How to run due diligence before buying a .es domain

How to run due diligence before buying a .es domain. UDRP and ccTLD domain recovery and defense across .es. Email the firm to assess your case.

A brand owner or investor finds a .es domain that fits perfectly — matching a trademark, a product name, or a market entry into Spain. The asking price is reasonable. The seller seems cooperative. But before any wire transfer or escrow instruction is sent, a question demands an honest answer: is this domain clean?

To run due diligence before buying a .es domain, a buyer must verify chain of title through the Red.es WHOIS and registrant eligibility records, check the domain's prior dispute history under the IEDR dispute procedure, confirm there are no active trademark conflicts that could expose the acquirer to a post-transfer challenge, and structure the acquisition through a properly drafted escrow arrangement. The .es zone operates under Spanish registry rules administered by Red.es; those rules differ materially from the UDRP that governs .com. Getting these checks wrong before closing means buying a dispute, not a domain.

This page sets out each check, in order, explains what the Spanish registry rules require of registrants, identifies the fact patterns that decide whether a domain is safe to acquire, and describes how COGNOMEN structures .es pre-acquisition due diligence from first instruction through to closing.

What governs .es domains and why it matters for buyers

The .es ccTLD is administered by Red.es, the Spanish public entity responsible for the national domain registry, and it operates under a distinct regulatory regime that applies Spanish law and European Union rules — not the UDRP. That distinction is the first thing every prospective buyer must understand. A domain that would survive a UDRP challenge in the .com space may be acutely vulnerable under Spanish registry rules, and vice versa.

Red.es imposes eligibility requirements on registrants. Historically, .es registrations were restricted to entities or individuals with a connection to Spain — a Spanish trademark, a trade name, a company registration, or EU-level intellectual property rights. Those requirements have been relaxed over successive policy updates, but they have not disappeared entirely. A buyer acquiring a .es domain must confirm that it will satisfy the eligibility criteria on its own standing after transfer — not merely that the current registrant qualified at the time of original registration.

The dispute mechanism for .es is administered through the Spanish system, with Red.es empowered to apply its own cancellation and transfer rules when a registrant holds a domain that conflicts with third-party trademark rights. The procedure is not equivalent to the UDRP's three-element test. It draws on Spanish trademark law, EU trademark regulation, and the specific .es registration policies. A buyer must know whether the target domain has ever been the subject of a complaint or a Red.es administrative action — because an undisclosed prior dispute is one of the most common sources of post-acquisition liability.

We advise buyers to treat the .es regulatory environment as a self-contained system. Do not assume that because a domain cleared a UDRP or another ccTLD procedure it is free of exposure under Spanish rules. The governing national procedure applies, and the analysis must run on those specific rules.

How do you check chain of title for a .es domain before purchase?

Chain-of-title verification for a .es domain runs through three interconnected checks: current registrant identity, registration history, and any gap or transfer event in the domain's life that could indicate a lapse or unauthorized transfer. Each check generates a separate risk signal.

Start with the Red.es WHOIS — now presented through the RDDS (Registration Data Directory Services) protocol in compliance with GDPR — to confirm the current registrant's name, organization, and contact data. Where WHOIS data is masked under GDPR privacy protections, the buyer should request disclosure through the registrar or via a formal legal channel before proceeding. Buying a domain from an anonymous seller without confirming that seller's identity against the registered data is a material risk. Sellers who resist identity disclosure at due diligence stage should be treated with caution.

Next, request a full registration history from the current registrar. Look for: the original registration date; any transfer events; any periods of expiration or pending-deletion status; and any change of registrant since first registration. A domain that lapsed and was re-registered — even briefly — may carry a break in title that affects its standing in a future dispute. Panels and registries look at original registration intent, and a break in the chain can reset the analysis.

In a recent matter (a .es domain acquisition, spring 2025), a prospective buyer brought us a domain with a five-figure asking price. Our chain-of-title check revealed a gap of approximately 23 days during which the domain had entered pending-deletion status before being re-registered by the current seller. That break exposed the buyer to the argument that the domain's registration history could not be traced cleanly to the original good-faith registration. The deal proceeded, but at a materially revised price that reflected the adjusted risk profile.

The third element of the chain-of-title check is eligibility. Confirm that the current registrant validly met .es eligibility criteria at registration, and confirm that the acquirer will independently satisfy those criteria post-transfer. If the buyer is a non-EU entity without a Spanish trademark or EU trademark with Spanish designations, advice on eligibility before transfer — not after — is essential.

For a read on whether a specific .es domain is clean to acquire, reach us at info@cognomenlaw.com.

What is the prior dispute history check and why can a past challenge reopen?

A prior dispute against a .es domain does not disappear from the record simply because the original challenge failed or was withdrawn. It leaves a trace — in registry records, in the domain's RDDS data, and sometimes in publicly available administrative decision archives — that a buyer must surface before closing.

The relevance of a prior dispute to a buyer is not merely historical. If a trademark owner previously challenged the domain and the challenge was dismissed, that owner may have grounds to refile if circumstances change — for instance, if the domain's use shifts after transfer, or if the buyer's identity gives the complainant a stronger argument on the eligibility or bad-faith limb. A transfer can itself be the trigger for a renewed challenge.

The due diligence protocol must include a search of the relevant Spanish administrative dispute records and a review of any correspondence the seller can produce relating to prior complaints, letters before action, or cease-and-desist demands. Sellers are not always forthcoming. Where a seller represents that no prior dispute exists, that representation should be captured in the purchase agreement as a warranty, backed by a specific indemnity covering the cost of any post-transfer challenge that arises from pre-transfer conduct.

Beyond formal disputes, conduct a trademark clearance search against the domain string itself. Use the Spanish Patent and Trademark Office (OEPM) database and the EU Intellectual Property Office (EUIPO) database to identify any registered marks that are identical or confusingly similar to the domain. This is not a guarantee that no conflict exists — unregistered marks and trade names can also give rise to .es challenges — but it maps the landscape of potential complainants before a buyer is exposed.

The clearance search should extend to the intended use of the domain after acquisition. A domain purchased for a new product line carries a different risk profile from one purchased as a passive investment. Where the post-acquisition use could be characterized as trading on a third party's mark, the buyer may be creating its own bad-faith exposure, regardless of what the seller's use looked like.

How should a .es domain acquisition be structured through escrow?

Escrow is not optional for a .es domain acquisition of any material value. It is the mechanism that protects both parties and ensures that the domain transfer and the payment occur in a coordinated sequence — rather than one side performing and the other defaulting.

A properly structured .es domain escrow arrangement includes: a written sale and purchase agreement specifying the domain, the agreed price, the conditions of transfer, and the representations and warranties; an escrow instruction to an agreed escrow service; a registrar transfer authorization (auth code / EPP key) held by the escrow service pending payment confirmation; and a defined closing window during which the transfer must be completed at Red.es and the registrar.

The .es transfer process at Red.es has specific technical steps. The buyer must confirm that the gaining registrar is accredited by Red.es, that the buyer will satisfy post-transfer eligibility requirements, and that the auth code provided by the seller is current and has not been revoked. Auth codes expire. A seller who provides an auth code and then delays closing — whether intentionally or not — may cause the code to lapse, requiring a new issuance and restarting the clock.

Purchase agreement representations specific to .es due diligence should include: the seller's confirmation that the domain is registered in its name and under its control; that there are no active or threatened disputes; that the domain has not been subject to a registry lock by Red.es or any regulatory authority; that all registration fees are current; and that the seller has authority to transfer (particularly relevant where the registrant is a company that has been dissolved, merged, or restructured).

We structure .es acquisitions with a closing checklist tied to the escrow instruction. Every item on that checklist — auth code validity, eligibility confirmation, WHOIS match, dispute-free representation — must be verified before escrow is released. If an item cannot be verified, the escrow does not close.

To plan the escrow and purchase agreement structure for a .es acquisition, email info@cognomenlaw.com.

What fact patterns decide whether a .es domain is safe to acquire?

The safety of a .es acquisition turns on a cluster of factual questions, not on any single indicator. A domain may display several clean signals and still carry a residual risk if one adverse fact is overlooked. The following patterns represent the most common risk categories we encounter in practice.

Pattern 1: The domain matches a well-known Spanish brand. Where the domain string closely tracks the name of a large Spanish company, a well-known Spanish trademark, or a national institution, the prior-dispute risk is elevated. Even if the current registrant has held the domain for years without challenge, a transfer to a new buyer — particularly a buyer with commercial intent — can prompt a rights holder that previously tolerated the registration to act. We have seen this pattern in sectors including banking, telecommunications, and consumer goods.

Pattern 2: The domain was registered during a brand's market entry into Spain. Where the registration date coincides with a foreign brand's announced or publicized entry into the Spanish market, the timing is a fact that any subsequent panel or tribunal will examine. A buyer acquiring such a domain inherits the registrant's intent problem, at least as to the registration event. The only way to neutralize this risk is to confirm, through the seller, that the original registration purpose was unrelated to the brand in question — and to document that confirmation.

Pattern 3: The domain has multiple prior registrants with gaps between them. As discussed in the chain-of-title section above, breaks in registration history reset the intent analysis. Multiple owners with intervening lapses make it harder to establish clean title and easier for a future complainant to argue that the current registration does not carry the benefit of any earlier good-faith use.

Pattern 4: The domain is a slight variant of a registered mark — a typosquat pattern. Domains that omit a letter, add a hyphen, or combine a mark with a generic word have consistently attracted challenge under both the UDRP and national procedures. A buyer acquiring a domain in this category must understand that the typosquat pattern itself is a bad-faith indicator that may follow the domain through any transfer.

Pattern 5: The seller cannot produce documentation of the original registration purpose. A clean acquisition is supported by evidence — not necessarily extensive evidence, but some contemporaneous record of why the domain was registered. A seller who cannot explain the original registration, or whose explanation does not align with the registration date and the domain's use history, is a risk signal. In our practice, the absence of a coherent registration narrative correlates with elevated post-transfer challenge risk.

How does .es due diligence compare to .com UDRP diligence and other ccTLDs?

The right diligence protocol depends entirely on the zone. A .com acquisition requires UDRP-focused analysis — three elements, WIPO or Forum dispute history, bad-faith indicators under Paragraph 4(b). A .es acquisition requires Spanish-registry analysis — Red.es rules, Spanish trademark law, EU trademark regulation, and the specific eligibility regime. The two are not interchangeable.

Where a buyer is acquiring both a .com and the matching .es simultaneously, two separate diligence tracks must run in parallel. A clean .com does not establish a clean .es. The .com may have survived a UDRP because the registrant demonstrated a legitimate interest under Paragraph 4(c); the .es may still be exposed under Spanish rules if the registrant's eligibility was borderline or if a Spanish trademark owner has rights that were not raised in the UDRP proceeding.

Comparing .es to .uk (Nominet DRS) or .eu (EURid / ADR.eu): the Nominet DRS test is "abusive registration" — did the registration take unfair advantage of or cause unfair detriment to a complainant's rights, assessed as "registered OR used" abusively? That is a materially lower bar than the UDRP's cumulative "registered AND used" standard. The .eu procedure allows a wider set of "rights" beyond registered trademarks, including trade names and family names recognized under EU member state law. Neither of those frameworks applies to .es. The .es analysis is its own regime.

For a buyer expanding a brand into multiple European markets and acquiring ccTLDs across several zones — .es, .de, .fr, .it, .nl — COGNOMEN coordinates the diligence across zones, engaging local litigation counsel in each relevant jurisdiction where court proceedings or registry interactions require in-country representation. The governing national procedure applies in each case; we do not apply a uniform template across zones.

In a second recent matter (a multi-ccTLD acquisition including .es, .fr, and .de, summer 2025), the .es domain presented the most complex diligence because the target string matched a Spanish-language mark held by an unrelated Spanish entity. The .com was clean; the .es required a trademark coexistence analysis before the acquisition could proceed safely. The deal closed, but with a specific indemnity from the seller and a legal opinion letter on the .es eligibility question included in the closing bundle.

What are the realistic costs and timelines for .es domain due diligence?

Pre-acquisition due diligence for a .es domain does not carry a fixed-fee schedule in the same way that UDRP filing fees are published. The cost depends on the complexity of the domain, the number of zones being acquired simultaneously, and the depth of the trademark clearance search required.

As a general orientation: for a single .es domain with a straightforward WHOIS trail, no prior disputes, and a clear trademark landscape, diligence can typically be completed within a matter of days at a flat fee in the lower range of the market for specialist IP legal advice. Where the domain involves a complex chain of title, prior dispute history, multi-zone acquisition, or a trademark clearance search across Spanish and EU registers, the timeline extends and the cost rises accordingly. Legal fees for domain transaction diligence are separate from any escrow service fees or registrar transfer fees.

Timeline: from first instruction, a standard .es diligence file can be assessed and a written report produced in approximately five to ten business days, depending on the responsiveness of the seller and the depth of the trademark search. Where a closing deadline is pressing, we can expedite the process — but a compressed timeline should not mean a compressed diligence scope. The checks that protect a buyer from post-transfer challenge are not optional, regardless of how quickly a deal is moving.

The cost of running due diligence before a .es domain acquisition is always measured against the alternative: acquiring a domain that is subsequently challenged, suspended, or transferred away, with the attendant legal costs, business disruption, and reputational harm. In every case, the diligence cost is a fraction of the post-transfer dispute cost.

Related at COGNOMEN

• Domain Transactions, Due Diligence, and Brand-Protection Monitoring — the full range of COGNOMEN transaction services
• How to Recover a Lapsed Domain in Finance — analysis of recovery options where a domain has lapsed or been re-registered
• URS vs. UDRP for .io Domains — a worked case study comparing suspension and transfer remedies across dispute forums