Step-by-step: recover multiple .biz domains in one UDRP complaint

Step-by-step: recover multiple .biz domains in one UDRP complaint. UDRP and ccTLD domain recovery and defense across .biz. Email the firm to assess your case.

A brand audit flags a cluster of .biz registrations – slight variations on your trademark, all pointing at pay-per-click pages or worse. Each one erodes your brand's credibility. You want them transferred in a single proceeding, not a sequence of separate filings. The question is whether the UDRP lets you do that, and exactly what it takes.

To recover multiple .biz domains in one UDRP complaint, the registrant of all targeted domains must be the same holder. All three elements of Paragraph 4(a) of the Policy must be established for every domain in the complaint: confusing similarity to a mark you hold, the registrant's lack of rights or legitimate interests, and registration and use in bad faith. WIPO's filing fee starts at USD 1,500 for one to five domains before a single-member panel, and a standard proceeding resolves in roughly two months. The only remedies available are transfer or cancellation – no damages, no legal costs award.

This guide walks each step in sequence, names the trap at each one, and explains what the evidence must show across the full set of .biz domains.

Does the UDRP apply to .biz, and can one complaint cover several domains?

The UDRP applies to .biz in full: the .biz registry requires all domain holders to submit to the UDRP as a condition of registration, making it one of the gTLDs where the Policy is binding from day one. That means WIPO, the Forum, the Czech Arbitration Court (CAC), and the ADNDRC are all available as providers. In our practice, WIPO and the Forum together handle the overwhelming majority of .biz proceedings.

One complaint may cover multiple domains, but Paragraph 4(f) of the UDRP Rules contains a hard condition: all domains in a single complaint must share the same registrant. Panels check WHOIS/RDDS records at filing. If two domains list different registrants – even where circumstantial evidence suggests common ownership – a panel may sever the complaint or refuse to hear the additional domains. That outcome wastes filing fees and delays recovery.

The trap at this step is a deceptively obvious one. Registrants who accumulate brand-targeting domains often register some under a privacy or proxy service and others under a named entity. The surface WHOIS records look different. Before you list all the domains, you must investigate whether the underlying registrant is in fact the same. Registrar WHOIS normalization, identical DNS configurations, shared parking pages, and linked payment trails are among the evidence types that support a common-holder argument – but they do not guarantee a panel will consolidate. When the record is ambiguous, consider whether a two-complaint strategy costs less than the risk of severance.

Step 1: confirm trademark rights and how they map to each .biz domain

Paragraph 4(a)(i) requires that the disputed domain be identical or confusingly similar to a trademark or service mark in which the complainant has rights. Under the consensus view, panels test this element on a visual and phonetic comparison of the domain string against the mark, largely ignoring the gTLD suffix – so the .biz extension does not help the registrant. Registered trademarks are the cleanest basis; unregistered or common-law marks may qualify, but they require evidence of use and distinctiveness that adds complexity and length to the complaint.

Work through every domain on your list. Some will be identical to the mark. Others will include a generic prefix or suffix – "buy-", "-store", "-online" – or will substitute a character or add a hyphen. Panels routinely find that adding a generic or descriptive term to a trademark does not prevent a confusing similarity finding; the registered mark remains recognizable in the string. The trap here is assuming a close-but-not-identical variation is automatically covered. A domain that combines your mark with a third-party mark, or that includes a genuinely distinctive additional word, can produce a different result. Audit each string individually before you commit it to the complaint.

Compile the trademark registration details – registration number, jurisdiction, goods and services class, filing and registration dates – for every mark relied upon. WIPO panels treat the trademark register as a public record; a clean registration certificate is the easiest and fastest way to satisfy this element.

To assess whether your marks are sufficient to anchor a multi-domain .biz complaint, contact info@cognomenlaw.com.

Step 2: build the legitimate-interest analysis for every domain

Paragraph 4(a)(ii) requires you to show that the registrant has no rights or legitimate interests in the domain. This is the element where most multi-domain complaints show an uneven record: the proof for one domain is solid, but the evidence for another is thin or contradictory. A panel evaluating ten domains in one complaint expects consistent, domain-specific treatment – not a generic paragraph that waves at the whole set.

The three Paragraph 4(c) safe harbors that registrants invoke are: a bona fide offering of goods or services before notice of the dispute; being commonly known by the name; and legitimate noncommercial or fair use. For each domain, your complaint must preemptively address whether any safe harbor could apply. In a recent matter – a cluster of .biz typosquats, spring 2025, targeting a consumer brand – we reviewed each domain string individually and documented, for every one, the absence of a bona fide commercial use, the absence of any WHOIS indication that the registrant was known by the name, and the pay-per-click content that undermined any fair-use argument. That domain-by-domain approach reduced the risk of a panel treating one weak domain as a defect that colored the rest.

The trap: a single domain on your list that the registrant can credibly connect to a reseller relationship or a prior common-law use can force a panel to pause on all the others. Identify your weakest domain early. If the registrant has any colorable argument for that one name, consider removing it from the complaint and pursuing it separately, or through a different route.

For a detailed breakdown of how to construct the legitimate-interest analysis across multiple domains, see our guidance on proving no legitimate interest in a UDRP proceeding.

Step 3: establish bad faith – the element that decides the outcome

Paragraph 4(a)(iii) requires that the domains were registered and are being used in bad faith. Both registration and use must be shown; the UDRP sets a cumulative standard. Paragraph 4(b) lists four non-exhaustive bad-faith indicators: registering to sell to the mark owner at above-cost; registering to disrupt a competitor; registering to attract users for commercial gain through confusion; and a pattern of abusive registrations.

In a multi-domain complaint the pattern factor is particularly powerful. A single opportunistic registration might be explained away. A portfolio of .biz domains built around one trademark – especially one acquired in a short window after the mark became publicly prominent – is strong circumstantial evidence that the registrant knew the mark and targeted it deliberately. Capture the WHOIS registration dates for every domain and map them against the date your mark first received public attention: a trademark application filing date, a product launch, a press announcement.

The use element is satisfied by the conduct of each domain. Pay-per-click landing pages that display competitor links are a classic bad-faith use. Phishing pages, inactive parking under a monetization service, and unresponsive domains held for years without any legitimate purpose (the "passive holding" doctrine) can all satisfy the use requirement, though passive holding cases require a stronger overall record on registration bad faith.

The trap at this step is failing to document each domain's use at the time of filing. Registrants sometimes alter or take down infringing pages after a demand letter is sent. Submit screenshots with visible URL strings and timestamps. Archive.org captures are a useful supplement. A panel that finds strong registration bad faith but weak evidence of use on even one domain may issue a split decision, transferring some names but declining others. That outcome is recoverable in a follow-on complaint, but it adds cost and delay.

How should you choose the forum and structure the filing?

For a .biz multi-domain complaint, the choice of forum is WIPO, the Forum, CAC, or ADNDRC. WIPO and the Forum are the practical options for most matters. WIPO's single-member fee for one to five .biz domains is USD 1,500; for six to ten domains it rises to USD 2,000 (single panel). The Forum's entry fee starts at approximately USD 1,300 for one or two domains, single panel. If you are targeting a larger cluster and cost is a factor, CAC offers the lowest entry point in the market.

A single-member panel is standard. If your complaint presents a genuinely contested legal question – say, a novel passive-holding argument or a complex common-law rights issue – a three-member panel is available at higher cost (WIPO charges USD 4,000 for a three-member panel on one to five domains). In our practice we rarely recommend three members for a straightforward multi-domain .biz complaint; the added cost rarely changes the outcome on clear-cut cybersquatting.

The filing itself must include: the complaint document, the annexes documenting trademark rights, WHOIS records for each domain, screenshots of each domain's current use, and any demand-letter correspondence. WIPO and the Forum both have online filing portals. Before you file, confirm the registrar for each domain: if any domain is registered through a proxy service, name the proxy as respondent and the underlying registrant if known. The forum serves the complaint to the email addresses in the WHOIS record; a bad address can delay commencement.

Consider the decision matrix this way. If all targeted .biz domains share one registrant and the bad-faith evidence is consistent across all of them, a single WIPO complaint covering up to five is usually the most efficient path – one filing fee, one panel, one decision. If the group splits between two apparent registrants, file two complaints concurrently rather than risk severance mid-proceeding. If any domain is also registered in a ccTLD like .uk or .de, those names need separate proceedings: a UDRP complaint does not reach ccTLD registrations, and .de disputes sit outside UDRP entirely.

For a read on whether the three UDRP elements are met across your .biz portfolio, reach us at info@cognomenlaw.com.

What happens after filing – the 20-day window and the path to a decision

Once the forum confirms the complaint complies formally, it commences the proceeding and notifies the registrant. The registrant then has 20 days to file a response. If no response is filed – a common outcome in clear-cut cybersquatting cases – the panel decides on the complaint record alone. Default does not automatically mean the complainant wins; the panel still applies the three-element test to the evidence submitted.

After the response window closes, the forum appoints the panel. A standard single-member panel case is typically decided within about two months of filing, including the response period and panel deliberation. WIPO's expedited option, available for single-panel cases of up to five domains, targets a decision within roughly one month. If your matter is time-sensitive – a product launch, a media event, a phishing campaign actively misdirecting your customers – the expedited route may be worth the premium.

The panel issues a written decision. If the complaint succeeds, the panel orders transfer or cancellation. The decision is then sent to the registrar, which implements it after a short waiting period – typically ten business days – during which the registrant can seek a stay by filing a court action in a mutually agreed or UDRP-specified jurisdiction. In our experience, stays are sought only rarely, and the waiting period passes without incident in the vast majority of cases.

The only remedies are transfer or cancellation. There are no damages, no legal cost awards, and no injunctions issued through the UDRP. If you also need monetary relief – compensation for diverted traffic, for example – a separate court action under applicable anticybersquatting legislation is the route; that is a different proceeding handled with local litigation counsel where required.

What if the panel finds the complaint was brought in bad faith?

Panels may find Reverse Domain Name Hijacking (RDNH) – a finding that the complaint was filed to deprive a legitimate registrant of its domain. In a multi-domain complaint, an RDNH finding is reputational, not monetary, but it is a matter of public record in the WIPO or Forum decision database. The most common triggers for an RDNH finding are: filing when the complainant clearly lacks trademark rights, filing after the complainant tried and failed to buy the domain at market price, and filing against a registrant who registered the domain before the complainant's mark existed.

In a multi-domain .biz complaint, the risk of an RDNH finding is real if even one domain on the list was registered by the current holder before the complainant's trademark date. That one vulnerable domain does not automatically contaminate the others, but a panel that finds the complainant pressed an unwinnable claim on one name may be skeptical about the remainder. The myth worth addressing directly: "I have a registered trademark, so the UDRP will always side with me." Trademark registration alone does not decide the case. Panels look at the registration date of the domain relative to the mark, the registrant's conduct, and the use of the domain. A mark registered after the domain was registered in good faith will almost never succeed under the UDRP.

We regularly advise complainants who discover mid-audit that one domain on their list was registered earlier than their trademark. The right answer in that situation is to remove that domain from the complaint, not to file and hope. A clean complaint covering only the names where the evidence holds up is a better strategy than a large complaint that gives a panel an easy basis for RDNH or denial.

For situations where a .biz complaint has already produced an adverse result, or where a registrant needs to mount a defense against an abusive filing, see our service on UDRP recovery and defense.

Cross-zone considerations: when .biz is only part of the problem

Brand owners who find a registrant holding their trademark as a .biz cluster frequently discover the same registrant holds the same string in other zones – .com, .net, .org, or a ccTLD. The UDRP covers all of these gTLD zones in a single proceeding if the registrant is the same across all of them. A complaint listing a .com, two .nets, and three .biz domains registered by the same holder is procedurally valid. The fee structure applies to the total count of domains regardless of zone mix.

ccTLDs are different. A .uk registration goes to Nominet's DRS; a .eu registration goes through the CAC's ADR.eu platform; a .de registration has no UDRP route at all and requires German court proceedings, with a DENIC DISPUTE entry available to block transfers in the interim. These are separate procedures with their own rules, filing requirements, and cost structures. They cannot be joined to a UDRP complaint. If the registrant has spread across both gTLDs and ccTLDs, the right approach is a coordinated multi-forum strategy: file the UDRP first for the gTLDs, and initiate the ccTLD procedures in parallel where the urgency warrants it.

If domain theft – account compromise, unauthorized transfer – is also in the picture, that is a separate recovery path. Registrar escalation, registry dispute entry, and in some cases court intervention are the relevant tools. That process sits outside the UDRP entirely. For stolen or hijacked domain recovery, see our guidance at recover a stolen or hijacked domain.

In a recent multi-zone matter – a .biz and .com cluster, summer 2025, held by a single registrant who had placed the domains behind a parking monetization service – we filed a consolidated UDRP complaint at WIPO covering both zones simultaneously. The .uk counterpart was filed with Nominet concurrently. All proceedings concluded within the expected timeframes, and the full portfolio was transferred to the brand owner without recourse to court.

Related at COGNOMEN

• UDRP domain recovery – complainant services across gTLD and ccTLD zones
• How to prove the registrant has no legitimate interest in your domain
• Recover a stolen or hijacked domain outside the UDRP