How to verify chain of title for a .au domain

How to verify chain of title for a .au domain. UDRP and ccTLD domain recovery and defense across .au. Email the firm to assess your case. Transparent fees, res…

A brand owner or domain investor identifies a .au domain that fits the business strategy perfectly. The registrant agrees to sell. Due diligence, though, turns up a gap — a prior transfer with no clear authorization, a lapsed registration that someone else picked up, and a disputed history that a quick WHOIS search would never reveal. That discovery, made before settlement, saves a significant acquisition from becoming a future dispute.

To verify chain of title for a .au domain, a buyer must trace the registration history through the .au registry records, check the auDRP dispute database and any prior complaint or court proceeding, confirm that each transfer in the chain was authorized by an eligible registrant, and review the current registrant's eligibility against Australia's auDA Policy requirements. A domain with a contested or unclear chain carries ongoing exposure: the auDRP — Australia's adaptation of the UDRP — allows a complainant to challenge a registration that was registered or used in bad faith, a standard that can reach back through multiple owners. Completing due diligence before acquisition is the only reliable way to assess that risk.

This page covers the governing rules, the chain-of-title checks that matter, common red flags, the escrow structure for a clean transfer, and what to do when the history is ambiguous.

What governs .au domain disputes and transfers?

The auDRP is the governing dispute procedure for .au domains, including .com.au, .net.au, .org.au, .asn.au, and co.au. It follows the UDRP's three-element test but treats the bad-faith limb as "registered or used" in bad faith in at least some of its applications — a meaningful difference from the cumulative "registered and used" standard under the UDRP. That distinction matters at the chain-of-title stage: a domain that was registered in good faith by an earlier holder can still draw a successful complaint if the current registrant uses it abusively. A buyer who inherits a domain with a problematic use history is not automatically insulated.

Eligibility is a further layer. auDA — the .au Domain Administration — requires registrants to maintain a documented Australian presence or relevant nexus for most second-level strings. A company must hold an Australian Business Number (ABN) or be incorporated in Australia for .com.au. If the selling registrant's eligibility lapsed at any point and was not corrected, the current registration may be vulnerable. We routinely identify eligibility gaps in pre-acquisition reviews that the seller has not considered — and that could give a future complainant a structural argument against the registration.

Beyond the auDRP, transfers of .au domains are subject to auDA's transfer policies, which require consent from the gaining and losing registrars and the current registrant. An unauthorized transfer in the chain — whether caused by account compromise, registrar error, or an informal side-deal — is a title defect that does not heal automatically.

How do you actually verify chain of title for a .au domain step by step?

Chain-of-title verification for a .au domain involves five distinct checks, each of which can surface a different category of risk. Running them in sequence, rather than in parallel, allows each finding to inform the next inquiry.

Step 1 — Pull the full registration history. The starting point is the current WHOIS/RDDS record, which identifies the registrant, the registrar, the creation date, and the expiry date. For .au, auDA's registry operator (currently Afilias/Identity Digital for the backend, with auDA as the policy authority) maintains records that a licensed registrar can query. The creation date tells you how old the registration is. It does not, by itself, tell you whether the registration was ever lapsed, dropped, or re-registered under a different eligibility basis. Ask the seller to provide the full chain: original registrant, every documented transfer, the eligibility basis used for each registration, and any lapse-and-reactivation events.

Step 2 — Search the auDRP dispute history. A prior auDRP complaint is a serious red flag, even if the complainant lost. A filed but unsuccessful complaint signals that at least one trademark holder believes the domain conflicts with its rights. If the complaint succeeded and the domain was transferred, the current seller must have acquired it after that transfer — and the circumstances of that post-transfer acquisition need scrutiny. We check the published auDRP decision database for the exact domain string and for typo variants that may indicate a pattern of behavior by an earlier holder.

Step 3 — Assess the eligibility record at each link in the chain. For each past registrant, determine whether they met auDA's eligibility requirements at the time of registration and throughout their holding period. A registrant whose ABN was cancelled during their holding period created an eligibility gap. That gap may or may not have been cured. Where it was not, the registration during that period was technically non-compliant, and a future complainant — or auDA itself — could raise the issue.

Step 4 — Review trademark conflict exposure. Search Australian trademark registers for marks that are identical or confusingly similar to the domain string. Also check the international register for marks with Australian designation. A domain acquired from a seller who had no trademark conflict may become conflict-exposed the moment you, the buyer, start using it in a sector where a registered mark exists. Chain-of-title verification therefore includes forward-looking trademark risk, not only backward-looking registration history.

Step 5 — Examine any court proceedings. auDRP is not the only route to challenge a .au domain. A trademark owner with a strong case may pursue injunctive relief in the Federal Court of Australia. Search the Federal Court's published judgments and any interim injunctions for the domain string and for the parties involved at each stage of the chain. A court order affecting the domain — even one that was ultimately discharged — is a material disclosure that a seller has an obligation to make and a buyer has an obligation to find.

For a structured due diligence review of a .au domain you are considering acquiring, contact info@cognomenlaw.com. We assess the chain, the dispute history, and the eligibility record before you commit.

What red flags signal a tainted .au domain?

Not every gap in a registration history is fatal. The question is whether the gap creates a realistic litigation or auDRP risk that the acquisition price does not reflect. In our practice, the red flags that consistently recur fall into four categories.

Multiple short-term holders. A domain that has changed hands three or four times in as many years warrants close attention. Frequent turnover suggests either a domain that was repeatedly dropped and re-registered by opportunistic registrants, or a domain that has been traded speculatively with minimal use. Either pattern can support a bad-faith argument if a trademark owner challenges the current holder.

A prior auDRP complaint that was withdrawn or settled. A withdrawn complaint is not a clean bill of health. Complainants sometimes withdraw when they reach a private settlement — which may include a transfer of the domain for value. If the seller's title derives from a settlement, understand the terms. A confidential settlement does not bind a different trademark owner who later asserts the same type of rights.

Eligibility-basis mismatch. A domain currently held by an individual under an "exact match or acronym of registered business name" basis, but previously held by a corporation under an ABN-linked basis, is using a different legal foundation than its predecessor. That shift is legitimate if properly documented. When the documentation is absent, it is a gap.

Passive holding with no documented use. The auDRP, like the UDRP, recognizes that passive holding can constitute bad faith in some circumstances — particularly where the domain is identical to a well-known mark and the holder offers no credible explanation for holding it. If the seller has held a high-value domain string for years with no discernible use, that dormancy may have left the door open to a future auDRP claim. A buyer who takes title and continues passive holding inherits that exposure.

In a recent matter — a .com.au acquisition review, summer 2025 — we identified two prior auDRP complaints against an earlier holder in the chain and an ABN lapse that was never formally corrected. The buyer renegotiated the price to reflect the litigation reserve that future defense would require. The deal closed, but on materially better terms than the seller's opening position implied.

How should a .au domain acquisition be structured to protect the buyer?

Structural protection in a .au domain acquisition operates at three levels: the contract, the escrow mechanics, and the post-transfer eligibility confirmation.

At the contract level, the purchase agreement should include representations from the seller on (1) the completeness of the chain-of-title disclosure, (2) the absence of any pending or threatened dispute, court proceeding, or auDA compliance action, (3) the seller's current eligibility under auDA policy, and (4) the absence of any encumbrance — lien, security interest, or prior transfer commitment — affecting the domain. Representations without an indemnity for breach have limited practical value. Negotiate a specific indemnity for any claim arising from pre-closing conduct.

At the escrow level, the domain should not transfer until the purchase price is held in a neutral escrow account and the registrar has confirmed that the transfer-auth (EPP auth code) is valid and the domain is unlocked. A buyer who wires funds before receiving the auth code is relying entirely on the seller's good faith. That reliance is appropriate for low-value informal transactions; it is not appropriate for a commercial domain acquisition of any significance. Use a recognized domain escrow service and confirm that the service operates under terms that protect both parties.

At the post-transfer level, confirm with the gaining registrar that the domain is now registered under your eligibility basis and that auDA's records reflect your details as current registrant. Request written confirmation. Update the WHOIS/RDDS record promptly. A domain sitting in limbo between registrars — technically transferred but not yet reflecting the buyer's details — can create a gap in the title record.

If you are in the middle of a .au acquisition and need a second read on the contract terms or the escrow structure, reach us at info@cognomenlaw.com.

How does the auDRP compare to the UDRP for a buyer's risk assessment?

The right route for resolving a post-acquisition dispute — or for a prior holder challenging the current registration — depends critically on the zone and the standard that applies. For .au, the auDRP is the primary arbitral route. For .com domains in the same portfolio, the UDRP governs. The practical differences matter.

Under the UDRP, a complainant must prove that the domain was registered and is being used in bad faith — a cumulative standard. A complainant who cannot show bad faith at the moment of registration faces a difficult case, even if the current use is problematic. The standard filing fee at WIPO is USD 1,500 for a single-member panel covering one to five domains, and a decision typically arrives within about two months.

Under the auDRP, the bad-faith limb reads "registered or used" — meaning that bad-faith use alone, without bad-faith registration, can in principle support a complaint. The practical effect is that a buyer who acquires a domain in good faith but then uses it in a way that infringes a trademark could face a viable auDRP complaint, even if the acquisition itself was blameless. That risk reinforces why forward-looking trademark conflict analysis — not only backward-looking chain-of-title review — is essential.

If a dispute spans a .com.au and a .com simultaneously, you may face parallel proceedings: auDRP for the ccTLD and UDRP at WIPO or the Forum for the gTLD. The standards are not identical, the timelines may diverge, and a finding in one proceeding does not bind the panel in the other. We have managed parallel proceedings in both postures — complainant and respondent — and the strategy for each track must be coordinated, not run independently.

For disputes that cannot be resolved by the auDRP — for example, where the complainant seeks damages, where the issue turns on a fine point of Australian trademark law, or where an auDRP decision is challenged — the Federal Court of Australia is the appropriate forum. That path requires engagement of local litigation counsel in the relevant jurisdiction and involves a substantially higher cost and timeline than the auDRP alone. It is the right route when the domain's value justifies it and when the auDRP remedy of transfer or cancellation is not sufficient.

What evidence decides an auDRP or post-transfer dispute?

Evidence in an auDRP proceeding follows a structure familiar from UDRP practice but calibrated to the Australian context. Understanding what decides cases shapes what a buyer should document before and after acquisition.

For the complainant, the critical evidence is: a registered Australian trademark (or a mark with Australian designation) predating the domain registration or the alleged bad-faith use; evidence of the domain's use in a way that exploits the mark (pay-per-click advertising on the mark, a redirect to a competitor, or a ransom-style buy-back demand); and evidence of the registrant's awareness of the mark, which is often shown circumstantially through the mark's reputation, media coverage, or the registrant's own correspondence.

For the registrant-respondent — and, by extension, for a buyer who inherits the domain — the critical evidence is: a documented legitimate interest that predates any notice of the dispute, such as a bona fide business use, a registered business name that matches the domain, or a prior non-infringing use that is consistent with the auDRP's safe harbors; the eligibility record at every point in the holding period; and, where the chain involves multiple transfers, each authorization document.

In a recent matter — a .com.au respondent defense, early 2025 — we assembled a legitimate-interest record from a client's archived business-name registration, historical website screenshots, and ABN registration data covering the entire holding period. That record, presented in the response, was sufficient to defeat the complaint without needing to address the bad-faith question directly. The foundation for that defense existed because the client had maintained organized records. Buyers who do not document their own acquisition and use from day one may find that evidence is unavailable when they need it most.

What does a .au domain due diligence review cost and how long does it take?

Cost and timeline depend on the complexity of the chain. A straightforward acquisition — single registrant, no prior disputes, current ABN on file, and a short registration history — can be reviewed within a few business days. A domain with multiple prior holders, an auDRP complaint on record, and an eligibility question may take longer and require a registrar query and, in some cases, a registry-level inquiry.

Legal fees for a pre-acquisition due diligence review of a .au domain are fact-dependent. Market rates for this type of specialist review are generally in the low-to-mid four-figure range (USD) for a standard single-domain matter, separate from any escrow service or registrar fees. If the review surfaces a dispute risk that requires a formal auDRP opinion or a trademark clearance analysis, that work is scoped separately. We present fee estimates before beginning work, and the scope is defined in writing.

For context: the auDRP filing fees are set by the provider and are distinct from legal fees. No official auDRP filing fee schedule appears in our verified data for this page; confirm the current provider fee schedule with your counsel before filing.

The cost of skipping the review is typically far higher. An auDRP proceeding — even a successful defense — consumes time and legal resources. A court action is substantially more expensive. And a domain that must be returned to a prior holder or a complainant after you have built a business on it represents a loss that no indemnity from a defaulted seller can fully cure.

• Domain transactions, due diligence, and brand protection at COGNOMEN — the full menu of acquisition, escrow, and monitoring services.
• Recovering a lapsed domain in the US — the procedure and risk profile when a domain has dropped and been re-registered by a third party.
• FAQ: recovering a stolen .net domain — understanding account compromise, registrar escalation, and transfer reversal.