How to recover a .store domain after a failed buy-back negotiation

How to recover a .store domain after a failed buy-back negotiation. UDRP and ccTLD domain recovery and defense across .store. Email the firm to assess your cas…

You offered to buy the domain back. The registrant either ignored you, demanded a price that bore no relationship to the name's fair market value, or simply walked away. The negotiation is over. Now you need a different route — and the UDRP is almost certainly it.

To recover a .store domain after a failed buy-back negotiation, file a UDRP complaint at WIPO or another accredited forum. The .store registry operates under ICANN's accreditation rules, which means the UDRP applies in full. You must prove all three elements of Paragraph 4(a): confusing similarity to a mark you hold, no legitimate interest on the registrant's part, and registration and use in bad faith. A standard case takes roughly two months; the WIPO filing fee for a single-member panel starts at USD 1,500. The only remedies are transfer or cancellation — no damages, no costs.

This page covers every stage of that process: the applicable rules, the evidence that decides outcomes, the cost structure, and the cross-zone decisions a brand owner must make when the buy-back route closes.

Why does the UDRP apply to .store domains?

The .store extension is a generic top-level domain (gTLD) operated under an ICANN registry agreement. That agreement requires the registry to enforce the UDRP for every .store domain registered through any accredited registrar. There is no separate national procedure, no gateway eligibility check tied to a country, and no opt-in. If you hold trademark rights and the domain is a .store, the UDRP is available to you from day one.

This is a meaningful difference from ccTLDs such as .de or .uk. For a .de domain there is no UDRP at all; the dispute belongs in the German courts, with a DENIC DISPUTE entry to block transfer while you litigate. For .uk, Nominet runs its own DRS with a distinct legal test. For .store, you file at WIPO, the Forum, CAC, or ADNDRC under the standard three-element Policy — the same rules that govern .com, .net, and every other gTLD. The forum choice is yours, though WIPO and the Forum together handle roughly 97% of all UDRP proceedings and are the natural starting points.

A failed buy-back negotiation is not merely a background fact. It is evidence. When a registrant demanded a price clearly above out-of-pocket registration costs, that conduct falls squarely within Paragraph 4(b)(i) of the Policy — one of the enumerated bad-faith circumstances. The higher the demand, the stronger the inference.

For an assessment of whether your .store dispute meets the three UDRP elements, contact info@cognomenlaw.com.

What are the three UDRP elements you must prove?

A panel will transfer or cancel a .store domain only if the complainant satisfies all three elements of Paragraph 4(a) of the UDRP. A strong showing on two elements does not carry a case where the third is weak.

Element one — confusing similarity. The domain must be identical or confusingly similar to a trademark in which you have rights. Panels apply this element mechanically: strip the TLD, compare what remains to your mark. A domain that reproduces your mark in full is almost certainly identical. Minor additions — a hyphen, a generic word, a geographic modifier — typically still produce confusing similarity. Your mark does not need to be registered; established common-law rights can suffice, though registered marks generate cleaner evidence.

Element two — no rights or legitimate interests. The complainant carries the burden here, but the burden is light because direct evidence of a negative is difficult to obtain. Panels accept a prima facie case that shifts the burden to the registrant to demonstrate a legitimate interest under Paragraph 4(c): a bona fide offering of goods or services before notice of the dispute, being commonly known by the domain, or a legitimate noncommercial or fair use. A registrant who demanded a five-figure sum in buy-back negotiations typically cannot credibly invoke any of those safe harbors.

Element three — registration and use in bad faith. This is the cumulative test. The domain must have been registered in bad faith and be used in bad faith. Paragraph 4(b) lists non-exhaustive indicators: registration primarily to sell to the mark owner at a profit; a pattern of abusive registrations; using the domain to attract users for commercial gain by trading on confusion. A documented buy-back demand at an inflated price is direct evidence of the first indicator. Parking the domain with pay-per-click links to your competitors covers the third. Passive holding — doing nothing with a domain that reproduces a well-known mark — also qualifies under the consensus view, even absent active use.

In our practice we review the buy-back correspondence carefully before filing. The registrant's own words are often the most useful exhibit in the complaint.

How does the UDRP process work from filing to transfer?

A UDRP proceeding has five stages, each with a defined timeline that the parties cannot extend unilaterally.

Stage one — complaint preparation and filing. The complaint must identify the disputed domain, the trademark rights relied on, the forum, the panelist preference (one or three members), and the remedies sought. It must address all three elements with supporting exhibits. A thin complaint that assumes the panel will infer bad faith rarely succeeds; a complaint supported by the buy-back correspondence, WHOIS records, screenshots of the registrant's use, and a trademark registration certificate is far stronger.

Stage two — formal review and commencement. The chosen provider — WIPO, the Forum, CAC, or ADNDRC — checks the complaint for administrative compliance and notifies the registrant. The 20-day response window runs from commencement, not from the day you file. Registrants who default do not automatically lose, but a panel draws adverse inferences from an absence of any explanation.

Stage three — panel appointment. For a single-member panel the provider appoints one neutral. For a three-member panel, each party nominates three candidates and the provider selects one from each list plus an independent chair. Three-member panels cost more — USD 4,000 at WIPO — but can be tactically useful when the case involves a genuinely complex bad-faith question or a respondent with resources to challenge the outcome.

Stage four — decision. The panel reviews submissions, applies the three elements, and issues a written decision. Most decisions are published on the provider's website. A standard case reaches a decision within roughly two months of filing; WIPO's expedited option can deliver a result within about one month for single-panel cases covering up to five domains.

Stage five — registrar implementation. Following a transfer order, the registrar locks the domain and implements the transfer after a brief waiting period. The registrant may seek court review in the relevant jurisdiction during that window, but few do.

In a recent matter — a .store cybersquatting complaint, autumn 2024 — we filed after buy-back negotiations broke down over a six-figure demand and obtained a transfer order in approximately nine weeks, with the registrant defaulting after receiving the complaint.

What evidence actually decides a .store UDRP outcome?

The strength of a complaint is determined almost entirely by the quality of its evidence. Panels cannot conduct independent investigations; they decide on the record the parties create.

The buy-back correspondence is usually the pivotal exhibit. Screen-captured email chains or broker messages showing an inflated demand, a refusal to negotiate, or an explicit statement that the domain would be sold to the highest bidder go directly to Paragraph 4(b)(i). Preserve every exchange — email, SMS, WhatsApp, broker platform messages — and submit them in a format the panel can read without a specialist application.

Screenshots of the domain's landing page are equally important. A parking page with pay-per-click links, a placeholder page with the registrant's contact for sale inquiries, or a redirect to a competitor all support the bad-faith and no-legitimate-interest elements. Take the screenshots before filing. Registrants sometimes swap the landing page once they receive the complaint.

Trademark evidence must be current and legible. A printout from the relevant trademark office database, showing your mark, its registration date, and the goods or services covered, is the minimum. If the domain was registered after your mark, chronology alone answers much of Element three. If the registration predates your mark, the analysis is harder but not necessarily fatal — constructive notice, common-law rights at the time of registration, and the registrant's conduct can still establish bad faith.

WHOIS or RDDS data showing the registrant's contact information, registration date, and any prior ownership is standard supporting evidence. Historical WHOIS records — available through commercial tools — can reveal a pattern of registrations that supports a Paragraph 4(b)(ii) finding.

What panels do not want to see: argument that substitutes for evidence, speculation about the registrant's motives without supporting facts, or trademark claims that are not accompanied by the underlying registration certificate or equivalent. We advise clients to treat the complaint like a sworn affidavit — every factual assertion needs a supporting exhibit.

If a prior filing or response produced a bad outcome, a focused second read can find the element that was missed. Email info@cognomenlaw.com to discuss refiling or remedying a deficient complaint.

What does a .store UDRP recovery cost?

The cost has two components that are entirely separate: the forum filing fee and the legal fee. Neither is hidden at COGNOMEN, and understanding both is essential before you decide to proceed.

Forum filing fees are set by the provider and are not negotiable. At WIPO, the filing fee for a single .store domain on a single-member panel is USD 1,500. A three-member panel at WIPO costs USD 4,000. The Forum's entry-level fee for one to two domains begins around USD 1,300; CAC is the lowest-cost provider, beginning around USD 500–800. WIPO offers a partial refund of approximately USD 1,000 of the standard USD 1,500 fee if the case is withdrawn or terminated before panel appointment — useful if the registrant resolves the dispute after seeing the complaint.

Legal fees are separate from filing fees and depend on the complexity of the case. For a straightforward single-domain UDRP complaint, market rates typically fall in the USD 3,000–7,000 range as a flat fee. A case with multiple domains, contested bad-faith facts, or a respondent who files a detailed response sits toward the higher end of that range. We quote fixed fees for standard matters so the budget is clear before work begins.

The right forum choice can affect both cost and speed. WIPO's expedited option is worth considering if the infringement is causing active, measurable harm and a one-month timeline is worth the standard WIPO fee. The Forum is a solid alternative for US-based complainants. CAC's cost advantage is real, but its caseload and panel pool are smaller. For a single .store domain with clear bad-faith evidence, the difference in outcome between providers is unlikely to be significant; the difference in cost is.

Weigh this against the alternative. If the domain is diverting your customers, damaging your brand's search presence, or being used to intercept your business email, the cost of a UDRP complaint is modest relative to the ongoing harm. A court action — if you need it — costs substantially more and takes far longer.

Is the UDRP always the right route, or should you consider other options?

For a .store domain the UDRP is almost always the correct starting point. But a few situations shift the calculus.

If you want monetary damages, the UDRP cannot help you. Transfer and cancellation are its only remedies. US anticybersquatting litigation, pursued through the federal courts with local litigation counsel, is the route to damages — but it costs substantially more and moves on a far longer timeline. The decision between UDRP and court for a .store domain held by a US-based registrant typically comes down to whether damages matter enough to justify the additional cost and delay.

If the registrant has registered both the .store domain and a .com or .uk version of your mark, a single UDRP complaint can cover multiple domains only if the registrant of record is the same holder. A coordinated filing covering all infringing domains at once — both the .store and the .com — is often the most efficient path. We have advised clients on exactly this situation, where a counterpart used privacy-masked registrations across four gTLDs before a common underlying holder could be identified from the buy-back correspondence itself.

If the domain is actively being used to impersonate your business — collecting payments, sending fraudulent email from the .store address, or redirecting your customers to a competitor — domain theft or account-compromise recovery procedures may apply alongside, or instead of, a UDRP complaint. That is a different service with a different escalation path through the registrar.

For purely domestic disputes in certain markets, the Uniform Rapid Suspension system (URS) is another option for new gTLDs — it suspends the domain at lower cost but does not transfer ownership. For a brand owner who needs the domain itself, URS is rarely the right choice; UDRP transfer is the goal.

The decision matrix, in brief: .store domain + bad-faith registration + buy-back demand → UDRP at WIPO or the Forum, single-member panel unless the case is complex. Multiple gTLD registrations by the same registrant → consolidated complaint. Need for damages → US anticybersquatting litigation with local counsel alongside or instead of UDRP. Account compromise or outright theft → registrar escalation first, then UDRP if the underlying dispute is also there.

What do panels look for when the registrant claims the buy-back was a legitimate negotiation?

This is the objection we hear most often when respondents file a response: the registrant argues that a willingness to sell a domain does not automatically make the registration abusive, that domain sales are a legitimate market, and that the price asked merely reflected fair market value for a premium name.

That argument can succeed — but only in limited circumstances. Where the domain reproduces a well-known mark, where the registrant had no plausible reason to want the name other than to monetize the trademark holder's interest, and where the buy-back demand arrived within weeks of registration, panels consistently hold that the primary purpose was to sell to the mark owner at a profit. Paragraph 4(b)(i) is explicit: registration "primarily for the purpose of selling" to the mark owner for valuable consideration in excess of out-of-pocket costs is bad faith.

The registrant's best defense in this scenario is to show a credible, pre-dispute legitimate use — a business plan, a prior association with the name, goods or services actually offered under the name before any notice of the dispute. Generic defenses that do not address the specific domain and the specific mark rarely persuade a panel. We review respondent responses regularly, and the weakest ones are those that argue the general legitimacy of domain investing without tying it to any concrete fact about the name at issue.

The myth worth addressing directly: many brand owners believe that because the registrant "just bought it" and did not hack or steal the domain, the UDRP will not apply. The UDRP was designed precisely for opportunistic registrations. The registrant's clean acquisition of the domain from a registrar is irrelevant to bad faith if the purpose was to exploit your trademark.

In a related matter — a .store registration, spring 2025 — we acted for a brand owner after a two-year cycle of buy-back offers that escalated with each passing month. The panel found bad faith on the basis of the escalation pattern alone, combined with passive holding of the domain and clear awareness of our client's mark at the time of registration.

Related at COGNOMEN

• UDRP domain recovery — the full service overview for gTLD and ccTLD complainants
• Case study: recovering a domain held passively under an AI-sector mark
• FAQ: registrar lock escalation for .store domains — what to do before you file