Case study: recover multiple .xyz domains in one UDRP complaint
A brand owner discovers that the same registrant holds a cluster of .xyz domains – each a variant of the company's trademark – pointing them at pay-per-click pages and parking sites. One UDRP complaint. Multiple domains. One decision. Is that possible, and what does it take to win?
Yes – a single UDRP complaint may cover multiple domains provided all domains are held by the same registrant. The .xyz zone operates under the UDRP, so the standard three-element test of Paragraph 4(a) applies: confusing similarity to a mark, no legitimate interest, and registration and use in bad faith. The WIPO filing fee for a single-member panel covering one to five domains is USD 1,500, and a standard case resolves in roughly two months.
This case study walks through an anonymized situation we handled – the strategy selected, the evidence assembled, and what the panel's decision required.
The situation: one registrant, a cluster of .xyz variants
Our client held a registered trademark in its sector. During a routine monitoring sweep in early 2026, we identified approximately eight .xyz domains, all registered to the same WHOIS record, each incorporating the brand name with minor variations – a hyphen here, a generic word appended there. Several resolved to parking pages showing competitor advertising. Others returned a blank page, the classic passive-holding pattern that panels have addressed consistently under the bad-faith limb.
The client's first instinct was to pursue each domain separately. That approach would have multiplied cost and time without benefit. Because one registrant held every domain, consolidating them into a single UDRP complaint was the correct path – and the rules permit exactly that.
What strategy did we select, and why?
We assessed all three UDRP elements before filing. On the first element – confusing similarity – the trademark predated every registration by several years, and each domain incorporated the mark in full. On the second element – no legitimate interest – WHOIS showed no business association with the name, no bona fide offering of goods or services, and no noncommercial fair use. On the third element – bad faith registration and use – the cluster pattern itself is a recognized bad-faith indicator: panels have consistently held that registering multiple variations of a single mark by the same party evidences an abusive pattern under Paragraph 4(b).
We chose WIPO as the forum. WIPO and the Forum together handle the overwhelming majority of UDRP proceedings. For a multi-domain .xyz matter involving an internationally operating brand, WIPO's global reach and its published practice on passive holding and clustering made it the appropriate choice.
If you are mapping the same situation – multiple domains, one registrant, a live trademark – we can assess the three UDRP elements, assemble the bad-faith evidence record, and file at the appropriate forum. Contact info@cognomenlaw.com to begin.
What evidence decided the outcome?
Evidence on the third element was the decisive question. The client supplied trademark registration certificates, domain WHOIS records pulled at filing, screenshots of the parking pages, and a timeline showing all eight registrations occurred within a short window after the client's mark became publicly known. That timing is important: panels have found that registrations clustered shortly after a trademark achieves public recognition support an inference of opportunistic bad faith.
Passive holding on the blank-page domains required additional argument. The consensus UDRP view is that passive holding does not automatically satisfy the bad-faith use limb – but that the combination of an identical or near-identical mark, no plausible legitimate use, and the registrant's pattern of conduct can collectively satisfy it. We built the evidentiary record to close that gap explicitly.
The registrant did not respond. Under UDRP procedure, a default does not mean automatic transfer; the panel still reviews the complaint on the merits. The panel ordered transfer of all eight domains in a single decision, roughly nine weeks after filing.
What this case illustrates for brand owners
The consolidation rule is only available when one registrant holds all the domains. If a sweep reveals the same cluster split across two registrants – perhaps to frustrate consolidation – two separate complaints are required. Portfolio registrars sometimes split holdings across related entities for exactly that reason; pre-filing WHOIS analysis should look for common registrant names, email patterns, and registrar accounts.
The .xyz zone is a gTLD, not a ccTLD. No registry-level eligibility requirement limits who can hold a .xyz domain, and no local-law or ccTLD-specific rule governs the dispute – the UDRP applies directly, without adaptation. That straightforward jurisdictional picture is one reason .xyz has become a frequent zone for opportunistic registrations alongside .com.
The myth that a UDRP complaint is too expensive to justify recovering lower-value domains deserves a direct answer. For a cluster of eight domains handled in one complaint, the WIPO filing fee was USD 1,500 – far less than the cumulative cost of eight individual proceedings or a court action. The consolidation rule exists precisely to make multi-domain recovery proportionate.
If a prior complaint produced an incomplete result – some domains transferred, others not – a targeted second filing for the remaining registrations is often viable. Email info@cognomenlaw.com to discuss the options.
Related at COGNOMEN
Frequently asked questions
Can one UDRP complaint cover domains in multiple zones – for example .xyz and .com together?
A single complaint may consolidate multiple domains only when they share the same registrant. The UDRP does not restrict consolidation by zone, so a mix of .xyz and .com domains held by one party can be joined in one filing. If the registrant differs across zones, separate complaints are required for each zone or registrant, and the forum and applicable rules for each zone must be confirmed.
What happens if the registrant does not respond to a UDRP complaint?
A non-response – called a default – does not result in automatic transfer. The panel still evaluates the complaint on the merits. The complainant must satisfy all three Paragraph 4(a) elements. A well-evidenced complaint should anticipate a default and build the record as if the panel will scrutinize every element closely, because it will.
Does passive holding count as bad-faith use under the UDRP?
Passive holding – pointing a domain at a blank or inactive page – can satisfy the bad-faith use requirement, but it is not automatic. Panels weigh the combination of factors: the strength of the complainant's mark, the absence of any plausible legitimate use, the registrant's conduct across the portfolio, and whether there is no credible reason for the registration other than bad faith. A well-constructed evidentiary record makes the difference.
Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.
Speak with Cognomen Law
For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter
This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.