Legitimate-interest checklist for responding to a UDRP

By Anton Grant, respondent defense & RDNH · August 6, 2026

You receive a UDRP complaint. The name you registered years ago – one you have actively used for your business, your creative project, or your personal brand – is now the subject of a three-element legal proceeding with a 20-day response window. The critical question is not whether the complainant has a trademark. It is whether you have a legitimate interest that defeats the claim.

Under Paragraph 4(c) of the UDRP, a respondent who can demonstrate a bona fide offering of goods or services before notice of the dispute, a history of being commonly known by the name, or a legitimate noncommercial or fair use without intent to mislead, holds a complete defense to the second element. Each limb requires specific, contemporaneous documentary proof. The checklist below helps you identify which limb applies to your situation and what evidence to assemble before the 20-day deadline closes.

This page explains the three safe-harbor limbs, walks the documentary requirements for each, and pairs that explanation with an interactive checklist you can run through right now. The tool gives a signal – not a legal opinion – on how your evidence inventory stands before you engage counsel.

What does "legitimate interest" mean under the UDRP?

Paragraph 4(a)(ii) of the UDRP places the initial burden on the complainant to make a prima facie case that the respondent lacks rights or legitimate interests. Once that prima facie case is made, the practical burden shifts: the respondent must come forward with concrete evidence that one of the Paragraph 4(c) safe harbors applies. Failing to file a response does not erase that burden – panels still examine the record before ordering a transfer, and a default is not an automatic win for the complainant.

Three safe harbors are recognized. First, a bona fide offering of goods or services using the domain before any notice of the dispute. Second, a person or entity that has been commonly known by the domain name, even without trademark registration. Third, legitimate noncommercial or fair use of the domain, without intent to divert consumers or tarnish the mark. Each is independent. You need to satisfy only one. But you need to satisfy it with evidence, not assertion.

What separates a successful defense from a lost domain is almost always the documentary record. Panels consistently hold that bare assertions – "I registered this name for my own use" – without timestamps, invoices, correspondence, or contemporaneous web captures carry little weight. The earlier the evidence, the clearer the story it tells.

How does the checklist work?

The interactive block below groups evidence items by safe-harbor limb. Work through each item and check it if you have the document in hand or can locate it before the response deadline. The pipeline scores your checked items and returns a progress indicator for each limb. A high score on any single limb is the strongest position; scattered checks across all three without a concentrated set in one suggests a more difficult defense. Use the result to brief counsel, not to decide whether to file a response without one.

Limb A – Bona fide offering before notice: You have an invoice, purchase order, or contract dated before you received any notice of the complaint, showing you supplied goods or services under the domain name.
Limb A – Bona fide offering before notice: You have archived or cached web pages (with datestamps) showing the domain was in active commercial use before the dispute arose.
Limb A – Bona fide offering before notice: You have email correspondence, business cards, or marketing materials from the pre-notice period that carry the domain name or the corresponding brand.
Limb A – Bona fide offering before notice: Your business registration, company incorporation record, or trade-name filing predates the complaint and matches or incorporates the domain string.
Limb A – Bona fide offering before notice: You have revenue records, bank statements, or tax filings showing commercial activity under the name before any notice of the dispute.
Limb B – Commonly known by the name: You hold a registered trademark, service mark, or business name that is identical or confusingly similar to the domain string.
Limb B – Commonly known by the name: Third-party references – press coverage, directory listings, supplier records, customer reviews – identify you by the name in question.
Limb B – Commonly known by the name: Social media profiles, domain WHOIS/RDAP history, or other digital records show continuous public association with the name.
Limb B – Commonly known by the name: Your personal legal name, trade name, or the name of a principal of your organization corresponds closely to the domain string.
Limb C – Noncommercial or fair use: The domain hosts editorial, critical, satirical, or commentary content that does not divert commercial traffic or sell products.
Limb C – Noncommercial or fair use: The site clearly identifies itself as commentary or criticism and makes no attempt to impersonate the complainant's official presence.
Limb C – Noncommercial or fair use: There is no pay-per-click advertising, affiliate revenue, or other monetization tied to the complainant's brand or trademark.
General – Good faith registration: You registered the domain before the complainant's trademark was applied for or registered in any jurisdiction.
General – Good faith registration: You have documentary evidence of the specific reason you chose the name – a family name, a geographic term, a dictionary word, a personal interest – independent of any knowledge of the complainant.
General – Response deadline: You have confirmed the exact response due date (typically 20 days from formal commencement) in the forum's commencement notice and have calendared it.

What evidence does each safe-harbor limb actually require?

The bona fide offering limb – the most commonly invoked – turns on two linked facts: contemporaneous commercial use and the absence of bad faith at the time of registration. "Before notice of the dispute" is typically read as before the complaint was filed, but panels have also treated a demand letter or cease-and-desist as constructive notice. If you received any communication from the complainant before the complaint was filed, that date matters. Every piece of evidence you plan to rely on should be timestamped, preferably by a third party.

The "commonly known by the name" limb is the one respondents most often underestimate. It does not require a registered trademark. It requires proof that the name identifies the respondent in fact – in the eyes of customers, suppliers, or the public. A long-standing business trading under a name, a personal name that matches the domain, or even a community nickname can suffice if the documentary record is strong. The panel asks: was this registrant actually known by this name before the dispute arose?

The fair-use limb is the narrowest and the most fact-specific. Panels examine whether the site content is genuinely noncommercial and non-misleading. A gripe site that carries advertising generates a serious question about whether the use is truly noncommercial. A critic who mirrors the complainant's visual identity raises a different question about intent to confuse. This limb can succeed, but it requires the site's content and monetization to be clearly distinguishable from a commercial operation targeting the complainant's customers.

Regardless of which limb you rely on, the single most common reason respondents lose a winnable defense is an evidence gap: the documents exist, but they were not submitted. Panels decide on the record before them. If you have the evidence, file it.

If you have received a UDRP complaint and are working through your evidence, contact us at info@cognomenlaw.com for an assessment of the three elements before the response deadline passes.

What does the checklist not tell you?

A strong checklist result means your documentary inventory looks defensible on one or more limbs. It does not account for the complainant's evidence, which you may not have seen in full. The complaint itself may contain trademark certificates, web captures, or correspondence that change the factual picture. A high score on Limb A is no protection if the complainant can show you registered the domain specifically because of awareness of their mark. Registration intent is a fact question, and panels read registration date, registration history, and registrant conduct together.

The checklist also does not evaluate the first UDRP element – confusing similarity – or the bad-faith element on the complainant's side. Those elements interact with the legitimate-interest defense in ways that require legal analysis, not a checklist. And the tool does not address ccTLD procedures: the Nominet DRS for .uk, the EURid ADR for .eu, and national procedures for zones like .de each have their own evidentiary requirements, separate from the UDRP safe harbors. For those zones, the governing rules of the relevant procedure apply.

One further limit: the checklist cannot tell you whether an RDNH finding is available. Reverse Domain Name Hijacking – a panel finding that the complaint was filed in bad faith to deprive a legitimate registrant – requires its own analysis: was the complainant aware of the respondent's rights before filing? Did they file despite clear evidence of legitimate use? RDNH is a real outcome in cases where the complainant overreaches, and it is one we pursue where the facts support it. But it requires a separate strategic assessment beyond what a checklist can supply.

Fees cited in this tool reflect published figures as of August 6, 2026; confirm current rates before filing.

What should you do with the result?

A concentrated set of checks on a single limb – especially Limb A or Limb B – is the starting point for a well-constructed response. Take the items you checked and identify the physical or digital document behind each one. Not every document needs to go into the response as an annex, but every assertion in the response should be backed by at least one document you are ready to produce if the panel asks for it.

The items you could not check are equally important. If you lack pre-notice commercial records, consider whether you can reconstruct the evidence from third-party sources: archived pages, supplier invoices, public records. If the gap is genuine – you registered the domain speculatively with the complainant's mark in mind – then the defense is harder, and the strategy shifts. In that situation, an early settlement discussion or a voluntary transfer may cost less than a losing defense.

In a recent matter (a .com registration dispute, spring 2025), a respondent who had operated under the relevant name as a personal trade name for several years had strong Limb B documentation but had not thought to gather third-party references before filing a response. We assembled supplier records, a long-standing social profile, and a business registration predating the complainant's mark. The panel found legitimate interest and denied the transfer. The documents were always there; the effort was in organizing and presenting them in time.

In another matter (a new-gTLD registration, summer 2026), a respondent with an apparently strong Limb A position was undermined by a domain acquisition that post-dated the complainant's trademark registration by several years and that had no business records to explain the registration rationale. The checklist result had appeared strong on a surface read. But the absence of contemporaneous acquisition context meant the panel was left without a clear answer on registration intent. The case settled before decision.

Both examples illustrate the same point: the checklist reveals where your evidence is strong and where it is absent. What you do with that information – in the 20 days available – determines the outcome.

To weigh your evidence before the response deadline, email info@cognomenlaw.com. We assess the three UDRP elements and the available safe harbors before advising on strategy.

Cross-zone considerations: does the same framework apply beyond .com?

The UDRP safe harbors apply wherever the UDRP applies: .com, .net, .org, and the majority of new gTLDs, as well as country-code zones that have formally adopted the Policy, including .me, .tv, and .co. For those zones, Paragraph 4(c) operates as described above. The checklist is calibrated to that framework.

For .uk, the Nominet DRS applies a different test. The complainant must show "abusive registration" – registered or used in a way that takes unfair advantage of or is unfairly detrimental to the complainant's rights. The test reads "registered or used" abusively, a different construction from the UDRP's cumulative "registered and used." Respondent defenses under the DRS are not identical to the Paragraph 4(c) safe harbors, though many of the same underlying facts are relevant. Since 7 July 2026, new Nominet DRS cases are filed through the WIPO Arbitration and Mediation Center. A free mediation stage precedes any expert decision; if the respondent files a response, both parties are automatically opted into that mediation.

For .eu, the EURid ADR procedure administered through the Czech Arbitration Court's ADR.eu platform has its own remedies and eligibility rules. For .de, there is no UDRP equivalent; disputes proceed in the German courts, and a DENIC DISPUTE entry can block a transfer while proceedings are underway. In each case, the governing procedure – not the UDRP checklist – controls what defense evidence is required and in what form.

The practical upshot for a multi-zone dispute: if the same registrant holds both a .com and a .uk version of a contested name, two parallel procedures may run simultaneously under different rules and before different forums. That requires coordinated strategy, not simply replicating the UDRP response for the ccTLD filing.

About COGNOMEN

COGNOMEN is an independent boutique focused exclusively on domain-name disputes. We recover, defend, and transact internet domains across generic and country-code zones, before WIPO, the Forum, CAC, ADNDRC, and national procedures, and in court where arbitration cannot reach. We act for brand owners, domain investors, and registrants – including respondent-side defense and reverse domain name hijacking. COGNOMEN focuses only on domain-name disputes – recovery, defense, and transactions. To discuss a domain, contact info@cognomenlaw.com.

For a read on whether the three UDRP elements are met in your case, reach us at info@cognomenlaw.com.

Related at COGNOMEN

Frequently asked questions

How accurate is this checklist?

The checklist maps the three Paragraph 4(c) safe harbors and identifies the documentary evidence that panels consistently find persuasive under each limb. It is accurate as a survey of the legal framework and the evidence requirements. It cannot account for the complainant's evidence, the strength of the similarity between the domain and the mark, or the registration-intent facts that are specific to your case. Use it as an evidence inventory, not as a substitute for legal advice on your specific situation.

What is not included in the result?

The checklist does not assess the first UDRP element – confusing similarity between the domain and a trademark – or the third element – bad faith – both of which the complainant must prove. It does not cover ccTLD procedures, including the Nominet DRS for .uk, the EURid ADR for .eu, or national court routes for zones like .de, each of which has distinct evidentiary requirements. It also does not evaluate whether an RDNH finding – a panel ruling that the complaint itself was filed in bad faith – is available in your case. Those questions require direct legal analysis.

What should I do with the number it gives me?

A high score on a single limb signals that your documentary record for that defense is strong. Identify the physical document behind every checked item before the response deadline, which is typically 20 days from formal commencement. Items you could not check identify the gaps; assess whether those gaps can be filled with third-party records, archived pages, or public registrations. Then bring the inventory to counsel for a response strategy. A score alone does not decide a UDRP – the record you file does.

Author: Anton Grant — Respondent defense and reverse domain name hijacking (RDNH). Meet the team.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.