How to prove a legitimate interest in your .me domain

How to prove a legitimate interest in your .me domain. UDRP and ccTLD domain recovery and defense across .me. Email the firm to assess your case.

A UDRP complaint lands in your inbox. Someone is claiming your .me domain – the one you built a personal brand on, used for years as a portfolio site, or registered because your own name is exactly that string of characters. The complaint asserts you have no legitimate interest. What happens next depends entirely on the record you can build in the next 20 days.

To prove a legitimate interest in your .me domain, you must satisfy at least one of the safe harbors in Paragraph 4(c) of the UDRP: a bona fide offering of goods or services before notice of the dispute, a demonstration that you are commonly known by the domain name, or a showing of legitimate noncommercial or fair use. The .me registry operates under the UDRP – administered by WIPO – so the same three-element test governs .me disputes as governs .com. The only remedies available to a complainant are transfer or cancellation; no monetary award follows from a complaint alone.

This page explains the governing standard for .me domains, the evidence that satisfies each safe harbor, the realistic prospect of an RDNH finding where the complaint overreaches, and the practical step of assembling a response before time runs out.

Why does the UDRP govern .me, and how does that affect your defense?

The .me registry – operated under a ccTLD designation for Montenegro – has appointed WIPO as its dispute-resolution provider and adopted the UDRP in full. That means the legal test, the procedure, and the forum fees are the same as those for a .com dispute. A complainant must prove all three elements of Paragraph 4(a): confusing similarity to a mark, absence of your rights or legitimate interests, and registration and use in bad faith. The last two elements are where respondents most often prevail.

That alignment with the UDRP is both good news and a caution. On the positive side, the UDRP has more than two decades of published panel decisions interpreting Paragraph 4(c), and that body of consensus gives your legitimate-interest argument a well-mapped doctrinal foundation. On the cautious side, the same body of decisions means an experienced complainant's counsel will have anticipated your arguments. The .me zone attracts disputes partly because it reads as the English possessive – "it's.me", "call.me", "john.me" – and panels understand the personal-branding context that motivates many .me registrations.

One important procedural point: the complainant carries the initial burden on the confusing-similarity element, but the burden on element two effectively shifts. Once a complainant makes a prima facie showing that you lack rights, the burden of production moves to you. Your response is the vehicle for that production. A default – filing nothing – is not a neutral act; panels regularly infer bad faith from a respondent's silence.

What are the Paragraph 4(c) safe harbors and which one fits your situation?

Paragraph 4(c) of the UDRP provides three non-exhaustive circumstances that, if demonstrated by the respondent, establish a legitimate interest. Each maps to a different factual profile, and identifying the right one early shapes the entire evidence-gathering exercise.

The bona fide offering safe harbor requires that, before you received notice of the dispute, you were using the domain in connection with a genuine offering of goods or services. "Genuine" is the operative word. Panels distinguish a bona fide commercial use from a use designed to exploit the trademark value of the name. A freelance designer who registered "janesmith.me" to showcase her portfolio years before a brand owner's complaint is a strong candidate. A registrant who redirects the domain to the complainant's competitor's site is not.

The timing element is critical. Panels have consistently held that use commenced after the respondent receives notice of a complaint carries diminished, and sometimes zero, weight. If your use predates the dispute – and you can document it – that chronology is the first thing to establish in your response record.

The "commonly known by" safe harbor is particularly important in the .me context. Because .me domains are widely registered as personal-name domains, individuals who share a surname or given name with a complainant's trademark have successfully invoked this safe harbor. The evidentiary question is whether you, as an individual or as a business, were recognizably associated with that string before the complaint was filed. Documentation ranges from professional credentials bearing the name, to published bylines, to registration records, to social-media profiles predating the dispute.

The fair use safe harbor covers legitimate noncommercial use and certain commentary or criticism sites. This is a narrower path in practice. Panels apply it to genuine fan sites, genuine criticism sites, and genuine personal pages without commercial intent – but the domain must not be used to deceive users into thinking they are visiting the mark owner's page. The line between protected criticism and bad-faith impersonation is a fact-specific one that panels draw carefully.

Which safe harbor you pursue determines what evidence you collect. In most .me disputes we handle, Paragraphs 4(c)(i) and 4(c)(ii) are the dominant theories – either you were using the name for a real purpose before you knew of the complaint, or you are personally known by that name.

For a read on whether the three UDRP elements are met in your specific .me situation, reach us at info@cognomenlaw.com.

How do you build the legitimate-interest record before the response deadline?

Evidence-gathering is time-sensitive. The response must be filed within 20 days of the case being formally commenced – and that window does not automatically extend. Missing the deadline hands the panel a one-sided record.

The record you build should do three things: establish your use of the domain before notice, document your connection to the name, and neutralize the complainant's bad-faith theory. In practice, that means assembling the following categories of evidence, as applicable to your factual profile.

Registration and use history is the chronological spine of your defense. WHOIS registration date data, archive.org captures of your site at earlier dates, email headers carrying the domain, and hosting invoices all place your use on the timeline. Panels take archive evidence seriously when it is complete and consistent.

Your personal or business identity documentation demonstrates the "commonly known by" prong. This includes government-issued identification, professional licenses, published author credits, LinkedIn profiles created before the dispute, and any media coverage that associates your name with the domain string. For .me domains, a birth certificate or passport showing that the domain string matches your actual name is often decisive.

Commercial use records support the bona fide offering theory. Client contracts, invoices, payment records, and product listings all show that the domain was used for a genuine commercial purpose – not as a placeholder for a future sale to the mark owner.

One mistake respondents make is underestimating the declaration. The response may include a respondent's signed declaration attesting to facts not otherwise documented. Panels weigh declarations, particularly when they are specific, consistent with the extrinsic evidence, and uncontradicted. A vague declaration ("I have always used this name for legitimate purposes") carries little weight. A specific one ("I registered the domain in March 2019 to host my graphic-design portfolio, as shown in Exhibit 3, and I had no knowledge of the complainant's mark at that time") carries a great deal.

In a recent matter – a .me personal-name dispute, spring 2025 – we built a response record anchoring the registrant's use to a series of archived pages and professional invoices predating the complaint by more than three years. The panel denied the transfer and noted the complainant's failure to account for the respondent's obvious personal connection to the name.

When is an RDNH finding realistic in a .me dispute?

Reverse Domain Name Hijacking – RDNH – is a panel finding that the complainant brought the complaint in bad faith, typically to deprive a legitimate registrant of a domain the complainant simply wants to own. The finding carries no monetary consequence; it is a reputational sanction. But it is public, it is permanent in the case record, and it sends a clear signal to future panels if the same complainant files again.

Panels find RDNH where the complaint fails on the merits in a way the complainant's counsel should have foreseen. Common patterns include: filing against a registrant who shares the personal name at issue, filing against a domain registered before the complainant's trademark was applied for or used in commerce, and filing against a domain with a clear prior commercial or personal use that the complainant's evidence does not acknowledge. In each of these patterns, the .me zone's personal-branding context is directly in play.

Should you ask for an RDNH finding? The answer depends on how clearly the complaint overreaches. Asking for RDNH where the complaint is merely thin – but not abusive – risks appearing combative without gaining anything. Asking for it where the complainant's trademark postdates your registration by years, and where your personal name matches the domain, is a legitimate argument that panels take seriously.

We advise clients on whether to pursue an RDNH argument as part of assessing the entire response strategy – not as a reflexive counter-move, but as a measured argument tied to the specific facts.

If you have received a UDRP complaint targeting your .me domain and want a second read on the overreach question, email info@cognomenlaw.com.

What evidence actually decides the outcome?

Panels in .me disputes apply the same evidentiary standards as in any UDRP proceeding. Three categories of evidence most frequently determine whether the legitimate-interest argument succeeds or fails.

First, timing. The single most important data point in most legitimate-interest defenses is the gap between your registration date and the first date the complainant can establish trademark rights. A domain registered before a mark was applied for, let alone registered, is difficult for a complainant to defeat on bad faith even if the domain is similar to the mark. The .me zone's timeline evidence – date of registration, date of first documented use, date of complaint notice – maps the entire dispute.

Second, use character. How the domain was actually used matters more than what it could theoretically be used for. A parking page with pay-per-click links to the complainant's competitors suggests opportunistic registration. A personal portfolio, an active blog, or a domain used for professional email since registration suggests the opposite. Panels evaluate the entire use history, not just the state of the site at the date of filing.

Third, identity congruence. Where the domain string matches a real personal name – and that is the defining feature of most .me disputes – the degree of alignment between the registrant's identity and the domain is the central question. The more clearly documented your personal connection to the name, the weaker the complainant's argument that your registration was designed to target their mark.

In a second matter we handled – a .me domain carrying a surname registered and actively used for photography services, autumn 2024 – the panel declined transfer and observed that the name at issue was a common surname in the registrant's home country, that the registrant's professional use was documented across several years, and that the complainant had not established that the respondent had any knowledge of the complainant's business at the time of registration.

How does .me compare to other zones on the legitimate-interest question?

The zone shapes the context, even when the legal test is identical. Understanding how .me sits within the broader domain-dispute map helps you calibrate your defense and decide whether a companion dispute in another zone is a risk.

A .com dispute involving the same name is governed by exactly the same UDRP test, but the panel's contextual reading of a personal-brand argument may differ. The .me extension signals a personal-registration intent in a way that .com does not – a fact that sophisticated panels acknowledge. That contextual signal can strengthen the "commonly known by" argument in ways that a generic TLD defense may not support as naturally.

A .de dispute is entirely different terrain. There is no UDRP for .de. Disputes concerning .de domains go to the German courts, with a DENIC DISPUTE entry available to block transfer during litigation. A legitimate-interest argument in a .de context is a defense in civil proceedings, not a UDRP response – different evidence standards, different timelines, and different costs. If you hold both a .me and a .de domain incorporating the same name, a complainant may file a UDRP against the .me while pursuing German court action on the .de. Those two tracks run in parallel; the UDRP panel decision does not bind the German court.

A .eu domain carries its own ADR procedure administered through the Czech Arbitration Court. The .eu remedy can include transfer where the complainant meets EU/EEA eligibility requirements, or revocation where they do not. A legitimate personal-name defense in the .eu procedure turns on different rule provisions than Paragraph 4(c), though the factual categories – prior use, personal identity, genuine commercial activity – are structurally similar.

If your exposure spans multiple zones, the defense strategy needs to be coordinated. A concession in the UDRP response on one factual issue can be used against you in a parallel ccTLD or court proceeding.

What does the response process look like end to end?

The UDRP response procedure at WIPO for a .me domain follows the same five stages as any WIPO proceeding: the complaint is filed and formally reviewed; the case is commenced and notice is sent to the registrant; the respondent has 20 days from commencement to file a response; a panelist is appointed; and the panel issues a decision. For a single-member panel on a single domain, that full cycle typically runs about two months.

In practice, the response itself is a structured document. It addresses each of the complainant's three-element arguments in turn, leads with your strongest Paragraph 4(c) argument, and annexes the evidence described above. The response may also include a declaration. It does not need to be the length of a legal brief, but it must be complete – panels do not hold hearings, and there is generally no right to supplement the record after the response is filed without the panel's permission.

A respondent may also request a three-member panel rather than accept the single panelist the complainant selected. That request typically requires sharing the higher three-member fee – at WIPO, USD 4,000 for a three-member panel on one to five domains. A three-member panel can be strategically worthwhile where the case is close and you want the protection of a dissent record or a broader analytical lens. It is not always the right call; we assess that question case by case.

Once the panel issues a decision in a transfer case, the registrar implements the decision unless the respondent files a court action in the "mutual jurisdiction" within ten business days to stay the transfer. That court action – governed by the applicable national or US anticybersquatting rules – is an option in extreme cases where the panel committed a clear legal error, but it is an expensive path that is rarely the first choice.

Related at COGNOMEN

• Respondent Defense & RDNH – the full service, including RDNH findings across gTLDs and ccTLDs
• Defending a fair-use claim under .de – how the German procedure differs from UDRP defense
• New gTLD launch protections – what registrants and brand owners need to know before a zone opens