Skip to content
counsel.domains

Domain Investor UDRP Defense: The Portfolio Playbook

By counsel.domains
Last updated: 2026-10-28
50 min read

This guide is for professional domain investors, portfolio holders, and drop-catchers who have received a UDRP complaint. It explains why investors win, what evidence defeats bad faith, where landing pages create risk, and how to plead RDNH. If you have just received a complaint, read the quick answer and the checklist first.


Quick answer: why investors win and what they must prove

Professional domain investors keep winning UDRP cases because panels recognise that domain investment is a legitimate commercial activity and that buying and reselling generic, descriptive, or brandable domains is not, by itself, bad faith. The defence rests on three propositions: the respondent has rights or legitimate interests in the domain (usually through a bona fide offering — offering the domain for sale at market price as part of a genuine investment business); the domain was not registered in bad faith because the investor did not target the complainant’s mark; and the complainant cannot prove actual knowledge of the mark at the time of acquisition. The paper trail — purchase records, portfolio strategy, keyword research, clean landing pages, and automated market pricing — is the defence. Targeting is the exception; investing is the rule.


Key facts at a glance

FactDetail
Core principleDomain investment is a recognised commercial activity
Safe harbourParagraph 4(c)(i): bona fide offering before notice
Decisive elementBad faith — specifically, targeting at registration
Target proofComplainant must show actual knowledge or willful blindness
Paper trailPurchase records, strategy docs, keyword research, listings
Landing-page riskCustomised, industry-specific pages invite bad-faith inference
PricingMarket price is safer than a targeted pitch
PortfolioClean portfolio helps; infringing portfolio hurts
RDNHViable where the complaint is a “Plan B” after a failed purchase
Leading examplesHyperfly, Semify, Nexim, Altec.ai, SNGLR

Domain investment is a recognised commercial activity

The consensus

Panels have consistently held that the business of acquiring and reselling domain names is a bona fide commercial activity under the UDRP. WIPO Overview 3.0, section 3.1.1 recognises that the practice of registering a domain for subsequent resale does not in itself support a bad-faith finding. The question is whether the registration was primarily for the purpose of selling to the trademark owner or a competitor — not whether the domain is for sale at all.

The TransferNow decision clarified the legitimacy of domain investment: the panel found the respondent had shown a legitimate interest in holding the disputed domain name and that the complainant had failed to establish the second element. The Malaga Cars decision upheld a domain investor’s right to a geographic travel descriptor, finding rights or legitimate interests by virtue of its descriptive geographic use. The Nexim.com decision found that buying and offering a short brandable .com for resale, without proof the investor knew of or targeted the complainant, is legitimate domain investing.

What panels actually say

The pizzaman decision is instructive. The respondent had registered the domain over a quarter of a century ago for its value as a common and descriptive term as part of its business of registering and selling domain names. The panel found the second element was not established and noted that a domain name investor does not have to offer goods related to the dictionary meaning of the domain names in its portfolio. The panel also found the respondent’s offer to sell for USD 70,000 did not, by itself, establish bad faith, because the respondent was entitled to set whatever price it believed appropriate. The complaint was found to be brought in bad faith and constituted an attempt at RDNH, because the complainant filed only after failing to purchase the domain at the respondent’s price.

The James Booth cases reinforce the pattern. In Hyperfly and Semify, the WIPO panels denied transfer because the complainants failed to establish bad faith. Both complainants had niche or regional fame and could not prove the international investor had actual knowledge of their businesses.

The difference between investing and cybersquatting

The line is targeting. A domain investor who acquires a domain because it is generic, descriptive, short, or brandable, and who offers it for sale as part of a genuine business, is not cybersquatting. A cybersquatter who acquires a domain because it matches a third party’s mark, with the intention of extracting payment, is. The evidence of targeting is what separates the two.

Investment is legitimate. Targeting is not. We map the line in your case and build the evidence that keeps you on the right side of it. Book a defence assessment →


The three elements and where investor cases turn

Confusing similarity: usually conceded

Most investor cases do not turn on the first element. If the domain is identical or confusingly similar to the complainant’s mark, the panel will usually find the element made out. The investor’s defence is rarely that the domain is not similar; it is that the investor has a legitimate interest and did not act in bad faith.

There are exceptions. Where the domain is a dictionary word or a short brandable string with multiple meanings, the investor may argue that the mark is weak or that the domain is not confusingly similar in context. But these arguments are secondary to the legitimate-interest and bad-faith analysis.

Legitimate interest: the investor’s battleground

The second element is where investor cases are usually decided. The investor can rely on paragraph 4(c)(i) — a bona fide offering of goods or services before notice — by showing that the domain is offered for sale at market price as part of a genuine investment business.

The panel does not require the investor to be using the domain for a website. Offering the domain for sale can itself be a bona fide offering, provided the offering is genuine and not targeted at the complainant.

The TransferNow panel found a legitimate interest where the respondent had shown a positive basis for holding the domain, not merely an absence of bad faith. The pizzaman panel accepted the respondent’s business of registering and selling domain names as a legitimate commercial activity.

Bad faith: targeting is everything

The third element is the decisive one in most investor cases. The complainant must prove that the domain was registered in bad faith — that the investor knew or should have known of the complainant’s mark and registered the domain because of it.

The Semify and Hyperfly decisions show why niche or regional fame is not enough. The complainants could not present any evidence proving the international investor had actual knowledge of their businesses. Without direct proof of intentional targeting, the panels refused to infer bad faith.

The Nexim.com panel similarly found no proof the investor even knew about Nexim, let alone targeted it.

The targeting requirement is the investor’s strongest defence. A complainant who cannot show targeting cannot prove bad-faith registration, and the complaint fails.

The complainant must prove you targeted them. Niche fame is not knowledge. We test what the complainant can actually prove before you respond. Get a defence assessment →


The paper trail that defeats bad faith

Purchase records

The first document is the purchase record: the date, the price, the platform or broker used, and the identity of the seller. This establishes when the domain was acquired and what the investor paid.

The purchase record is critical for priority. If the domain was acquired before the complainant’s mark arose, the complainant cannot prove bad-faith registration. The purchase record is the evidence of priority.

Portfolio strategy documents

A portfolio strategy document shows that the domain was acquired as part of a systematic investment strategy, not to target a specific brand. It can include:

  • The criteria for acquiring domains (length, keyword, sector, extension).
  • The target sectors or themes.
  • The pricing methodology.
  • The exit strategy (resale, development, lease).

The strategy document is stronger if it is contemporaneous — created before the dispute, not reconstructed for the response.

Keyword research and sector notes

Keyword research shows why the domain was chosen. It can include search volume data, sector analysis, and comparable sales. The pizzaman panel accepted the respondent’s claim to have conducted a survey of registered domain names containing the string “pizzaman” or “pizza-man”, and carried out its own limited factual research to confirm the term was used widely.

Sector notes show that the investor was targeting a sector, not a brand. For example, an investor focused on .ai domains might acquire short brandable strings in the artificial intelligence space without knowing which companies use which strings.

Contemporaneous business rationale

A contemporaneous business rationale explains the investment decision at the time it was made. It can be an email, a memo, a note in a portfolio tracker, or a document in a due diligence file.

The rationale should be specific to the domain, not a generic statement about domain investment. It should explain why this domain, why this price, and why this timing.

Post-registration use evidence

Post-registration use can support the bona fide offering argument. It can include:

  • A parking page with general, non-targeted advertising.
  • A marketplace listing with a general price.
  • A landing page with a “make an offer” function.
  • A development site that is genuine and not a pretext.

The use must be consistent with the investment rationale. A parking page with links to the complainant’s competitors is not.

The paper trail is the defence. We build it from purchase records, strategy notes, keyword research, and listings — and we test it against the complainant’s evidence. Get a defence review →


Clean landing pages and market pricing

Why customised pages create risk

A customised, industry-specific monetised landing page is a major vulnerability. If a parked domain displays pay-per-click ads targeting the complainant’s exact industry, panels quickly infer bad faith. The inference is that the investor is monetising the mark’s goodwill, not offering a generic domain for sale.

The risk is highest where the landing page:

  • Displays ads for the complainant’s direct competitors.
  • Uses the complainant’s brand name in the ad targeting.
  • Mimics the complainant’s site design.
  • Contains misleading claims of affiliation.

Automated marketplace listings

Investors who prevail typically use automated marketplace listings with general automated pricing, rather than custom pitches mirroring a complainant’s specific brand offerings. The listing is a market signal: the domain is for sale to anyone at a price, not a targeted demand to a specific brand.

The SNGLR.com decision accepted that professional investors may legitimately acquire short acronyms, coined-looking strings, and brandable domains for resale where there is no evidence of trademark targeting. The domain was later offered for sale through Afternic, a general marketplace.

General pricing vs targeted pitches

The pizzaman panel held that an offer to sell for USD 70,000 did not, by itself, establish bad faith, because the respondent was entitled to set whatever price it believed appropriate. The price was high, but the offer was not targeted at the complainant in a way that proved bad-faith registration.

The distinction is between:

  • A general price on a marketplace listing, available to anyone.
  • A targeted pitch to the complainant or a competitor, with a price calibrated to the brand’s value.

The first is safer. The second invites a 4(b)(i) analysis.

The “for sale” signal

A “for sale” page is not automatically bad faith. But it can support the complainant’s case if combined with:

  • A targeted offer to the complainant.
  • A price that is clearly calibrated to the brand.
  • A pattern of similar offers to other brand owners.

The investor should document the pricing methodology and the general availability of the domain for sale.

Customised pages create risk. We audit the monetisation and the listing before you file a response. Get a landing-page review →


The target-knowledge problem

Why niche and regional fame is not enough

The Semify and Hyperfly decisions establish that niche or regional fame is not enough to prove actual knowledge. A complainant with a strong mark in a narrow sector cannot assume that an international investor knew of it. The complainant must produce evidence — an email, a prior dealing, public coverage that the investor would have seen — that the investor actually knew.

The HCL.ai decision is a contrast. The panel inferred knowledge from the strength of the HCL mark, its recognition in the technology sector, the respondent’s sophistication, and the absence of a plausible alternative use for the domain. The inference was grounded in the totality of the circumstances, not direct evidence of intent. But HCL is a globally recognised technology brand, and the domain was paired with .ai, which is closely associated with HCL’s business.

The international investor defence

An international investor operating from a different jurisdiction may have a stronger defence because the complainant’s mark may not be known in the investor’s market. The Booth cases illustrate the point: the investor was operating out of the UAE, and the complainants had niche or regional fame. The panels found no evidence of actual knowledge.

The defence is not automatic. An investor who targets a globally famous mark, or who has actual knowledge through a prior dealing, cannot rely on the international defence.

Willful blindness and the duty to check

The willful blindness doctrine holds that an investor who fails to check whether a domain matches a third-party mark may be treated as knowing of the mark. The doctrine is most typically applied to professional investors who have the resources and sophistication to conduct due diligence.

In the speroni.com decision, the panel found RDNH grounded in the complainant’s “wilful blindness to publicly available evidence”. The same principle can apply to respondents. An investor who buys a portfolio without checking for third-party marks may be treated as willfully blind.

What proves actual knowledge

The complainant can prove actual knowledge through:

  • Prior correspondence — an email, a cease-and-desist letter, a negotiation.
  • A failed purchase attempt — the investor knew the brand wanted the domain.
  • Public coverage that the investor would have seen.
  • The investor’s own statements — a blog post, a social media comment, an interview.
  • A pattern of targeting the same brand across extensions.

The investor should document the absence of knowledge: the due diligence performed, the sources consulted, and the reason the domain was chosen.

Niche fame is not knowledge. We test what the complainant can actually prove — and build the record that shows you did not know. Book a defence review →


Portfolio patterns that help and hurt

The clean portfolio

A clean portfolio consists of generic, descriptive, or brandable domains with no pattern of third-party marks. It supports the investor’s case because it shows a systematic investment strategy that is not focused on trademarks.

The pizzaman portfolio, focused on descriptive terms, supported the investor’s defence. The Booth portfolio, focused on short brandable technology terms, supported the investor’s defence in multiple cases.

The mixed portfolio

A mixed portfolio contains some domains that match third-party marks and some that do not. It is neutral to risky, depending on the proportion and the pattern. The investor must be ready to explain the domains that match marks: were they acquired for their generic value, or because of the mark?

A mixed portfolio is stronger where the matching domains are a small minority and the investor has a documented rationale for each.

The infringing portfolio

An infringing portfolio consists predominantly of domains featuring well-known trademarks. It is a considerable factor in decisions favouring the complainant, because it demonstrates evidence of systematic cybersquatting. Where there is clear evidence that the respondent has repeatedly registered trademarked names, even across different industries, a pattern of bad faith becomes difficult to deny.

The LHV case found there could be no plausible good faith or legitimate use of a domain name based on the respondent’s portfolio of infringing domains (D2022-1853).

Prior UDRP decisions and their weight

Panels consider the respondent’s involvement in previous domain dispute proceedings. A respondent with prior adverse decisions is at greater risk, because the pattern is documented. A respondent with no prior decisions, or with favourable decisions, is in a stronger position.

The investor should disclose prior decisions voluntarily in the response, with an explanation of why they are distinguishable. Concealing them is worse than explaining them.

The “stepping into the shoes” problem

Where a portfolio is acquired, the question arises whether the acquisition preserves the original registration date for bad-faith purposes. Panels have treated this carefully. The answer depends on:

  • The terms of the portfolio transfer.
  • The respondent’s knowledge at the time of acquisition.
  • Whether the acquisition was genuine or a sham to obscure the original registrant.

A respondent who acquires a portfolio without checking for third-party marks may be willfully blind. A respondent who conducts documented due diligence is in a stronger position.

A clean portfolio is an asset. A mixed portfolio needs explanation. An infringing portfolio is a liability. We assess the pattern before you respond. Get a portfolio review →


Worked hypotheticals

The short brandable .com

Facts: An investor acquires nexim.com, a five-letter brandable string, at auction for USD 2,500. The investor has a portfolio of 300 short brandable .com domains. The complainant, a regional IT services company, registered the NEXIM mark two years after the acquisition. The investor lists the domain on a marketplace for USD 15,000.

Analysis: The investor has a strong defence. The domain was acquired before the mark arose, so there is no bad-faith registration. The domain is a short brandable string with multiple potential meanings. The investor has a documented portfolio strategy focused on short brandables. The marketplace listing at a general price supports the bona fide offering. The Nexim.com decision is directly on point.

Lesson: Priority and a documented portfolio strategy defeat a complaint from a later-arising mark.

The dictionary-word .ai

Facts: An investor acquires semify.ai for USD 1,200 as part of a portfolio of .ai domains based on dictionary words and common technology terms. The complainant, an SEO firm, has a registered trademark in SEMIFY. The investor does not use the domain; it is listed for sale on a marketplace.

Analysis: The investor can argue that the domain is a dictionary-derived term and was acquired for its generic value as part of a systematic .ai portfolio. The complainant must prove actual knowledge at the time of acquisition. If the complainant’s mark is niche or regional, and the investor is international, the complainant may fail, as in Semify. The clean landing page (a general marketplace listing) supports the defence.

Lesson: A dictionary-derived term and a clean listing are strong defences where the complainant cannot prove targeting.

The expired-domain auction winner

Facts: An investor wins snglr.com at a DropCatch auction for USD 1,249 after the prior registration expired. The prior registrant, who operates a business under the SNGLR name, had bid on the auction and lost. The prior registrant then files a UDRP.

Analysis: The investor has a strong defence. The domain is a five-letter, vowel-elided abbreviation of “singular”, with value as a short brandable domain. The investor acquired it through a public auction, not by targeting the complainant. The complainant participated in the auction and lost, which is evidence that the complaint is a “Plan B”. The panel in the actual SNGLR.com case denied the complaint and found RDNH.

Lesson: A public auction purchase, followed by a “Plan B” complaint, is a strong RDNH case.

The investor who knew too much

Facts: An investor acquires a domain matching a well-known mark after prior correspondence with the brand owner about the domain. The investor had offered to sell the domain to the brand owner for USD 100,000 before acquiring it.

Analysis: The investor’s defence is weak. The prior correspondence proves actual knowledge of the mark. The offer to sell to the brand owner supports a 4(b)(i) analysis. The investor cannot rely on the “international investor” defence because it had direct dealings with the complainant.

Lesson: Actual knowledge defeats the investor defence. Prior correspondence is the complainant’s strongest evidence.

The portfolio buyer

Facts: An investor acquires a portfolio of 500 domains from another investor. The portfolio includes a domain matching a third-party mark. The buyer does not check the portfolio for third-party marks before completing the acquisition.

Analysis: The buyer may be willfully blind. The failure to check, despite the buyer’s sophistication and the size of the portfolio, supports an inference of knowledge. The “stepping into the shoes” question arises: does the acquisition preserve the original registration date? The answer depends on the terms of the transfer and the buyer’s knowledge. The buyer’s position is stronger if it conducted documented due diligence.

Lesson: Portfolio acquisitions require due diligence. Willful blindness is a route to bad faith.


RDNH as an investor’s counterclaim

When RDNH is viable

RDNH is viable where the complainant knew or should have known that the complaint would fail. For an investor, the strongest RDNH scenarios are:

  • The complainant participated in an auction for the domain and lost, then filed a UDRP (the SNGLR.com pattern).
  • The complainant tried to buy the domain and filed only after the negotiation failed (the “Plan B” pattern).
  • The complainant’s mark postdates the domain registration, with no evidence of targeting.
  • The complainant’s mark is niche or regional, and the investor is international with no actual knowledge.

The “Plan B” signal

The pizzaman panel found RDNH where the complainant filed only after failing to purchase the domain at the respondent’s price. The SNGLR.com panel found RDNH where the complainant had bid on the auction and lost. The signal is that the complainant is using the UDRP as a fallback, not because it genuinely believes the domain was cybersquatted.

Pleading RDNH without overreaching

RDNH should be pleaded specifically:

  1. Identify the positive evidence that the complainant knew or should have known the complaint would fail.
  2. Show the failed acquisition or auction loss as evidence of the “Plan B” motive.
  3. Show the absence of targeting — priority, generic meaning, clean portfolio.
  4. Request the declaration expressly.

A weak RDNH claim can undermine the defence. The investor should plead RDNH only where the evidence supports it.

Was the complaint a Plan B? RDNH is available. We assess the auction history, the failed purchase, and the targeting record. Discuss an RDNH strategy →


The 20-day investor defence checklist

  • Identify the date of commencement and the response deadline.
  • Purchase record: date, price, platform, seller.
  • Priority: does the acquisition predate the complainant’s mark?
  • Portfolio strategy: criteria, sectors, pricing methodology.
  • Keyword research: why this domain, why this timing.
  • Business rationale: contemporaneous document explaining the investment.
  • Landing page: clean, general, non-targeted.
  • Listing: marketplace, general price, no targeted pitch.
  • Target knowledge: can the complainant prove actual knowledge?
  • Portfolio pattern: clean, mixed, or infringing?
  • Prior decisions: disclose and distinguish.
  • RDNH: is the complaint a “Plan B”?
  • File on time.

The checklist takes 20 minutes. The paper trail takes the full 20 days. Book a deadline review →


How counsel.domains can help

If you have received a complaint against a portfolio domain, we test the targeting evidence and build the paper trail.

If your landing page or listing is customised, we audit the risk and recommend a cleaner alternative.

If the complainant participated in an auction or tried to buy the domain, we assess whether RDNH is viable.

If the case spans multiple extensions, we coordinate the UDRP and ccTLD strategy.

counsel.domains Domain names, worldwide. Protect my domain → · [email protected]


Disclaimer: This website provides general information about domain name dispute resolution. It is not legal advice and does not create a professional relationship. Procedures and fees change; check the relevant policy and provider before acting. counsel.domains is not affiliated with WIPO, ICANN, Forum, ADNDRC, CAC, CIIDRC, or any registry or dispute-resolution provider.


counsel.domains

Whatever side you are on, whatever stage you are at.

Filing a complaint, defending within the 20-day window, or appealing a decision — we handle domain disputes under UDRP, URS, and ccTLD policies worldwide.

cd

counsel.domains

Strategic domain dispute counsel & representation worldwide

All guides and practice notes published on counsel.domains are based on primary sources: ICANN policies, WIPO consensus overviews, published provider rules, and panel decisions.

Frequently Asked Questions (45)

Complete answers to common questions about filing, response deadlines, elements, and provider procedures. All questions are pre-rendered for search and AI indexing.

Yes. Panels recognise domain investment as a bona fide commercial activity.

Disclaimer: This website provides general information about domain name dispute resolution. It is not legal advice and does not create a professional relationship. Procedures and fees change; check the relevant policy and provider before acting. Not affiliated with WIPO, ICANN, Forum, Nominet, auDA, CIRA, NIXI or any registry or dispute-resolution provider.

Related Guides & Notes