How to recover a lapsed .xyz domain that was re-registered

How to recover a lapsed .xyz domain that was re-registered. UDRP and ccTLD domain recovery and defense across .xyz. Email the firm to assess your case.

Your brand's .xyz domain expired during a billing gap, a registrar transition, or a straightforward administrative oversight. Within days of entering the drop, a third party caught it – and now it parks, redirects, or redirects to a competing offer. You want it back. The question is how, and whether the evidence you hold is enough to win.

To recover a lapsed .xyz domain that was re-registered, the primary route is a UDRP complaint filed with WIPO or another accredited provider, because .xyz is a generic top-level domain subject to the UDRP in full. You must satisfy all three elements of Paragraph 4(a): confusing similarity to a trademark you hold, no legitimate interest in the registrant, and registration plus use in bad faith. The WIPO filing fee for a single domain, single-member panel is USD 1,500. A standard case resolves in approximately two months.

This page covers the legal test, the evidence that decides the outcome, the realistic alternatives, and the practical next step – including what to do when a negotiated purchase is faster than arbitration.

Why .xyz falls squarely under the UDRP

The .xyz registry is a generic top-level domain (gTLD) subject to ICANN's standard UDRP in the same way as .com, .net, or .org. WIPO administers the overwhelming majority of UDRP proceedings for .xyz, with the Forum as the principal alternative. WIPO and the Forum together account for roughly 97% of all UDRP proceedings across gTLDs. Because .xyz carries no country-code status or specialized eligibility rules, a brand owner holding a registered trademark – or, in some circumstances, a strong unregistered mark – can file a complaint without satisfying any residency or nexus requirement.

That is the good news. The complication specific to lapsed domains is the bad-faith element. Under Paragraph 4(a)(iii), bad faith must exist at the time of registration as well as in subsequent use. When a domain lapses, the re-registration by a third party constitutes a fresh registration event. Panels have consistently examined whether the new registrant acquired the domain with knowledge of your mark – and whether the pick-up was opportunistic or coincidental. That is where the evidentiary work concentrates.

We regularly advise brand owners who discover their .xyz has been caught in a drop. The issues that surface most often are the same: was the re-registrant a sophisticated dropcatcher who knew the mark's value, or a party with a plausible independent claim to the string? Getting that answer right determines whether UDRP, negotiation, or a portfolio monitoring program is the appropriate path.

What the three UDRP elements mean for a lapsed-domain recovery

Each of the three UDRP elements carries specific weight when the registration history includes a lapse. A clear understanding of each element – and where the weakness is most likely to appear in your case – is necessary before filing.

Element one: confusing similarity. This element is typically the easiest to satisfy. If your trademark is registered and the domain replicates it exactly or adds only a generic term, panels routinely find similarity. The .xyz extension is treated as non-distinctive and ignored for this comparison. A prior registration history in your name strengthens the argument, though it is not formally required for the element itself.

Element two: no legitimate interest. The registrant must have no rights or legitimate interests in the domain. Under Paragraph 4(c) safe harbors, a registrant may defend by showing a bona fide offering of goods or services before notice of the dispute, that they are commonly known by the name, or that they are making legitimate noncommercial or fair use. For opportunistic dropcatchers, these defenses rarely hold. But if the string is also a common word or a descriptive term in another language, panels have granted the benefit of the doubt. Pre-dispute use – a live website, a linked business registration, or a prior generic use of the term – raises the complexity immediately.

Element three: registration and use in bad faith. This is where lapsed-domain cases live or die. The Paragraph 4(b) bad-faith factors – most relevantly, registration to sell back to the mark holder, to attract users by creating confusion, or as part of a pattern of abusive registrations – all require that the re-registrant knew of your trademark when they registered the domain. Evidence of a prior registration in your name, the public profile of your brand, active WHOIS/RDDS records at the time of lapse, and any demand for payment after re-registration all build that knowledge inference. Passive holding – the domain pointing nowhere in particular – does not automatically defeat bad faith, and panels have consistently held that parking a valuable mark without active use can satisfy the use limb in the right fact pattern.

For a read on whether the three UDRP elements are met in your .xyz case, reach us at info@cognomenlaw.com.

How does the re-registration timeline and drop history affect your claim?

The sequence of events between your registration lapse and the current holder's registration matters significantly. Panels examine the gap between expiry, the drop date, and the new registration date. A re-registration that occurs within days of the domain entering the drop – through an automated dropcatching service – is strong circumstantial evidence of deliberate targeting. A re-registration months later is harder to characterize, particularly if the current registrant has developed a website in the interim.

Chain-of-title review is the first practical task in any lapsed-domain recovery. We examine the WHOIS/RDDS history, archived UDRP filings against the domain or the registrant, any prior dispute history visible in WIPO's case database, and the registrant's portfolio of other domains. A registrant holding dozens of third-party brand names in .xyz and adjacent zones is a very different adversary from a single individual who registered one domain and built a genuine site.

Prior dispute history is a double-edged data point. If the domain has previously been the subject of a complaint – even one that was withdrawn or denied – that history is on the record and panels may weigh it. We have acted in matters where a prior denied complaint, filed without sufficient evidence, was cited by the respondent as a marker of legitimate interest. Evidence assembled carelessly the first time creates problems the second time. Assemble it correctly before filing.

When is a direct purchase faster than a UDRP complaint?

The UDRP is not always the fastest route. A standard case resolves in approximately two months. Where the re-registrant is willing to sell and the asking price is commercially rational, a negotiated purchase – structured through escrow and a proper chain-of-title agreement – may close the matter in days rather than weeks. Is it always the right call? Not necessarily. Paying a dropcatcher validates the business model and may not produce a clean chain of title if the domain has prior dispute history attached to it.

The decision matrix works as follows. If the registrant is known to be a professional dropcatcher with a portfolio of brand-matching names and a pattern of demanding above-market prices, UDRP is usually the right path. Filing cost is USD 1,500 at WIPO for a single-member panel. Legal fees for a straightforward single-domain complaint fall in a market range commonly around USD 3,000–7,000, separate from the filing fee. Total cost is knowable in advance. The only risk is losing the complaint on the evidence – which is why the pre-filing assessment is the most important step.

If the registrant appears to be an individual with a plausible reason for holding the name, and the domain's commercial value to you is modest, a direct approach or a brokered transaction may be lower-risk. In that path, we run pre-acquisition due diligence on chain of title and prior dispute history, and structure the escrow to ensure clean transfer. For a domain with a tainted history – a prior UDRP loss against a prior holder, a disputed transfer on record – that diligence step is not optional.

In a recent matter (a .xyz brand-match domain, spring 2025), a client received a five-figure re-purchase demand from a dropcatcher who had caught the domain within 48 hours of expiry. Rather than pay, the client filed a UDRP complaint at WIPO. The registration timeline, the registrant's wider portfolio, and the client's longstanding trademark record established bad faith. A transfer order followed. The total elapsed time from first contact with COGNOMEN to the WIPO decision was under ten weeks.

In a second matter (a .xyz domain matching a regional services brand, autumn 2024), the re-registrant had built a live site in the same service category during the nine months the domain was lapsed. A UDRP was filed but the evidence for bad faith at the time of re-registration was thin. The parties reached a negotiated transfer at a figure well below the original demand, once the respondent received the complaint and assessed their position. Both routes – arbitration and negotiation – were live at the same time. Keeping them both open is frequently the right posture.

What evidence decides a lapsed .xyz UDRP complaint?

Evidence assembly is the core work. Before filing, we build the record around four categories. First, trademark proof: registration certificate, specimen of use, and ideally evidence of continuous use predating the re-registration. Second, registration history: screenshots, archived WHOIS records, registrar correspondence, and any renewal failure notices that establish you as the prior holder. Third, bad-faith indicators: the re-registrant's portfolio, any pay-per-click or parking revenue visible on the domain, pricing demands, and the temporal gap between lapse and re-registration. Fourth, absence of legitimate interest: evidence that the registrant has no independent trademark, business name, or common-law use of the term in any jurisdiction where they operate.

What panels have consistently treated as decisive is the combination of temporal proximity to the lapse and a brand that was publicly visible at the date of re-registration. If your brand had active social media, press coverage, or a live website when the domain expired, and the re-registrant registered it within days, the inference of deliberate targeting is strong. If your brand is niche, your registration lapsed years ago, and the current registrant has operated a genuine site since before you sent any notice, the complaint faces real resistance.

The second element – no legitimate interest – is where respondents most often try to find traction. We have defended registrants who were wrongly accused of bad faith after registering a descriptive .xyz string. In those cases, the legitimate-use record and the good-faith registration story are the instruments of defense. Knowing how the opposing argument is built helps in both directions: it makes the complainant's case tighter and the respondent's defense more targeted.

If a prior filing or response produced a bad outcome in your .xyz dispute, a focused second read can identify the element that was missed. Email info@cognomenlaw.com to discuss.

How does .xyz compare to other zones – and when does the route change?

The .xyz zone offers a cleaner UDRP path than most country-code zones. There are no eligibility requirements for registrants or complainants, no residency nexus, and no pre-dispute administrative process. Compare that to the Nominet DRS for .uk, which requires the complainant to show rights in a name and then satisfy an "abusive registration" test that reads "registered or used" abusively – a structurally different bar from the UDRP's cumulative "registered and used in bad faith." Or to .de, where there is no UDRP equivalent at all and disputes proceed through the German courts, with a DENIC DISPUTE entry available to block transfer while litigation runs.

For a brand with the same name registered as both a .xyz and a .com – a common portfolio pattern – the UDRP complaint can cover multiple domains in a single filing, provided both are held by the same registrant. That efficiency is worth capturing where it applies. If the registrant has spread the registrations across different account holders – a common evasion technique – separate filings are required. WIPO's expedited option, delivering a decision within approximately one month, is available for single-panel cases of up to five domains and may be appropriate where timing is commercial-critical.

If the domain's re-registration is part of a wider pattern of abusive registrations across zones – .xyz plus matching .com and .net registrations by the same party – a consolidated strategy covering all zones in one or two filings is often the most efficient path. We have handled multi-zone recovery matters where coordinated UDRP filings across gTLDs and a parallel ccTLD procedure resolved a portfolio problem that, filed separately, would have taken twice as long and cost proportionally more.

How to protect the .xyz from lapsing again

Recovery solves the immediate problem. It does not solve the administration failure that created the opening in the first place. Once a domain is recovered – by transfer order or by purchase – the practical work is to rebuild the registration infrastructure so the same gap cannot recur.

That means: auto-renewal enabled with a payment method that does not expire, administrative and technical contacts confirmed and current, registrar-lock status set to prevent unauthorized transfer, and a monitoring program covering variations of the brand string across new gTLDs and adjacent zones. Dropcatchers watch expiry lists programmatically. A domain that lapses once is more likely to be targeted again if recovery was publicized through a UDRP filing, because the filing itself confirms the name's commercial value.

We have seen clients recover a domain through UDRP and then lose it again within eighteen months through a second lapse. The recovery effort was wasted. Portfolio-level brand-protection monitoring – tracking registrations and lapses across zones, flagging newly registered confusingly similar strings, and alerting on attempted transfers – turns reactive recovery into a proactive posture. The cost of monitoring is a fraction of a single UDRP filing. The comparison is not complicated.

A concern we hear regularly: "the domain is not that important to us commercially – is it worth the effort?" The answer depends on how the domain is being used by its current holder. A lapsed .xyz pointing to a phishing page or a competing checkout creates liability exposure that is not measured in domain-name filing fees. The harm accrues before the complaint is decided.

Related at COGNOMEN

• Domain transactions, due diligence, escrow, and brand-protection services at COGNOMEN
• Brand-protection monitoring FAQ – how ongoing portfolio monitoring works and why it matters
• How to recover a passively held .biz domain – a step-by-step UDRP guide