Step-by-step: defend a .xyz domain used for criticism or commentary

Step-by-step: defend a .xyz domain used for criticism or commentary. UDRP and ccTLD domain recovery and defense across .xyz. Email the firm to assess your case.

A brand owner files a UDRP complaint against a .xyz domain you registered to host a consumer-rights blog, a product-review site, or a political commentary page. The complainant holds a trademark. You hold a name you chose deliberately, for a purpose that has nothing to do with selling anything. The question is not whether you can win – it is whether you know the six steps that separate a clean defense from a default transfer.

Defending a .xyz domain used for criticism or commentary under the UDRP turns on Paragraph 4(c) of the Policy, specifically the safe harbor for legitimate noncommercial or fair use without intent to mislead or tarnish. The respondent has 20 days from commencement to file a response. A well-built record – registration intent, site content, and the absence of commercial motive – is what decides whether the panel rules in your favor or the domain transfers.

This guide moves step by step through that record-building process. Each step carries the trap that most respondents miss.

Step 1: Understand the governing rules for .xyz before you draft a single word

The .xyz registry operates under the standard UDRP administered by WIPO, the Forum, CAC, and ADNDRC – the same rules that govern .com. That symmetry matters. It means the jurisprudence developed across tens of thousands of .com decisions applies directly to your .xyz dispute, and that experienced UDRP counsel can read the panel's likely reasoning before the case even opens.

The three elements a complainant must prove under Paragraph 4(a) are cumulative. First, the domain must be identical or confusingly similar to a trademark the complainant holds. Second, you – the registrant – must have no rights or legitimate interests in the domain. Third, the domain must have been registered and used in bad faith. The complainant carries the burden on elements one and three. On element two, the burden effectively shifts to you once the complainant makes a prima facie case. That shift is the first trap.

Many respondents treat element two as something the complainant must disprove. Under the consensus view of panels, once the complainant shows a mark and a lack of obvious connection between you and that mark, you must affirmatively produce evidence of your legitimate interest. Silence is not a defense. A late-filed response that merely denies bad faith, without demonstrating the purpose of the registration, almost always fails.

The .xyz zone also adds a practical dimension. Panels are aware that .xyz attracts a wide range of registrations – technical projects, creative ventures, commentary sites – and they do not presume a sinister motive from the extension alone. That can work in your favor, but only if your evidence matches the noncommercial purpose you assert.

Step 2: Map the Paragraph 4(c) safe harbors onto your specific situation

Paragraph 4(c) of the UDRP lists three circumstances that, if demonstrated, establish your legitimate interest in a domain. For a criticism or commentary site, the relevant safe harbor is Paragraph 4(c)(iii): you are making a legitimate noncommercial or fair use of the domain, without intent for commercial gain to misleadingly divert consumers or to tarnish the trademark.

Two sub-elements operate inside that safe harbor. "Noncommercial or fair use" addresses the purpose of the site. "Without intent to mislead or tarnish" addresses the manner of the use. Panels read both. A site that carries advertising revenue, affiliate links, or a solicitation to purchase a product or service will struggle to claim the noncommercial branch of that safe harbor, even if the editorial content is genuinely critical.

There is a second trap embedded here. The domain name itself must signal the critical or commentary purpose. A domain that is identical to the mark – with no qualifier such as "sucks," "review," "critic," "watch," or "truth" – can be held by some panels to suggest impersonation rather than commentary, even when the site content is clearly critical. The split in panel authority on this point is real. Some panels hold that the domain need only be used noncommercially; others require the domain to signal noncommercial purpose on its face. Identify which line of reasoning a complainant is likely to invoke and prepare a response that addresses both.

The third safe harbor – being commonly known by the domain name under Paragraph 4(c)(ii) – rarely applies to commentary registrants. The first safe harbor – a bona fide offering of goods or services before notice of the dispute under Paragraph 4(c)(i) – generally does not assist a noncommercial site either, because it presupposes a commercial offering. Focus your response on 4(c)(iii) unless your facts pull you toward 4(c)(ii).

For an assessment of your domain dispute and which Paragraph 4(c) argument fits your facts, contact info@cognomenlaw.com.

Step 3: Build the legitimate-interest record before the 20-day window closes

The 20-day response window runs from the formal commencement date issued by the chosen provider – WIPO, the Forum, CAC, or ADNDRC. That is the date the provider notifies you, not the date the complainant filed. Extensions are possible but not automatic. The provider's rules govern the process for requesting more time. WIPO, for example, allows a short extension by agreement or on a showing of good cause, but the window is narrow and the process has formal requirements.

Inside that window, assemble the following evidence before writing a single word of argument:

• A timestamped archive of your site as it existed on and near the date of registration – the Wayback Machine is useful but imperfect; supplement it with screenshots, server logs, or hosting records.
• Evidence of why you chose the domain: a contemporaneous email, a blog post draft, a domain purchase receipt with a note of your purpose, or any communications showing the commentary intent pre-dated any knowledge of a dispute.
• Proof that the site generates no commercial revenue: no AdSense account, no affiliate IDs, no products offered for sale. If there was ever a small revenue stream, be precise about the amounts and whether it covered hosting costs only.
• Confirmation that the domain does not purport to be affiliated with the trademark owner: a clear disclaimer, a "not affiliated with" notice, or editorial language that makes the critical stance unmistakable.
• Records of any communications from the complainant before the UDRP filing – a cease-and-desist letter, an offer to buy the domain, or a takedown notice. These become relevant to both the bad-faith analysis and any RDNH argument.

The trap at this step is over-relying on the site's current content rather than its history. Panels look at what the domain was used for at registration and at the time of the complaint. A site that turned from commercial to noncommercial shortly after receiving the complaint will receive skeptical treatment. The record must show that the commentary purpose was genuine from the start.

In a recent matter – a .xyz criticism site, spring 2025 – we assembled a legitimate-interest record for a registrant who had operated a consumer-watchdog page for several years. The complainant's cease-and-desist letter, sent before the UDRP filing, had demanded a five-figure sum to "resolve" the dispute. We submitted the letter as evidence of the complainant's commercial motive, which ultimately supported both the legitimate-use argument and an RDNH finding. The domain remained with our client.

How do you counter a claim that your site "tarnishes" the trademark?

Tarnishment is the complainant's most common fallback when the evidence of bad faith is otherwise thin. The argument runs: even if the site is critical, it associates the mark with negative content, which constitutes tarnishment under the Policy.

Panels distinguish between two things: criticism that damages a reputation through truthful, opinion-based commentary, and content that degrades or sexually or violently associates a mark with material unconnected to any legitimate critique. The former is, under the consensus view of the Policy, protected commentary. The latter may cross into tarnishment.

What does that mean for your response? Document the editorial basis for every adverse claim the site makes. Cite sources. Show that the content is connected to the mark owner's actual conduct – its products, its customer-service record, its public statements – rather than being gratuitous association with offensive material. A panel that sees a well-sourced, factual criticism page is in a very different analytical position from one reviewing a site that places the mark next to content with no connection to the brand owner's business.

Panels have consistently held that the use of a trademark in criticism, when the site makes no attempt to impersonate the mark owner and carries a clear disclaimer, is unlikely to constitute bad faith within the meaning of Paragraph 4(b). The tarnishment argument does not transform legitimate commentary into a bad-faith registration. Present that line of reasoning explicitly, with citations to the Policy provisions rather than to individual decisions.

Step 4: Address bad faith – and why the "registered AND used" test helps respondents

Bad faith under Paragraph 4(a)(iii) requires both bad-faith registration and bad-faith use. The cumulative standard is one of the UDRP's most important respondent protections. A registration made in good faith – for a genuine commentary purpose, with no intent to sell or disrupt – does not convert to a bad-faith registration just because the complainant later objects to the content.

Build your response around the registration moment. What did you know about the mark at the time of registration? If the mark owner was a public company or public figure, knowledge of the mark does not equal bad faith. Critics, by definition, know about the subject of their criticism. What matters is whether you registered the domain to profit from the mark, to disrupt the mark owner's business, or to attract traffic by impersonating the mark owner. None of those purposes is inherent in a commentary site.

Paragraph 4(b) lists four non-exhaustive circumstances evidencing bad faith: (i) registration to sell to the mark owner at a profit; (ii) registration to prevent the mark owner from using the domain, in a pattern; (iii) registration to disrupt a competitor; (iv) intentional attraction of users for commercial gain by confusion. Panels applying these factors to commentary sites regularly find that none applies, provided the registrant submits a coherent record showing noncommercial intent.

The trap at this step: do not assume that because you did not intend bad faith, the panel will infer good faith. State it. Explain, in plain and specific terms, why you chose the domain, what you intended to do with it, and why none of the Paragraph 4(b) factors applies to your situation. The response is your only guaranteed opportunity to speak to the panel.

Step 5: Assess whether an RDNH finding is realistic

Reverse Domain Name Hijacking is a formal finding under the UDRP Rules that the complainant brought the complaint in bad faith – typically to deprive a legitimate registrant of a domain. RDNH carries no monetary penalty. Its effect is reputational: the finding is published, and it signals to the domain community and to future panels that the complainant abused the process.

When is an RDNH finding realistic? Panels have applied the finding where: the complainant knew or should have known it could not succeed on at least one element; the complaint was filed to harass a critic or silence legitimate commentary; or the complainant made false or misleading factual representations to the provider.

For a commentary registrant, the clearest RDNH scenario is a complainant who files against a site that is plainly noncommercial, carries a visible disclaimer, and has operated openly for an extended period. A complainant who has sent a demand letter seeking a buy-back before filing the UDRP strengthens that case further – it suggests the complaint was an escalation of a commercial negotiation rather than a legitimate enforcement of trademark rights.

We regularly advise registrants who receive a complaint alongside a buy-back demand. The combination is not automatic RDNH – the complainant's subjective motive is difficult to prove. But where the evidence supports it, we include the RDNH argument explicitly and build the record around it. An RDNH finding without a monetary penalty still matters: it ends the complainant's ability to use the UDRP as a low-cost harassment tool against this registrant.

Step 6: Choose the right provider and decide whether to request a three-member panel

For .xyz domains, the complainant selects the provider – WIPO, the Forum, CAC, or ADNDRC. As respondent, you cannot change that choice. What you can do is request a three-member panel instead of the single panelist the complainant selected.

The cost implication is significant. If the complainant requested a single panelist and you request three, the parties generally split the higher three-member fee. At WIPO, a three-member panel for a single domain costs USD 4,000, compared with USD 1,500 for a single-member panel. That means your share of the upgrade is approximately USD 1,250 in addition to any legal fees.

Is the upgrade worth it for a commentary case? Often, yes. Three-member panels tend to produce more thoroughly reasoned decisions, and they offer a structural hedge against an outlier panelist with a narrow view of the commentary safe harbor. For a domain with significant expressive value – a long-running consumer watchdog site, a public-interest commentary page – the investment in a three-member panel is frequently justified.

The trap at this step: registrants sometimes assume that a three-member panel is inherently more favorable to respondents. It is not. Three panelists can reach a majority decision that goes against the registrant. What a three-member panel does provide is deliberation, and for nuanced fair-use arguments, deliberation is an advantage.

In a recent matter – a .xyz commentary domain, autumn 2024, involving approximately a dozen prior cease-and-desist communications – we advised a registrant to request a three-member panel. The majority decision found for the registrant on all three UDRP elements and included an RDNH finding. The single dissenting panelist would have denied the RDNH claim but still found for the registrant on the merits. Without three panelists, the published reasoning would have been far thinner.

If you have already received a UDRP complaint and the response deadline is approaching, email info@cognomenlaw.com for a focused review of your record.

What if the .xyz dispute also involves a national court action or a parallel ccTLD complaint?

The right route depends on the zone, the goal, and who controls the parallel proceedings. If the complainant files under the UDRP for your .xyz domain and simultaneously files a national court action in a jurisdiction where it can assert trademark infringement, the UDRP and the court proceed independently. The UDRP panel is not bound by the court's interim orders, and the court is not bound by the UDRP decision – though both may regard the other's reasoning as persuasive.

A complainant who also holds or disputes a parallel ccTLD – say, a .de or a .uk version of the same name – faces a different evidentiary landscape for each. The DENIC dispute mechanism for .de does not itself transfer a domain; it blocks transfer while German court proceedings run. The Nominet DRS for .uk uses an "abusive registration" test and reads the bad-faith limb as "registered or used" abusively – a lower bar than the UDRP's cumulative "registered and used." If the same complainant files in both zones simultaneously, the evidentiary records must be tailored to each forum. Evidence sufficient to defeat the UDRP complaint may not automatically prevail in a national ccTLD procedure, and vice versa.

For .xyz specifically, the UDRP is the governing procedure, and all four major providers are available. If the complainant chooses WIPO, you respond under WIPO's Supplemental Rules. If the Forum is chosen, that provider's supplemental rules govern. The substantive UDRP test is identical across all providers; the procedural differences are administrative. Work with counsel who knows each provider's supplemental rules – submission formats, word limits, and supplemental-filing procedures vary and can affect whether important evidence reaches the panel.

Where a brand owner is simultaneously pursuing a .xyz domain and a national court action for infringement, we coordinate with local litigation counsel in the relevant jurisdiction to ensure the UDRP record and the court record are consistent and mutually reinforcing – or at minimum, that they do not contradict each other in ways that could undermine either proceeding.

Related at COGNOMEN

• Respondent defense and RDNH: how COGNOMEN builds the record and pursues RDNH findings
• Defending a tech-sector domain claimed as a trademark: a step-by-step guide
• UDRP versus national court: which route decides your domain dispute?