How to request a three-member panel to defend a .xyz domain

How to request a three-member panel to defend a .xyz domain. UDRP and ccTLD domain recovery and defense across .xyz. Email the firm to assess your case.

A UDRP complaint lands in your inbox. The complainant is a brand owner – or claims to be – and has chosen a single-member panel, the default path. You registered the .xyz domain legitimately, perhaps years before the complaint was filed. The cost of losing is real: your domain is transferred to someone who may not have a stronger claim, only a deeper filing budget.

To request a three-member panel to defend a .xyz domain under the UDRP, a respondent must file a formal panel-composition request, typically within the 20-day response window after case commencement, and agree to share the additional fee – bringing the total WIPO panel cost from USD 1,500 to USD 4,000, split equally when the complainant initially chose a single-member panel. The three-member panel gives each side an equal role in appointment; it is the primary procedural lever available to a respondent who expects a contested outcome on legitimacy or bad faith.

This page explains when the three-member request is strategically justified for a .xyz domain, how to build the legitimate-interest record, what triggers a reverse domain name hijacking finding, and what a credible defense file looks like.

Why does the UDRP apply to .xyz, and what are the stakes?

.xyz operates under the UDRP, the same mandatory dispute-resolution policy that governs .com, .net, and .org, by the terms of XYZ.com LLC's registry agreement with ICANN. That means a complainant can file a UDRP proceeding against any .xyz registrant before WIPO, the Forum, or CAC – without the registrant's consent and without any showing of urgency. The only remedies are transfer or cancellation. There are no damages and no cost awards, which is precisely why an opportunistic complainant may view the UDRP as a low-risk acquisition tool.

What is the practical exposure? A single-member panel deciding a contested .xyz case can reach a transfer order within roughly two months, before most brand owners would finish scoping a court filing. That speed is a feature for a legitimate complainant. For a registrant with a genuine claim to the name, it is a risk that warrants the full procedural response the Policy allows – including the three-member election. We regularly advise registrants in exactly this posture: a domain held for years, monetized or actively used, now suddenly the subject of a complaint by a party whose trademark rights may post-date the registration.

What is the UDRP three-member panel, and when should you request one?

A three-member panel replaces the default single panelist with a tribunal of three independent arbitrators: one nominated by the complainant, one by the respondent, and one appointed by the provider as the presiding panelist. The panel-composition election is made in the response. Once the response window closes – 20 days after the case commences – the election is final. A late request is not accepted.

The three-member request is not always appropriate. It adds cost and does not by itself change the legal test. The UDRP elements remain the same under Paragraph 4(a): identical or confusing similarity, absence of legitimate interest, and registration and use in bad faith – all three must be established by the complainant. When does the three-member structure earn its premium? Consider it in three situations.

First, when the legitimacy of your registration turns on a nuanced factual record – long prior use, a business built around the term, or a generic or descriptive domain – a single panelist's instinct may not survive scrutiny as well as a reasoned, unanimous or majority decision from three. Second, when the complainant is a large enterprise whose in-house or outside counsel drafted a complaint that looks procedurally complete but rests on a thin trademark claim or an implausible confusion argument. Third, when the record supports an RDNH finding and you want that finding to carry institutional weight. An RDNH declaration from a three-member panel lands harder in a subsequent dispute or negotiation than a note from a sole panelist.

For a read on whether the three UDRP elements are met in your .xyz case, reach us at info@cognomenlaw.com.

What are the Paragraph 4(c) safe harbors, and how do you build the legitimate-interest record?

Paragraph 4(c) of the UDRP provides three circumstances that, if demonstrated, establish a respondent's rights or legitimate interests in the disputed domain. The safe harbors are: a bona fide offering of goods or services before notice of the dispute; being commonly known by the domain name; and legitimate noncommercial or fair use. Each safe harbor has a distinct evidentiary profile, and the three-member record needs to show the panel exactly which applies and why.

Bona fide use before notice is the most commonly invoked. The question panels ask is whether the offering was genuine and pre-dated the complainant's awareness of the registration. Evidence that carries weight includes domain registration receipts with timestamps, hosting invoices, screenshots archived through a third-party capture service, business registration documents, emails referencing the domain in commerce, and any revenue or traffic records. The closer in time the filing date of the UDRP complaint is to your development of the site, the harder this safe harbor is to establish. Conversely, a domain developed actively over several years, with documented commercial activity, makes the complainant's burden on element two very difficult to discharge.

Commonly known by the name is more fact-specific. It applies when the registrant or its business is actually identified by the string – not just when the registrant would like to be. Supporting material includes trade name registrations, published marketing materials predating the complaint, client correspondence, invoices, and media coverage. For .xyz domains held by individuals or small entities, this safe harbor is often underutilized; we have defended cases where the registrant's own business name matched the domain character-for-character, a fact that the respondent failed to put into evidence without counsel's involvement.

Legitimate noncommercial or fair use covers criticism sites, commentary, fan pages, and certain nominative uses, subject to the caveat that the use does not mislead as to source or tarnish the mark. The boundaries of this safe harbor are more contested in the panels than the other two, and the three-member structure is particularly valuable here because minority and majority views exist; a three-member panel produces a decision that signals where the weight of authority currently sits.

Building the record means assembling every piece of contemporaneous evidence before the response is filed. Subsequent submissions – additional material filed after the initial response – are generally disfavored and often rejected by panels unless there is a showing of relevance the respondent could not have anticipated. In our practice, the response is the main event. Whatever did not make the response will likely not be considered.

How do you actually request a three-member panel at WIPO for a .xyz domain?

The mechanics are straightforward, but the sequencing matters. When filing your response through WIPO's electronic filing system, you select the three-member-panel option in the composition section of the response form. That election triggers the fee-sharing mechanism. Because the complainant paid the single-member WIPO fee of USD 1,500, the total three-member fee of USD 4,000 is divided: the complainant is responsible for USD 2,500 of the three-member cost, and the respondent pays the difference – generally USD 1,250 – within a short payment deadline set by WIPO after the response is received. Failure to pay on time can result in the case reverting to a single panelist.

At the Forum or CAC, the same Paragraph 4(e) mechanism applies, though the specific fee arithmetic differs. The Forum's filing fees begin around USD 1,300 for one or two domains on a single-member basis; the three-member supplement is pro-rated accordingly. CAC is the lowest-cost forum overall and is occasionally used for .xyz disputes, though WIPO and the Forum together account for roughly 97% of all UDRP proceedings. For .xyz domains, WIPO is the most common forum, and its procedures are well-documented.

After the response and fee are received, WIPO appoints a presiding panelist from its roster. The respondent nominates a panelist from WIPO's published list; the complainant does the same. The panel then proceeds to decision, typically within about two months from the case commencement date. A three-member panel does not inherently produce a slower decision, though deliberation among three panelists can extend the timeline modestly.

What evidence decides the outcome in a .xyz UDRP defense?

The evidence that tips a three-member panel is almost always contemporaneous documentation of registration intent and post-registration use. Abstract assertions of legitimate purpose rarely survive scrutiny. What works is a paper trail that the complainant's counsel cannot credibly dismiss as fabricated or post-hoc.

Five categories of evidence command the most attention from panels.

• Registration timeline vs. trademark priority: if your .xyz registration predates the complainant's earliest trademark filing, element three of the UDRP – bad faith at the time of registration – is extremely difficult for the complainant to establish. The UDRP requires the domain to have been registered and used in bad faith; absent targeting of a mark that existed when you registered, the complaint cannot meet this cumulative test.
• Use history and monetization record: active hosting, pay-per-click revenue logs, product launch emails, and customer-facing materials all demonstrate that the domain served a business purpose. Passive holding alone, with no historical use, is harder to defend – though panels have found legitimate interest even for undeveloped domains where the generic or descriptive value is self-evident.
• Domain name character – generic vs. distinctive: .xyz domains built on dictionary words, short acronyms, or descriptive phrases attract panel sympathy for the registrant in a way that a domain incorporating an arbitrary invented mark does not. A three-member panel applying the consensus view under the Policy will examine whether the complainant's mark was actually distinctive at the time the domain was acquired.
• Complainant's own conduct and timing: a complainant who approaches the registrant first with a low acquisition offer, receives a refusal, and then files a UDRP complaint has created a record that can support an RDNH finding. Document every communication carefully.
• Absence of targeting: panels look for affirmative evidence that the registrant knew of the complainant's mark and registered the domain to exploit it. Where the complainant's mark was obscure, unregistered, or confined to a remote jurisdiction at registration, the targeting inference collapses.

In a recent matter – a contested .xyz domain, spring 2025 – we assembled a response file for a registrant who had held the name for over four years, used it for a legitimate side project, and received a demand letter only after the complainant's trademark application published. The three-member panel found no bad faith at registration and denied the complaint. The RDNH question was a close call; the panel did not go that far, but the denial was decisive.

When is a reverse domain name hijacking finding realistic in a .xyz case?

Reverse domain name hijacking – or RDNH – is a formal finding that the complainant brought the complaint "in bad faith to deprive a legitimate registrant" of a domain, in the language of the Rules for Uniform Domain Name Dispute Resolution Policy. The finding is reputational, not monetary; there is no financial penalty. But it is published in the case record, cited in subsequent disputes, and it carries weight in any negotiation or court proceeding where the complainant's conduct is relevant.

What makes an RDNH finding realistic in a .xyz defense? The clearest cases share common features: the complainant knew or should have known that the respondent's registration predated the trademark; the complainant's mark is weak or narrowly registered and the domain is generic or descriptive; the complainant ignored the Paragraph 4(c) safe harbors in drafting the complaint; or the complaint omitted material facts – such as the registration date sequence – that were publicly accessible. A three-member panel is more likely to declare RDNH explicitly because the deliberative process among three panelists surfaces these deficiencies more systematically than a sole arbitrator might.

We have sought RDNH findings in cases where the complainant's timeline made targeting impossible, and where the domain's generic character was evident from the registration record. Not every panel will go that far even where it denies the complaint, but the three-member structure increases the probability that the analysis runs all the way to the RDNH question. In our practice, we always brief the RDNH argument when the factual predicate is present, because the finding – even if it does not arrive – shapes the panel's reading of the complainant's evidence.

To assess whether your .xyz case supports an RDNH finding, contact info@cognomenlaw.com.

How does the choice of forum affect a .xyz domain defense?

Choosing the right forum is a decision that belongs to the complainant, not the respondent – but understanding the forum's tendencies informs how the response is structured. For .xyz domains, the complainant will typically choose WIPO or the Forum. The CAC is a third option with a lower fee structure – beginning around USD 500–800 – and is occasionally used by cost-conscious filers, though it is the least common of the four accredited providers.

WIPO and the Forum have developed distinct bodies of published decisions. WIPO's decisions are indexed and searchable, making the panel nomination process more transparent. The Forum's panelist roster overlaps substantially with WIPO's, though the selection mechanism differs. For a respondent requesting a three-member panel, the nomination step is strategic: review the provider's published panelist list and select an arbitrator whose prior decisions reflect a careful reading of the Paragraph 4(c) safe harbors and a willingness to find RDNH where the facts support it. That nomination is a meaningful act, not a formality.

The cross-forum dimension matters in a different way if the complainant also holds a .com or another gTLD that mirrors the .xyz. A UDRP complaint can cover multiple domains in a single proceeding only if the registrant is the same holder. If separate proceedings are filed, the outcomes in each forum are independent. A well-drafted response in the .xyz case that succeeds on the merits can also serve as the evidentiary foundation for any parallel complaint that follows.

One zone-specific consideration: .xyz is not a ccTLD; it is a generic new-gTLD operated under ICANN's expanded program. The rules applicable are the standard UDRP and the Rules for Uniform Domain Name Dispute Resolution Policy, not a national equivalent. A complainant cannot access a simplified national procedure the way they might for a .uk domain under Nominet's DRS or a .eu domain under the EURid ADR procedure. That works in the respondent's favor: the three-element UDRP test, with its cumulative bad-faith requirement ("registered AND used"), is a more demanding standard for complainants than some ccTLD equivalents that read the bad-faith limb disjunctively.

What does a credible .xyz defense file look like, and what is a realistic next step?

A credible response in a three-member .xyz UDRP case has three components. First, a focused legal argument under each UDRP element – not a general denial, but a specific showing that the complainant's evidence fails to establish one or more of the required three. Second, an exhibit file that is organized, labeled, and directly cross-referenced in the text; panels read hundreds of cases a year and a disorganized exhibit set is a credibility problem. Third, a concise RDNH section if the facts support it – flagging the specific conduct that makes the complaint abusive, not just asserting the conclusion.

What the response must not do: overreach. A respondent who concedes that the domain is confusingly similar – perhaps because the string does incorporate the complainant's mark – but has a compelling legitimate-interest case should put all available energy into element two and element three, not dilute the filing with a weak confusing-similarity argument. Panels notice the concession, and a focused respondent is more credible than one who contests every element regardless of the record.

The realistic next step for a registrant facing a .xyz UDRP complaint is an immediate assessment of the three elements against the actual evidence available. That assessment determines whether a default response, a single-member response, or a three-member request is the right posture – and whether settlement is a viable option before the response is filed. The UDRP allows for suspension of proceedings for settlement discussions, which can be an efficient path where the complainant's interest is genuinely about the domain and not about a precedent.

In a second recent matter – a .xyz domain dispute, autumn 2024 – a technology startup received a UDRP complaint from an overseas brand owner who held a regional trademark in a territory where the startup had no customers. We identified that the trademark predated the registration but was obscure and narrowly scoped. After filing the three-member election and a detailed response, the complainant withdrew before the panel was fully constituted. No transfer. No cancellation. Early intervention at the response stage preserved the domain entirely.

Related at COGNOMEN

• UDRP respondent defense and RDNH across gTLDs and ccTLDs
• Defending a generic domain under the .me UDRP procedure
• Recovering multiple .org domains through a single UDRP complaint