How to prove bad faith registration of a .org domain

How to prove bad faith registration of a .org domain. UDRP and ccTLD domain recovery and defense across .org. Email the firm to assess your case.

A stranger registers the .org version of your organization's name, points it at a rival site, and ignores your outreach. You want the domain transferred. The central question – the one a UDRP panel will decide – is whether you can prove bad faith registration of a .org domain under the Policy that governs it.

The .org zone is a generic top-level domain administered by the Public Interest Registry and governed by the UDRP for dispute resolution. To obtain a transfer you must satisfy all three elements of Paragraph 4(a): confusing similarity to a mark you hold, the registrant's lack of rights or legitimate interests, and registration and use in bad faith. A standard WIPO case runs about two months; the filing fee for a single-member panel starts at USD 1,500. The only remedies are transfer or cancellation – no monetary award is available under the Policy.

This page covers the legal test in full, the evidence that decides the outcome, the choice of forum, and what a realistic next step looks like for a brand owner or organization ready to file.

Why .org disputes are decided under the UDRP

The .org zone operates under the UDRP because the registry for .org, like all ICANN-accredited gTLD registries, is contractually bound to the Policy. That means WIPO, the Forum, CAC, and ADNDRC are all available as dispute-resolution providers. In our practice, WIPO handles the overwhelming majority of .org cases – its neutrality, its panelist pool, and its published jurisprudence make it the default choice for most complainants.

What does this mean practically? It means a brand owner does not need to file in court, does not need to identify a jurisdiction, and does not need to serve the registrant personally. The process is paperless, conducted in writing, and resolved by an appointed panelist – or a three-member panel where the stakes or complexity justify the higher cost. The UDRP covers .org, .com, .net, and other generic zones identically. The doctrine a panel applies to a .com case applies in full to a .org dispute.

One point to keep in mind: the UDRP does not care about the registrant's physical location. Whether the domain is registered in the United States, Eastern Europe, or Southeast Asia, the same Paragraph 4(a) test governs. Cross-border disputes under the UDRP are the rule, not the exception.

What are the three UDRP elements you must prove in a .org case?

To prevail in a .org UDRP complaint you must prove all three elements of Paragraph 4(a) – and all three, not just two, must be established on the balance of probabilities before a panel will order a transfer or cancellation.

Element 1: Confusing similarity to a mark you hold. Your trademark or service mark – registered or, in many panels' consensus view, sufficiently established through common-law use – must be identical or confusingly similar to the disputed domain name. Panels typically compare the alphanumeric string of the domain against your mark, stripping the TLD as a generic and non-distinctive suffix. A domain that adds a generic word (such as "info" or "official") to your mark is almost always found confusingly similar. The first element is routinely the easiest to meet.

Element 2: No rights or legitimate interests. You bear the initial burden on this element, but the consensus view under the Policy is that a complainant satisfies it by making out a prima facie case. The burden then shifts to the registrant to produce evidence of one of the three safe harbors in Paragraph 4(c): a bona fide offering of goods or services before notice of the dispute; being commonly known by the domain name; or legitimate noncommercial or fair use without intent to mislead. If the registrant does not respond – as occurs in a significant share of .org cases – the panel draws reasonable inferences from the record.

Element 3: Registration and use in bad faith. This is the crux of most contested cases. The word "and" is cumulative; you must show both that the domain was registered in bad faith and that it is being used in bad faith. Paragraph 4(b) of the Policy sets out four non-exhaustive circumstances panels treat as evidence of bad faith: acquisition primarily to sell to the mark owner at above-cost; registration to disrupt a competitor; registration to attract users by confusion for commercial gain; and a pattern of abusive registrations across multiple domains.

At this stage the question is usually whether your evidence maps cleanly onto those circumstances. For a read on whether the three UDRP elements are met in your specific .org dispute, reach us at info@cognomenlaw.com.

How do you prove bad faith registration of a .org domain – the evidence that decides cases?

Proving bad faith registration is an evidence-assembly problem. The Policy lists indicators; panels look for documentary proof that the registrant knew of your mark at the moment of registration and acted on that knowledge to gain an improper advantage.

The most persuasive single piece of evidence is a registration date that post-dates your mark's commercial use or filing. If your organization launched a recognizable brand years before the domain was registered, panels routinely infer bad-faith registration when the domain closely replicates that brand. The inference becomes near-conclusive when the registrant then uses the domain to redirect users to a competitor, to host sponsored links keyed to your brand, or to solicit payment from you directly.

Other commonly relied-upon categories of evidence include:

• Screenshots and archived captures of the domain resolving to pay-per-click advertising pages built around your brand name or its competitors.
• Correspondence – email or otherwise – in which the registrant offered to sell the domain for a price that materially exceeds documented out-of-pocket registration costs.
• WHOIS or RDDS records showing the registrant holds multiple domains incorporating third-party marks in a systematic pattern.
• Evidence that the domain is used for a phishing scheme, credential harvesting, or brand impersonation – conduct panels consistently treat as paradigm bad faith.
• A long period of passive holding with no active use and no apparent legitimate purpose, especially where your mark is well-known and the domain has no obvious non-infringing use.

In a recent matter – a .org cybersquatting complaint filed in winter 2025 – we assembled evidence of post-mark registration, a WHOIS record linking the registrant to approximately a dozen other abusive registrations, and a pay-per-click page monetizing confusion with our client's nonprofit name. The panel transferred the domain in roughly eight weeks. No supplemental filings were needed.

What about passive holding? Panels have long recognized that a domain need not actively resolve to infringing content for bad-faith use to exist. Where the mark is distinctive, the registrant cannot claim any plausible legitimate use, and the domain sits dormant, the circumstantial record alone can support a finding. We regularly advise brand owners who encounter this pattern to document the absence of legitimate use as carefully as any affirmative misconduct.

Which forum should you use – WIPO, the Forum, or CAC?

For a .org dispute, the complainant chooses the forum – and that choice has practical consequences for cost, timeline, and panelist pool.

WIPO is the most frequently chosen provider for .org cases. Its filing fee for a single-member panel covering one to five domains is USD 1,500; a three-member panel costs USD 4,000 for the same range. WIPO's published timeline from filing to decision runs approximately two months for a single-member case with no procedural complications. WIPO also offers an expedited option completing a single-panel case of up to five domains in about one month – useful where the registrant's conduct is causing active, measurable harm.

The Forum's filing fees begin at approximately USD 1,300 for one to two domains on a single-member panel. Its case-processing timelines are broadly comparable to WIPO's. Some complainants in the United States choose the Forum based on familiarity; panelist pools and the applicable Policy are the same.

CAC is the lowest-cost entry point, starting at approximately USD 500–800. It is the least frequently chosen of the four providers and carries a smaller panelist pool. For a high-value .org with significant brand harm, most practitioners default to WIPO or the Forum.

The decision matrix for a .org dispute is this: if your case is straightforward – clear post-mark registration, obvious bad-faith use, a domain or small group of domains – file a single-member complaint at WIPO. If the registrant has a documented track record of contesting complaints or the facts are genuinely complex, request a three-member panel at the outset. If budget is the binding constraint and the case is unambiguous, CAC is a defensible alternative. What you should not do is choose a provider based on a perceived "home advantage" – panel decisions under the UDRP are governed by the Policy, not by the provider's geography.

One cross-zone point: if the same bad actor has also registered the .com or a ccTLD version of your mark, a single UDRP complaint can cover multiple domains only where the registrant is the same holder. For a .de or a .uk held separately, you would need the governing national procedure – the German courts in the case of .de, the Nominet DRS in the case of .uk. We handle each route and can assess which combination of filings gives you the broadest recovery.

To weigh UDRP against a court action for your .org case, or to assess a multi-domain filing strategy, email info@cognomenlaw.com.

What happens if the registrant responds and contests the complaint?

A contested .org UDRP case is decided on the written record alone – no live hearing, no cross-examination. The registrant has 20 days from the commencement date to file a response. If no response is filed, the panel decides on the complaint and any supporting evidence; default does not mean automatic transfer, but it substantially narrows the registrant's ability to establish a legitimate interest.

When a response is filed, the panel weighs the competing records against the three elements. Bad-faith registration is not rebutted simply by asserting a legitimate use; the registrant must produce credible evidence of one of the Paragraph 4(c) safe harbors or offer a coherent narrative that dismantles the complainant's bad-faith case. Panels have consistently held that merely claiming coincidental adoption of a mark-identical domain, without corroborating documentation, does not meet that burden.

Three-member panels are available on request from either party. If the complainant requested a single panelist but the respondent requests three members, the parties generally split the higher three-member fee. In a case where the registrant is likely to mount a substantive defense, securing a three-member panel offers redundancy: a dissent or a tie is resolved by majority, and a three-member decision carries greater precedential weight in the ecosystem.

A panel ruling against you as a complainant is not subject to mandatory appeal within the UDRP; the losing complainant would need to pursue a court action to challenge a panel's adverse finding. For that reason, building the strongest possible complaint at the outset – rather than rushing to file – is the practical priority. We have defended registrants against weak complaints and secured RDNH findings in cases where the complainant clearly overreached. A poorly assembled complaint carries a reputational cost that goes beyond the immediate case.

What are the costs and realistic timeline for a .org bad-faith complaint?

The total cost of a .org UDRP complaint has two distinct components: the official forum filing fee and the legal fee for preparing and filing the complaint. These are always separate.

Official filing fees are set by the provider. At WIPO, a single-member panel for one to five .org domains costs USD 1,500; a three-member panel for the same range costs USD 4,000. At the Forum, fees start at around USD 1,300 for a single-member case covering one or two domains. If you withdraw or settle before panel appointment, WIPO generally refunds a substantial portion of the filing fee – commonly around USD 1,000 of a USD 1,500 payment.

Legal fees for preparing a UDRP complaint – gathering and structuring the evidence, drafting the complaint document, liaising with the forum on procedural requirements – typically fall in the USD 3,000–7,000 range for a single-domain, straightforward case, separate from the filing fee. Complex multi-domain matters, cases with extensive trademark history, or matters requiring translation of foreign-language evidence will sit toward the upper end of that range or above it.

On timeline: from filing to decision, a standard WIPO single-member case runs approximately two months. The expedited option at WIPO, available for single-panel cases of up to five domains, targets roughly one month from commencement to decision. The registrar implements the transfer order within a short period after the decision is published, absent a court challenge from the registrant.

In a matter we handled in spring 2025 – a .org passive-holding case involving a nationally recognized nonprofit brand – the total elapsed time from our initial evidence review to registrar implementation of the transfer order was under eleven weeks. No court challenge was filed.

Can the registrant challenge a UDRP transfer order in court?

Yes. The UDRP is a contractual arbitration mechanism, not a court judgment. A registrant who loses before a UDRP panel can file a court action in a competent jurisdiction within ten business days of the decision to stay the transfer. If that court action is filed, the registrar holds the domain pending the court's resolution. The UDRP decision is then superseded by the court's ruling.

In practice, court challenges to UDRP transfer orders are relatively rare. The economics of litigating in court over most .org domains do not favor the losing respondent, and panels' findings of bad faith tend to hold up under judicial scrutiny where the evidentiary record is solid. The genuine risk is in the other direction: a complainant who wins on all three elements at UDRP but faces a well-resourced respondent willing to litigate should factor that possibility into strategy from the outset.

Where the registrant's conduct involves active fraud – impersonation, phishing, credential harvesting – a parallel court action for injunctive relief or damages may be warranted, handled with local litigation counsel in the relevant jurisdiction. The UDRP and a court action are not mutually exclusive; they address different remedies. The UDRP gets the domain back; a court action can address monetary harm that the Policy cannot reach.

Related at COGNOMEN

• UDRP Domain Recovery – full service overview for complainants and respondents
• Case study: recovering a phishing domain – strategy and outcome
• ccTLD eligibility analysis – when national procedures apply alongside UDRP