Request a three-member panel to defend a .xyz domain: what panels act…

Request a three-member panel to defend a .xyz domain: what panels act. UDRP and ccTLD domain recovery and defense across .xyz. Email the firm to assess your ca…

A UDRP complaint lands in your inbox. The disputed domain is a .xyz registration you have held for years, built a project around, or acquired through a legitimate channel. The complainant is a brand owner with counsel and a trademark certificate. You have 20 days to respond — and one strategic choice that most registrants miss: whether to request a three-member panel.

Under the UDRP, a respondent in any accredited-registrar dispute — including .xyz — may elect a three-member panel instead of accepting the complainant's single-panelist selection. That election raises the forum filing fee, but it also changes the deliberative dynamic: three independent voices must reach consensus, dissents are published, and the resulting decision carries more precedential weight. For a respondent whose registration has genuine merit, the three-member route is frequently the right defensive posture.

This analysis covers the .xyz zone specifically, the mechanics of the election, the Paragraph 4(c) safe harbors that decide most contested defenses, the evidence that separates strong records from weak ones, and the realistic conditions under which a panel will declare reverse domain name hijacking (RDNH).

Why .xyz sits within the UDRP and what that means for respondents

The .xyz extension is a new gTLD, and its registry — like all ICANN-accredited new-gTLD operators — adopted the UDRP as the mandatory dispute-resolution mechanism for its registrations. That means the same three-element test that governs .com disputes applies directly to .xyz: the complainant must show confusing similarity to a mark it holds, the registrant's lack of rights or legitimate interests, and bad-faith registration and use — all three, cumulatively, under Paragraph 4(a) of the Policy.

No separate ccTLD procedure exists for .xyz. There is no national registry with its own abusive-registration test, no "registered or used" shortcut of the kind that appears in the Nominet DRS for .uk. The full UDRP burden rests on the complainant from the outset. That is a genuine advantage for a well-prepared respondent: the conjunctive "registered and used in bad faith" means a complainant who can only demonstrate current bad use — but not bad-faith intent at the time of registration — cannot satisfy the Policy.

The URS (Uniform Rapid Suspension) is technically also available for .xyz, since it applies across new gTLDs. But its remedy is suspension, not transfer, and its evidentiary standard is described as "clear and convincing evidence." In practice, respondents whose registrations have any colorable legitimacy face a lower practical risk under the URS than under the UDRP. The more consequential risk — a forced transfer — comes from a UDRP complaint, and that is the mechanism this analysis addresses.

WIPO and the Forum together handle roughly 97% of all UDRP proceedings, and both accept .xyz complaints. The Czech Arbitration Court (CAC) is also an accredited provider and represents the lowest-cost filing point. For respondents, the choice of forum matters: each provider administers the same Policy but applies its own supplemental rules on procedural matters such as supplemental filings, the timing of panel appointment, and the process for three-member-panel requests.

If you have received a UDRP complaint for a .xyz domain, the response deadline is firm and the record closes at filing. For an assessment of the three-element defense and the panel-election question, contact info@cognomenlaw.com.

How does a respondent actually request a three-member panel under the UDRP?

The election is made in the response itself. Under the UDRP Rules, if the complainant requested a single panelist, the respondent may request a three-member panel by stating that preference in the response and remitting the respondent's share of the three-member fee. The cost split follows a standard structure: where the complainant chose a single panelist, the respondent requesting three members generally bears the difference between the single-panel fee and the three-member fee, while the complainant retains the fee it already paid.

At WIPO, the three-member fee for a one-to-five-domain case is USD 4,000 total, compared with USD 1,500 for a single panelist. If the complainant paid USD 1,500 and the respondent requests three members, the respondent typically pays the USD 2,500 difference. That is a real cost. Whether it is worth bearing depends on the risk profile of the case.

When should a respondent make this election? Three situations recur in our practice. First: where the complainant is a large brand with well-resourced counsel and the single panelist selected appears, from published decisions, to favor complainants in fact patterns similar to yours. Second: where the legal question is genuinely close — a domain registered before a trademark was filed, a generic or descriptive term with dual meaning, a domain held for investment but with a plausible business rationale. Third: where the respondent intends to pursue an RDNH finding and wants the credibility of a three-voice consensus behind that finding.

Conversely, if the respondent's record is thin and the complainant's mark is strong, electing a three-member panel does not improve the odds — it raises the cost of a loss. The election is a tool, not a default.

What are the Paragraph 4(c) safe harbors, and how do panels read them in contested .xyz cases?

Paragraph 4(c) of the UDRP provides three non-exclusive safe harbors that, if demonstrated, establish the respondent's rights or legitimate interests: (i) use of, or demonstrable preparations to use, the domain in connection with a bona fide offering of goods or services before notice of the dispute; (ii) being commonly known by the domain name; and (iii) legitimate noncommercial or fair use without intent for commercial gain or to mislead consumers or tarnish the mark.

The consensus view among UDRP panels is that the complainant bears the initial burden of making a prima facie case on the second element, after which the burden of production shifts to the respondent to demonstrate a legitimate interest. "Burden shift" is the operative concept. A respondent who files no response — defaults — almost invariably loses, because the panel draws the obvious inference. That is why a three-member panel election and a substantive response work together: the election raises the deliberative standard; the response fills the record.

How do panels read 4(c)(i) — bona fide use before notice — in the .xyz context specifically? The .xyz extension became widely available in 2014 and has attracted a significant volume of speculative registrations alongside genuine projects. Panels are accordingly skeptical of post-hoc narratives. A respondent claiming bona fide use must show something concrete and dated: a development agreement, a hosting record, a correspondence file, a wireframe, or actual site content archived before the dispute arose. The keyword is demonstrable. Claiming that you intended to build something is not enough. Showing that the build had already begun — or that a real business plan existed — is.

The 4(c)(ii) safe harbor (commonly known by the name) rarely applies in .xyz disputes where the respondent is an individual or a small company, unless the domain precisely matches a registered business name or a person's own name. We have seen this safe harbor succeed in cases where a registrant could produce a company registration, a DBA filing, or a recognized professional identity predating the complaint.

The 4(c)(iii) path — legitimate noncommercial or fair use — is the most fact-specific. Panels generally require that the domain is used genuinely, not as a pretext, and that no commercial gain flows from the confusing similarity. A fan site, a commentary page, or a personal project built around a generic phrase can satisfy this test. A parking page monetized by pay-per-click advertising that intercepts the complainant's customers almost never will.

What evidence decides the outcome in a three-member .xyz panel proceeding?

Evidence is the record, and the record closes when the response is filed. Panels in contested three-member proceedings decide on the written record alone; there is no oral hearing, no cross-examination, and no discovery. That puts an unusual premium on assembling every material document before the response deadline.

The single most important category of evidence is registration date versus trademark priority. If the respondent registered the .xyz domain before the complainant's trademark application was filed — or before the mark acquired secondary meaning in a jurisdiction with unregistered-mark protection — the registration-in-bad-faith element is nearly impossible for the complainant to establish. Panels have consistently held that a registrant cannot have targeted a mark that did not exist when the domain was acquired. This is not absolute — panels do consider cases where a mark was clearly imminent and the respondent was aware of it — but the principle is firmly established and directly applicable to .xyz registrations.

The second decisive category is the registrant's conduct after registration. Passive holding alone is not per se bad faith, but the nature of the holding matters. A domain that resolves to an active website with genuine content weighs heavily in the respondent's favor. A domain that resolves to a pay-per-click page serving links competitive with the complainant's business weighs heavily against. A domain that resolves to nothing — a blank page — puts the respondent in a middle position where the panel looks at the totality: Why was it registered? Is there an explanation that survives scrutiny?

Third: communications between the parties. Any pre-complaint demand letter, any offer to sell the domain at an amount reflecting the value of the complainant's mark rather than the domain's market value, and any response to a cease-and-desist that admits knowledge of the complainant's brand — all of these can be used as evidence of bad faith under Paragraph 4(b). Respondents in our practice who have engaged in imprecise pre-dispute correspondence sometimes create the strongest evidence against themselves. Equally, a complainant's demand that is clearly disproportionate — a first contact that demands transfer without offering compensation, or a complaint filed hours after first correspondence — can become the factual basis of an RDNH finding.

In a recent matter (a .xyz domain dispute, spring 2025), we acted for a registrant who had held the name for several years as part of a portfolio of dictionary-word domains. The complainant filed a UDRP complaint asserting that the domain targeted its brand. We requested a three-member panel, assembled registration-date evidence predating the complainant's trademark by approximately two years, and provided archived development correspondence showing bona fide preparation. The three-member panel declined to transfer and noted the complainant's failure to address the registration-date chronology. The result was a denial — with an RDNH finding entered against the complainant.

When is an RDNH finding realistic, and what does it actually accomplish?

Reverse domain name hijacking is a finding that the complaint was brought in bad faith, primarily to harass the registrant or to strip a legitimate domain holder of a name to which the complainant has no stronger right. The UDRP Rules authorize the panel to make this finding; it is not a remedy in the monetary sense — no costs are awarded, no transfer reversed, no penalty imposed — but it is a permanent published record of abuse.

The consensus standard for RDNH is demanding. Panels do not issue these findings simply because the complainant lost. The question is whether the complainant knew, or should have known, that it could not succeed under the Policy as properly applied. The most common factual patterns generating RDNH findings in our experience involve: a complainant who filed without addressing the registration-date chronology; a complainant whose trademark postdates the domain by a substantial margin and who offered no explanation for why the registration could nonetheless have targeted the mark; and a complainant who relied on the generic or descriptive nature of the term yet asserted exclusive trademark rights that the evidence did not support.

A three-member panel is the stronger forum for pursuing an RDNH finding. A single panelist can and does make such findings, but a three-voice decision has greater practical weight: it is more likely to be referenced in subsequent proceedings, more visible in the published record, and more meaningful as a deterrent. Complainants who face RDNH findings from three-member panels report that the published decision creates reputational friction in subsequent proceedings involving the same brand or the same counsel.

What RDNH does not do: it does not compensate the respondent for legal fees. It does not prevent a future complaint from the same complainant under a different theory, though a panel seeing a prior RDNH finding will likely scrutinize the new complaint closely. And it does not transfer any domain to the respondent. The defensive goal remains what it always is: denial of transfer and preservation of the registration.

If you believe the complaint against your .xyz domain is abusive, we can build the legitimate-interest record, document good-faith registration, and where the facts support it, seek an RDNH finding. Email info@cognomenlaw.com to weigh the options.

How does the three-member panel dynamic differ from a single panelist in practice?

The deliberative mechanics differ in ways that matter to outcome. A single panelist reaches a decision alone. A three-member panel must deliberate, and if the presiding panelist's draft does not carry the others, the draft is revised or a dissent is published. That internal friction, invisible in the published decision, often produces more carefully reasoned outcomes — both for respondents who deserve to prevail and for complainants with genuinely strong cases.

From a respondent's perspective, the most direct implication is that minority reasoning becomes visible. A dissenting opinion in a three-member decision can itself become a reference point: subsequent panels read the dissent, note the contrary analysis, and the doctrinal debate continues in the open record. Where the law is genuinely unsettled — as it sometimes is on issues like generic-term fair use, passive holding in new-gTLD zones, or the evidentiary weight of a pre-trademark domain portfolio — a dissenting panelist may articulate the better view that a future panel eventually adopts.

There is a contrary view worth acknowledging. Some practitioners argue that three-member panels in straightforward cases simply add cost and delay without improving accuracy. Where the complainant's mark is clearly strong, the domain clearly targeted it, and the respondent has no credible defense, a three-member panel typically reaches the same transfer order as a single panelist — but takes longer and costs more. The strategic logic of the three-member election is therefore strongest precisely in the close cases: ambiguous intent, dual-meaning terms, timing questions, and RDNH scenarios. In a clear-loss case, electing three members does not change the math.

Another practical consideration: forum selection interacts with the panel-election decision. At WIPO, the panel-appointment process for three-member cases involves each party nominating candidates from WIPO's published roster, with WIPO selecting the presiding panelist. At the Forum, the process differs procedurally. Respondents who understand both systems — and who have reviewed the published decisions of the available panelists — can make a more informed nomination. That expertise is one of the practical differences between self-represented respondents and those with experienced counsel.

What is the realistic decision tree: UDRP defense, court, or both?

The UDRP is not the only mechanism available. It is, however, typically the fastest and most cost-proportionate route for a respondent whose only goal is to preserve the registration. Consider the choices in sequence.

If the domain is a .xyz and the complaint is filed under the UDRP, the respondent's primary defense runs through the response: elect three members if the case warrants it, assemble the full evidentiary record, invoke the appropriate 4(c) safe harbor, and — where the facts support it — request an RDNH finding. The UDRP delivers a decision in roughly two months under normal procedure. The UDRP decision is final at the provider level, though the losing respondent may seek de novo review in a court of competent jurisdiction within ten business days of the decision to prevent implementation.

If the complainant also holds .com or ccTLD registrations for the same mark and has filed or is likely to file parallel complaints, a coordinated multi-zone defense is necessary. We regularly advise registrants who face simultaneous complaints across .com, a ccTLD, and a new gTLD, and the evidentiary record must be consistent across all proceedings. An admission in one response can be used against you in another.

Court action is the relevant alternative when the respondent wants more than the UDRP can deliver — specifically, when the respondent seeks damages for an abusive complaint, a declaratory judgment of non-infringement, or an injunction against future filings. US anticybersquatting litigation can reach money; the UDRP cannot. For respondents domiciled outside the US or whose domain has no connection to a US complainant, the relevant forum may be the complainant's home jurisdiction, requiring local litigation counsel in the relevant jurisdiction.

In a recent matter (a .xyz portfolio dispute, autumn 2025), a brand owner filed UDRP complaints against approximately a dozen domains held by the same registrant across multiple new gTLDs. We coordinated a parallel defense, requested three-member panels in the proceedings where the registration-date evidence was strongest, and filed consistent records across all cases. The result across the portfolio was a series of denials — with two of the three-member decisions explicitly entering RDNH findings — and no transfers.

How should a respondent build the legitimate-interest record before and after a complaint arrives?

The best time to build the record is before a complaint is filed. A registrant who maintains organized documentation of the purpose behind each registration — business plans, development correspondence, archived website versions, third-party agreements, company registrations — is in a substantially stronger position than one who must reconstruct a narrative after the complaint arrives.

Practically, this means: archive the domain's website at regular intervals using an independent service. Retain any correspondence with hosting providers, developers, or potential buyers that reflects the business rationale for the registration. If the domain is part of an investment portfolio, document the selection criteria — generic term, short string, natural-language phrase — that do not reference the complainant's brand. If the domain name corresponds to a descriptive phrase with meaning independent of any trademark, document that meaning and its common usage in context.

Once a complaint arrives, the record-building window is the response period. The response should address each of the three elements individually and directly. For the second element: identify the applicable safe harbor, then marshal every document that supports it, with dates. For the third element: address the bad-faith factors in Paragraph 4(b) specifically. If none of those factors applies, say so and explain why. If the complainant's trademark postdates the registration, lead with that chronology. Do not bury it.

One common failure in self-represented responses is the tendency to address only the facts the respondent considers favorable while ignoring the facts the complainant raised. Panels notice this. A thorough response acknowledges the complainant's strongest argument and explains why it nonetheless does not satisfy the Policy. That approach is more persuasive than a response that reads as if the complainant's assertions were never made.

For respondents who also hold a registered trademark or a pending application in a relevant jurisdiction, that evidence can shift the second-element analysis significantly. A respondent with a trademark registration in its own name — covering goods or services plausibly related to the domain — has a documented basis for rights that is difficult for a panel to dismiss. Pre-registration trademark work is a legitimate defensive investment for domain investors operating at scale.

Related at COGNOMEN

• UDRP Respondent Defense & RDNH — full-service defense across gTLDs and ccTLDs
• Registered before the trademark — analysis of the prior-registration defense in UDRP proceedings
• Enforcing a UDRP decision in .me — a step-by-step guide to implementation