What UDRP actually is
The Uniform Domain-Name Dispute-Resolution Policy is the process trademark holders use to reclaim a domain without going to court. A UDRP panel can order a domain transferred or cancelled if the complainant proves three things: the domain is confusingly similar to their mark, the registrant has no legitimate interest in it, and it was registered and used in bad faith.
Where investors actually get caught
Registering a domain that contains an existing brand name, even as part of a longer string ("brandname- deals.com"), is the single most common way domain investors end up in a UDRP dispute. "I didn't know it was trademarked" is not a defense — bad faith is inferred from the registration pattern itself, especially if the site was ever parked with ads related to that brand's industry. This is exactly the risk a brand's own monitoring team is watching for from the other side.
Generic and descriptive names are lower risk
Dictionary words and descriptive combinations ("bestcoffeemakers.com") are much harder to win a UDRP claim against, because there's no single company that plausibly owns "coffee makers" as a mark. The risk scales with how distinctive and brand-specific the string is, not just how it sounds.
Before you buy, check
A quick trademark database search (USPTO TESS for the US, or a global search tool) for the exact string takes minutes and catches the obvious cases. It won't catch unregistered "common law" trademark rights, which exist the moment a brand is in commercial use — so a clean trademark search reduces risk, it doesn't eliminate it.
If a UDRP complaint arrives
Respond within the deadline — a default (no response) almost always loses. If the domain was registered for its generic/descriptive value with no awareness of a specific brand, that history is your defense; document it as you build the portfolio, not after a complaint shows up.