How to recover a .org domain after a failed buy-back negotiation

How to recover a .org domain after a failed buy-back negotiation. UDRP and ccTLD domain recovery and defense across .org. Email the firm to assess your case.

You found the registrant. You made a reasonable offer. They either ignored you, demanded a sum that bore no relationship to your brand's value, or strung negotiations out until you realized they were never going to sell at a fair price. Now the .org domain still points somewhere it should not, and every day it does, your brand takes another hit. The buy-back route has failed. What comes next?

When a private negotiation breaks down, the UDRP – the Uniform Domain-Name Dispute-Resolution Policy administered through WIPO and other accredited forums – is the primary recovery route for .org domains. You must satisfy all three elements of Paragraph 4(a): confusing similarity to a mark you hold, no legitimate interest on the registrant's side, and registration and use in bad faith. A standard case runs about two months, the WIPO filing fee starts at USD 1,500 for a single-member panel, and the only remedies are transfer or cancellation.

This page explains why a failed negotiation actually strengthens your UDRP file, what evidence you need to win, how the process works end to end, and when a court action or a different forum makes more sense than WIPO.

Why .org sits squarely inside the UDRP

The .org top-level domain is a generic TLD administered under ICANN's accredited-registrar system, which means every .org registration is subject to the UDRP as a condition of that registration. There is no separate national procedure to check, no registry eligibility requirement that might knock you out of the process, and no need to establish an EU or local presence. If you have trademark rights and the registrant cannot justify holding the name, the UDRP applies.

WIPO is the dominant forum for .org disputes, handling the large majority of all UDRP filings across every gTLD zone. The Forum (formerly the National Arbitration Forum) and the Czech Arbitration Court (CAC) also accept .org complaints. Each applies identical substantive rules – the same three-element UDRP test – but they differ in process, panel depth, and fee structure. For most .org matters, WIPO is the default choice, and we typically start there when recommending a forum for a client in this position.

What the registrant agreed to when the domain was registered matters here. Every ICANN-accredited registrar requires the registrant to submit to UDRP jurisdiction as a condition of registration. The registrant cannot later argue that they never agreed to the process. That contractual submission is the jurisdictional footing on which your complaint stands.

How does a failed negotiation help your UDRP case?

A documented buy-back attempt that ended in a demand for a price clearly exceeding out-of-pocket registration costs is one of the most powerful pieces of bad-faith evidence available under Paragraph 4(b) of the UDRP. Specifically, Paragraph 4(b)(i) identifies as a bad-faith circumstance the registration of a domain primarily for the purpose of selling it to the trademark owner – or a competitor – for a sum in excess of documented out-of-pocket costs. The registrant's own demand, in writing, is often enough to satisfy that limb on its own.

This matters because the negotiation record you built during the failed buy-back is now your evidence file. Every email thread, every counter-demand, every instance of the registrant invoking your brand's value as the justification for the price – all of it goes into the complaint. We organize that record chronologically and cross-reference it against the relevant UDRP paragraph before filing. Panels have consistently held that a demand referencing the complainant's revenue or brand fame, rather than the registrant's costs, is direct evidence of opportunistic registration.

There is a secondary effect. A prolonged negotiation with no sale is itself a form of passive holding in bad faith. The domain sits, accumulates value in the registrant's hands, and prevents your organization from using it. Panels have recognized that passive holding – particularly where the registrant has no plausible independent use for the name – satisfies the "use" limb of the bad-faith element even without active monetization.

For a read on whether the three UDRP elements are met on your specific facts, reach us at info@cognomenlaw.com.

What are the three UDRP elements you must prove?

You must satisfy all three elements of Paragraph 4(a) of the UDRP; a strong showing on two does not rescue a weak showing on the third. Here is how each element maps to the typical failed-negotiation scenario.

Element one: confusing similarity to your mark. This is almost always the easiest limb. Panels compare the disputed domain with your trademark on a visual and phonetic basis, stripping out the TLD suffix. If the .org domain reproduces your brand name in full, or adds only a generic term or a typosquatted variant, panels routinely find this element met. Your trademark registration date relative to the domain registration date matters to the bad-faith analysis more than to this first element, which is largely a textual comparison.

Element two: no rights or legitimate interests. The UDRP places the initial burden of production on you as complainant, but it is a light burden – you raise the issue, and the burden shifts to the registrant to come forward with evidence of a Paragraph 4(c) safe harbor. The three safe harbors are: a bona fide offering of goods or services before any notice of the dispute; being commonly known by the domain name; or legitimate noncommercial or fair use. A registrant who demanded a five-figure sum from you during negotiations has a hard time claiming a bona fide offering or fair use. The negotiation record undermines each safe harbor in sequence.

Element three: registered and used in bad faith. This is cumulative – both conditions must be true. Registration in bad faith means the registrant targeted your mark at the moment of acquisition. Use in bad faith covers the range from active click-through parking to the passive holding scenario described above. The buy-back demand closes the loop on both: it proves the registrant's intent at or shortly after registration and its continued opportunistic posture.

What does the UDRP process look like from filing to transfer?

A UDRP case runs through five defined stages: complaint filing, response period, panel appointment, decision, and registrar implementation. Understanding the clock matters when your .org is sitting dormant – or worse, redirecting traffic – while you wait.

Filing begins with the complaint document, submitted to WIPO's online portal with the USD 1,500 filing fee for a single-member panel covering one to five domains. WIPO reviews it for formal compliance – not on the merits – and, once it passes, formally commences the case and notifies the registrant. That notice starts the 20-day response window. If the registrant files no response, the case proceeds as a default; the panel still examines the complaint on the merits but without the benefit of the other side's arguments.

After the response (or default), WIPO appoints a panelist from its roster. Most single-panel cases produce a decision within the overall roughly two-month window from filing to decision. Three-member panels – available at a higher fee of USD 4,000 at WIPO – take somewhat longer and are worth the additional cost when the domain is high-value or the legal issues are genuinely complex.

Once the panel issues a decision ordering transfer, the registrar is notified and implements the order after a short standard waiting period that allows the registrant to challenge the decision in a national court. Almost no one files that challenge. The domain moves to your account.

In a recent matter – a .org cybersquatting complaint filed in early 2025, where the registrant had made a written demand tying the price to our client's annual revenue – we received a transfer order in under nine weeks from filing. The registrant defaulted, but the panel conducted a full three-element review and found bad faith on all grounds based on the evidence in the complaint alone.

What evidence actually decides a .org UDRP case?

Evidence is where most self-filed complaints underperform. A complaint that states the law correctly but assembles the evidence loosely loses to a well-defended respondent – and sometimes loses even on default if the panel is not satisfied on the merits.

The core evidence package for a failed-negotiation .org case covers five areas. First, trademark proof: a registration certificate covering the relevant mark, or evidence of unregistered rights – consistent use in commerce, brand recognition, and first-use dates. Second, a comparison exhibit: a side-by-side of your mark and the disputed domain, including any additional terms the registrant appended. Third, the negotiation record: every communication, ideally showing the registrant's awareness of your mark and their demand methodology. Fourth, registration-intent evidence: WHOIS/RDDS historical data, any prior use of the domain, and a review of what the domain resolved to at the time of registration and since. Fifth, the harm narrative: screen captures of the current landing page, any misdirected traffic data you can document, and any consumer confusion incidents.

We review the WHOIS/RDDS history for signs of domain speculation – multiple registration cycles, prior complaints against the same registrant, or portfolio patterns. Panels have noted that a registrant with a history of acquiring third-party marks across multiple domains satisfies the Paragraph 4(b)(ii) pattern-of-conduct ground independently of the specific bad-faith circumstances the complainant relies on. That history, if it exists, amplifies your file significantly.

If you have the negotiation record in hand and want an assessment of whether the file is ready to file, email us at info@cognomenlaw.com.

Which forum should you choose for a .org complaint – WIPO, the Forum, or CAC?

All three forums apply the same UDRP rules, but the practical differences affect cost, speed, and panel depth. The right choice depends on the value of the domain and the complexity of the dispute.

WIPO is the reference choice for most .org matters. It maintains the largest and most internationally diverse panel roster, publishes a detailed WIPO Overview that panels routinely cite, and offers an expedited single-panel option for cases involving up to five domains that can deliver a decision in approximately one month. WIPO and the Forum together account for roughly 97% of all UDRP proceedings. For high-value .org disputes where the legal questions are genuinely contested, WIPO's roster depth is worth the standard fee.

The Forum offers a comparable filing process at a starting fee of around USD 1,300 for one to two domains on a single-member panel. It is well-established and frequently used by US-based complainants. Its panel decisions are searchable and consistent with WIPO's core doctrine.

The Czech Arbitration Court (CAC) enters at the lowest fee point – roughly USD 500–800 – which makes it worth considering for lower-value domains where cost efficiency matters and the facts are straightforward. It is the least-used of the three for .org matters, but it applies the same substantive rules.

What about a three-member panel? If you anticipate a contested response – for example, the registrant has already engaged counsel and signaled they will defend – a three-member panel at WIPO costs USD 4,000 and provides a collegial decision that is harder to attack. If the registrant requests a three-member panel after you file for a single panelist, the parties generally split the higher fee. We evaluate this election case by case; it is not automatic.

When is a court action the better route than the UDRP?

The UDRP is not the only tool. Sometimes it is not the right one. Understanding the limits of UDRP adjudication before you file prevents a costly procedural mismatch.

The UDRP's remedies are strictly limited to transfer or cancellation of the domain. No monetary damages. No injunction against the registrant's broader conduct. No recovery of profits earned during the period of infringement. If you want any of those remedies – for example, because the registrant redirected .org traffic to a competing site and you suffered documented revenue loss – a UDRP complaint does not reach them. A US anticybersquatting court action, handled with local litigation counsel in the relevant jurisdiction, is the path to damages. It is substantially more expensive and slower, but it is the only route to money.

A court action also becomes necessary when the registrant's identity is genuinely unknown and you need formal discovery to identify them, or when the registrant has filed a pre-emptive lawsuit against you in a favorable jurisdiction and the UDRP's concurrent-jurisdiction rules create a complication. In those scenarios, litigation and the UDRP may run in parallel or sequentially depending on strategy.

There is a third scenario worth naming. If the registrant holds both a .org and a matching .com – or a cluster of domains across gTLDs – a single UDRP complaint can cover all of them provided the registrant of record is the same holder. A multi-domain complaint at WIPO costs more (fees step up with domain count), but it resolves the cluster in a single proceeding. We regularly advise clients on whether to consolidate or sequence complaints when a bad-faith registrant holds several variants of the same brand name.

In a recent matter – a .org and .net cluster, spring 2025, where the same registrant had held approximately eight domain variants of our client's mark – we consolidated all domains into a single WIPO complaint, demonstrated the pattern-of-conduct ground under Paragraph 4(b)(ii), and secured transfer of the full cluster in one decision.

What happens after the transfer order – and what can go wrong?

A UDRP transfer order is not self-executing. The registrar implements it, but the registrant has a short window in which to file a court action in a competent jurisdiction to stay the transfer. This rarely happens; the cost and jurisdiction questions make it impractical for most bad-faith registrants who were never planning to defend on the merits. In practice, the domain moves to your designated account within a matter of days after the waiting period expires.

What can delay or complicate transfer? A few scenarios deserve attention. If the domain has been transferred to a different registrant – not just a different account – between complaint filing and decision, the case may need to be amended or refiled. This is an unusual but documented maneuver. Document the current WHOIS/RDDS status at filing and at every stage of the proceeding. If the domain resolves to a site that was actively operating during the proceeding and that operation constituted consumer fraud or a criminal matter, a parallel referral may be appropriate.

Registrar cooperation is also a variable. ICANN-accredited registrars are contractually obligated to implement UDRP decisions. Virtually all comply. Where a registrar is slow or unresponsive, ICANN's Contractual Compliance function is the escalation path – but in our practice, the need to use it is rare.

Once the domain is in your account, check its technical configuration before pointing it anywhere. A domain that sat in a bad-faith registrant's hands for months or years may carry a history of misdirected traffic, indexed pages you do not want, or a legacy DNS configuration that needs to be reset. A brief due-diligence review of the domain's technical and reputational status before you go live is time well spent.

Related at COGNOMEN

• UDRP Domain Recovery – the full service overview for gTLD complainants
• Guide: How to prove bad faith in a domain dispute – evidence and standards
• Guide: When and how to request a three-member UDRP panel