and what an RDNH finding means for your case.

What governs .com domain disputes — and why the UDRP applies to you

Every .com domain registered through an ICANN-accredited registrar is subject to the UDRP as a contractual condition of registration. That is not optional. By registering a .com, the registrant submits to mandatory arbitration under the Policy, before any approved UDRP provider — WIPO, the Forum, the Czech Arbitration Court (CAC), or the ADNDRC — at the complainant's choice of forum.

The complaint must satisfy all three elements of Paragraph 4(a): (1) the disputed domain is identical or confusingly similar to a trademark in which the complainant has rights; (2) the registrant has no rights or legitimate interests in the domain; and (3) the domain was registered and is being used in bad faith. A complainant must win every element. A respondent only needs to defeat one. That asymmetry is the central structural fact of UDRP defense.

In practice, Element 1 — similarity to a mark — is often conceded or close to it. The real fight is usually on Elements 2 and 3. Panels at WIPO, which together with the Forum handles roughly 97% of all UDRP proceedings, have developed a substantial body of consensus views on what constitutes a legitimate interest and what constitutes bad faith. Knowing where that consensus sits is the first task of any competent defense.

What does this mean for the registrant who just received a complaint? It means the complainant's narrative is not the only narrative. The Policy explicitly envisages that some respondents have legitimate claims to the domain they hold. The Paragraph 4(c) safe harbors exist precisely because the drafters recognized that registrant rights are real — and that bad-faith claims are sometimes themselves abusive.

If you have received a UDRP complaint against a .com domain, the response deadline is hard. For a prompt assessment of the three elements and your defense position, contact info@cognomenlaw.com.

How do the Paragraph 4(c) safe harbors work, and can you rely on them?

Paragraph 4(c) of the UDRP provides three non-exhaustive circumstances that, if established, demonstrate the registrant's rights or legitimate interests — and thereby defeat Element 2 of the complaint. Each safe harbor requires evidence. None is self-executing.

Safe harbor one: bona fide use before notice of the dispute. If the registrant used the domain in connection with a genuine offering of goods or services before receiving notice of the complaint — or before actual knowledge that a dispute was coming — panels generally accept that as legitimate interest. The key qualifiers are "before notice" and "bona fide." Parking pages with pay-per-click links to the complainant's competitors rarely qualify. An actual business, a developed site, or a demonstrable preparatory effort to use the domain commercially can qualify — if the evidence is in the record.

Safe harbor two: commonly known by the name. A registrant who is — or whose business is — commonly known by the domain name has a legitimate interest independent of any trademark registration. This is especially relevant for individuals, family names, and small businesses that predate the complainant's mark in that territory. Evidence here includes business records, prior use of the name in trade, registration documents, and third-party references.

Safe harbor three: legitimate noncommercial or fair use. Fan sites, criticism sites, informational pages, and commentary that are genuinely non-commercial and do not mislead as to source can survive a complaint. The distinction panels draw is between a site that criticizes a brand using its name — potentially fair — and a site that mimics the brand's commercial presence to divert traffic. Intent matters enormously.

A critical sub-question: does the complainant's mark predate the registration of the domain? If the complainant's trademark rights did not exist at the time the respondent registered the domain, it is logically impossible to have targeted that mark. Panels have held consistently that registration cannot be in bad faith with respect to a mark that did not yet exist. This point directly attacks Element 3 — and undermines the entire complaint where the respondent can document the timeline.

What evidence actually decides a .com UDRP defense?

The written record is everything. There is no oral hearing. Panels decide on the complaint, the response, and any annexes. A response without annexes is almost always weaker than one with a curated, cross-referenced evidentiary record.

What goes into that record? The exact mix depends on the safe harbor relied upon, but across our practice the most consequential categories are:

Evidence that is gathered after the response is filed rarely reaches the panel. Supplemental filings are disfavored and usually rejected by WIPO panels unless the new material was truly unavailable at the time of filing. Building the record correctly, in full, at the response stage, is not merely good practice — it is the only realistic opportunity to win.

In a recent matter (a .com domain held by a domain investor, autumn 2024), we assembled a registration-date chronology that placed the domain's acquisition more than four years before the complainant's trademark filing. The complaint was denied on Element 3 alone, without the panel needing to reach the safe harbors. The defendant had held the domain continuously, with demonstrable renewal activity and documented portfolio rationale.

When is Reverse Domain Name Hijacking a realistic outcome?

Reverse Domain Name Hijacking — RDNH — is a panel finding that the complaint was filed in bad faith to deprive a legitimate registrant of a domain. It carries no monetary penalty; the registrant does not recover legal fees through the UDRP. The finding is reputational and public — WIPO publishes decisions — and it can be professionally damaging to a complainant or its counsel.

Panels treat RDNH as an exceptional remedy. They do not find it merely because a complaint failed. The standard, as panels have consistently described it, is something beyond filing a weak case: the complainant must have known, or should have known, that it could not succeed on at least one of the three elements. Common patterns that produce RDNH findings include: filing where the domain predates the mark by years and that chronology was publicly available; filing against a domain that has been held and used for a decade without any prior objection; and filing immediately after a failed purchase negotiation at the price the respondent set — suggesting the complaint is leverage, not a genuine trademark claim.

What does this mean in practical terms? If the complaint against your .com looks abusive — if the timing, the evidence, and the complainant's conduct before filing tell a story of overreach — then RDNH is worth putting squarely to the panel in the response. We do not argue RDNH as a throwaway claim. We build it as a standalone argument with its own evidentiary sub-record, because panels expect to see the factual basis, not just the label.

In a matter we handled (a .com holding, spring 2025), the complainant had offered to purchase the domain for a nominal sum, been declined, and filed a complaint within weeks. The domain had been held for over seven years with a documented development history. We argued RDNH as an affirmative element of the response. The panel denied the complaint and issued a formal RDNH finding — the second time that complainant had received such a finding in less than eighteen months, as our historical research of published decisions revealed.

If the complaint against your domain appears to be an overreach — or if you were approached with a purchase offer before the complaint was filed — reach us at info@cognomenlaw.com to assess whether RDNH is in reach.

Should you request a three-member panel — and what does it cost?

A respondent has the right to request a three-member panel even when the complainant selected a single-member panel. This is a strategic decision, not a procedural formality. If the respondent requests three members, the parties generally split the higher three-member filing fee. At WIPO, that fee is USD 4,000 for one to five domains — compared to USD 1,500 for a single-member panel. The cost difference falls partly on the respondent.

When is three members worth that cost? Panels of three are statistically more likely to produce RDNH findings, because a minority view in favor of the complainant can be outvoted and the majority must write reasons. Three-member panels also tend to engage more carefully with complex evidentiary records — a longer timeline, a disputed mark, a nuanced fair-use argument. For high-value domains or cases where the legal argument is genuinely close, the additional expense of a three-member panel is usually justified.

Where a single panelist is acceptable — typically in cases where the defense is factually clean, the registration date clearly predates the mark, and the domain value does not warrant the additional cost — sticking with the single-member default keeps the total dispute cost lower. The right answer depends on the facts, the domain's value, and the complexity of the argument the response needs to carry.

How does defending a .com compare to defending under a ccTLD procedure?

The .com UDRP is the governing standard for generic top-level domains and for the ccTLDs that have adopted it (such as .me, .tv, and .co, which operate under UDRP or a close variant). For .com specifically, the bad-faith element is cumulative — the domain must have been registered and used in bad faith. That word "and" is important: a registrant who acquired a domain without any intent to target the complainant's mark may escape the bad-faith finding even if current use has become problematic.

Several national ccTLD procedures use a lower threshold. The Nominet DRS for .uk, for example, frames its test as "registered or used" abusively — a disjunctive standard that is easier for a complainant to satisfy. A registrant who wins a .com UDRP defense on the registration prong alone might not prevail in an equivalent .uk dispute if current use is even arguably problematic. Conversely, the Nominet DRS includes a mandatory free mediation stage before any expert decision, giving respondents a structured opportunity to resolve the dispute without a contested hearing.

For .de, there is no equivalent of the UDRP. Disputes proceed through the German courts, with a DENIC DISPUTE entry available to block a transfer while the claim is pursued. A registrant defending a .de domain against an aggressive complainant is in a materially different position from a .com respondent: the litigation costs and timelines are higher, the procedural path is different, and local litigation counsel in the relevant jurisdiction is required. If the same complainant is pursuing you across both a .com and a national ccTLD, the two disputes need to be managed together but through separate procedural channels — a coordination challenge that has practical implications for cost and response strategy.

See our analysis of related zone-specific disputes at the links below for a worked comparison of how the same underlying facts play differently across zones.

What does the defense process look like end to end?

Once a UDRP complaint is filed, the chosen provider (most commonly WIPO for .com disputes) reviews it for formal compliance. If it passes, the registrar is notified and typically places a registrar lock on the domain — it cannot be transferred during the proceeding. Commencement triggers the 20-day response window.

The response is submitted through the provider's online case filing system. It must be in writing, accompanied by annexes, and filed before the deadline — late responses are generally excluded. After both submissions are in, the provider appoints a panelist (or three, if either party requested a three-member panel). The panel reads the record, applies the Policy, and issues a written decision.

If the panel denies the complaint, the lock is released and the domain stays with the registrant. If the panel orders transfer, the registrar implements it after a short waiting period — during which a registrant who believes the decision was procedurally flawed can seek court intervention, though that is a rare and expensive route. A standard WIPO case closes in approximately two months from filing, absent extensions.

The question practitioners are often asked: what happens if the registrant does nothing? A default — failing to file a response — does not automatically mean the complainant wins. Panels are still required to find that the complaint meets all three elements. But a default deprives the panel of the respondent's evidence and arguments. In practice, defaults produce a disproportionately high rate of transfers. Filing a response — even a concise one — is nearly always the better choice.

Our practice covers the full defense process: assessing the three elements against your specific domain and evidence, building the legitimate-interest record, drafting and filing the response and annexes, advising on panel composition and RDNH, and managing the post-decision options if the outcome requires further action.

Related at COGNOMEN

Frequently asked questions about UDRP defense for .com domains

Is it worth it to defend a .com domain against a UDRP complaint?

For any domain with real commercial value, defensive value, or strategic importance to the registrant, a defense is almost always worth filing. The alternative — defaulting — leaves the panel with only the complainant's version of the facts and produces a high rate of transfers. A well-built response that identifies even one element the complainant cannot satisfy will defeat the complaint. Legal fees for a respondent defense are in a comparable range to complainant-side fees — typically a few thousand dollars for a straightforward matter — and should be weighed against the value of the domain and the cost of replacement or litigation of the underlying rights.

What are the most common mistakes when you defend a .com domain against a UDRP complaint?

Three mistakes appear repeatedly in our practice. First, filing a response without supporting annexes — assertions without evidence carry very little weight with panels. Second, ignoring the registration-date timeline: failing to document that the domain predates the complainant's mark forfeits what is often the cleanest defense. Third, not arguing RDNH where the complaint is plainly overreaching: panels need the respondent to put that claim on the table with evidence, not simply imply it. A response that treats RDNH as an afterthought rarely obtains the finding even when the facts strongly support it.

Can a three-member panel change the outcome?

Yes — and not only theoretically. Three-member panels engage more carefully with close factual records and are statistically more likely to issue RDNH findings. If the legal argument is nuanced, the domain is high-value, or RDNH is a realistic goal, requesting a three-member panel is usually the right call despite the added cost. At WIPO, the respondent's share of the three-member fee for one to five domains brings the total filing cost to USD 4,000; the increment should be weighed against the domain's value and the complexity of the defense needed.

About COGNOMEN

COGNOMEN is an independent boutique focused exclusively on domain-name disputes. We recover, defend, and transact internet domains across generic and country-code zones, before WIPO, the Forum, CAC, ADNDRC, and national procedures, and in court where arbitration cannot reach. We act for brand owners, domain investors, and registrants — including respondent-side defense and reverse domain name hijacking. Our practice is built around one thing: getting the right result for the right party in a domain dispute, wherever the domain sits and whatever procedure governs it. To discuss a domain, contact info@cognomenlaw.com.

Author: — Respondent defense and reverse domain name hijacking (RDNH). Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

No obligation. Confidential. We reply within two hours in business hours.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.