How to recover a .xyz domain confusingly similar to your trademark

How to recover a .xyz domain confusingly similar to your trademark. UDRP and ccTLD domain recovery and defense across .xyz. Email the firm to assess your case.

Someone registers a .xyz domain that mirrors your brand name — adding a generic word, dropping a letter, or simply taking the exact mark in a different extension — and the page resolves to a competitor's ad feed or a parking screen asking for a five-figure buy-back. You want the name back. The question is whether a UDRP complaint is the right route, and what it actually takes to win one in the .xyz zone.

The .xyz registry has adopted the UDRP, meaning the standard three-element test of Paragraph 4(a) governs every recovery complaint. You must show that the domain is identical or confusingly similar to a trademark you hold, that the registrant has no rights or legitimate interests in it, and that it was registered and is being used in bad faith. A standard single-panel case filed at WIPO runs approximately two months from filing to decision, with a forum fee of USD 1,500 for one to five domains. Transfer or cancellation is the only remedy available.

This page sets out the full process — the legal test, the evidence, the timeline, the cost, and the cross-zone questions that arise when the same brand is squatted across multiple extensions.

Why .xyz falls under the UDRP and what that means for you

The .xyz registry has contracted with ICANN to apply the UDRP to all domains registered within it, placing every .xyz dispute on the same procedural footing as a .com complaint. That is significant: a brand owner does not need to identify a separate national procedure, retain counsel in a foreign jurisdiction, or meet a domestic presence requirement. The Policy applies globally, and any ICANN-accredited dispute provider — WIPO, the Forum, CAC, or ADNDRC — can hear the complaint.

It also means the three-element test of Paragraph 4(a) is cumulative. All three must be satisfied. Satisfy two and lose the third, and the complaint fails. That structure shapes the entire evidence strategy before a single document is filed.

In our practice, .xyz domains turn up most often in two fact patterns: exact-match registrations that mirror an established brand (the domain is simply [trademark].xyz), and typosquats that add or transpose a character. Both are recoverable under the UDRP — but the evidence required differs.

How does the three-element test apply to a .xyz confusingly similar domain?

The first element of Paragraph 4(a) — confusing similarity — is the threshold question, and for .xyz domains it is usually the most straightforward of the three to establish. Panels apply a side-by-side comparison of the disputed domain (minus the .xyz extension, which is ignored as a technical requirement) and the trademark. Adding a descriptive word like "shop," "store," or "official" to your mark is generally insufficient to distinguish the domain. A transposition of two letters is equally insufficient where the overall impression remains similar.

The complainant must hold trademark rights. Registered rights in any jurisdiction satisfy this element; unregistered common-law rights can also qualify, but they require evidence of acquired distinctiveness — the kind of documentation that is built over time and must be assembled carefully. A pending application without a registration date does not, by itself, establish rights for this purpose.

The second element — absence of rights or legitimate interests — shifts the evidential burden once the complainant makes a prima facie showing. At that point the registrant must come forward with evidence of one of the Paragraph 4(c) safe harbors: a bona fide offering of goods or services before notice of the dispute, being commonly known by the domain name, or a legitimate noncommercial or fair-use purpose. Silence — the default response — satisfies neither safe harbor. A significant proportion of .xyz disputes are decided on default, and default typically means the second element is conceded.

The third element — bad faith in both registration and use — is where most contested cases turn. Paragraph 4(b) sets out non-exhaustive circumstances: the domain was registered primarily to sell it to the mark owner at an inflated price; it was registered to disrupt a competitor; it was registered to attract users by creating a likelihood of confusion for commercial gain; or the registrant has a pattern of abusive registrations. In the .xyz zone, passive holding — a domain that resolves to a blank page or a parked page with no active use — does not automatically defeat a bad-faith finding. Panels have consistently held that passive holding can constitute bad faith when the complainant's mark is well-known and no plausible good-faith use of the domain can be imagined.

If you have assessed the three elements and believe a complaint is supportable, the next step is selecting the forum and assembling the evidence file. For an assessment of your .xyz domain dispute, contact info@cognomenlaw.com.

What evidence wins a confusingly similar .xyz domain dispute?

Evidence is the practical core of any UDRP complaint. A well-drafted legal argument built on a thin evidentiary record loses to a well-documented complaint with ordinary drafting. In our experience handling gTLD recovery matters, the evidence that actually decides .xyz cases breaks into three categories.

Trademark rights. The registration certificate, the filing date, the goods and services covered, and the jurisdiction of registration. For unregistered rights: evidence of use in commerce, consumer recognition, sales figures, marketing spend, and press coverage — any contemporaneous record that establishes distinctiveness before the disputed domain was registered. The registration date of the domain is set against the trademark's priority date; a domain registered before the mark existed is almost impossible to recover under the UDRP alone, absent extraordinary circumstances.

The confusing similarity. A side-by-side comparison with the mark, identifying the dominant element and explaining how a user encountering the domain would associate it with your brand. Screenshots of the domain as it resolves — whether to a parked page, a redirect, a pay-per-click feed, or a competing site — belong in the record.

Bad-faith indicators. Screenshots are essential. Capture the resolving page, the WHOIS/RDDS record showing registration date and registrant information, any communications in which the registrant asked for payment, any social media use of the domain, and any evidence linking the domain to a competitor. Prior UDRP filings against the same registrant are relevant — panels have recognized a pattern of abusive registrations as a Paragraph 4(b) factor.

In a recent matter (a .xyz exact-match registration, summer 2025), we assembled a trademark registration certificate, a series of timestamped screenshots showing pay-per-click ads targeting the complainant's industry, and WHOIS data placing registration three years after the mark's priority date. The case proceeded to default and resulted in transfer. The evidentiary file ran to fewer than forty pages.

What is the UDRP process and timeline for a .xyz complaint?

A .xyz UDRP complaint moves through five stages: filing and formal compliance review; commencement and the respondent's 20-day response window; panel appointment; the decision; and registrar implementation of any transfer order. Under the standard single-panel track at WIPO, the full process runs approximately two months from filing to a final decision, assuming no procedural complications.

What can extend the timeline? A respondent who files a response and requests a three-member panel adds several weeks and also changes the fee structure (the parties generally split the higher three-member fee). A request by either party for a supplemental filing can add further time. A settlement between the parties — not uncommon once a complaint is filed — results in the case being withdrawn before a decision issues, often with the complainant recovering a partial refund from WIPO.

WIPO also offers an expedited track delivering a decision within about one month, available for single-panel cases covering up to five domains. Where timing is critical — a product launch, a pending regulatory filing, or escalating consumer confusion — the expedited track is worth considering at the outset.

After a transfer order issues, the registrar implements it. That step typically takes a further week or two, during which the domain is locked and then transferred to the complainant's designated registrar account.

How do forum choice and cost structure work for .xyz disputes?

The four accredited UDRP providers — WIPO, the Forum, CAC, and ADNDRC — all have jurisdiction to hear .xyz disputes. In practice, WIPO and the Forum together account for roughly 97% of all UDRP proceedings. CAC offers the lowest entry-point fee, beginning around USD 500–800, and may be appropriate for straightforward, single-domain disputes where cost is the primary concern. ADNDRC is used less frequently and tends to be selected for disputes with an Asia-Pacific connection.

For most .xyz trademark recovery matters, the choice is between WIPO and the Forum. WIPO's published fee for a single-member panel covering one to five domains is USD 1,500. The Forum's entry fee begins at approximately USD 1,300 for one to two domains. The gap is modest. What differs is panel pool depth, procedural familiarity, and the searchability of the published decision record — all factors that inform the choice when the case is contested or novel.

Legal fees are separate from forum fees and depend on the complexity of the case, the volume of evidence, and whether the matter is contested. Market rates for a straightforward single-domain UDRP complaint run broadly in the USD 3,000–7,000 range, in addition to the forum filing fee. A contested matter with a responsive registrant and a three-member panel will sit at the higher end of that range or above it.

The decision that often surprises brand owners: if the registrant requests a three-member panel after the complainant filed for a single-member panel, the parties generally split the higher three-member fee. Budgeting for that contingency at the outset avoids a mid-case surprise.

If you are weighing WIPO against the Forum for your .xyz complaint, or want a cost estimate before filing, email info@cognomenlaw.com.

What if the same mark is squatted across .xyz and other zones?

The right route depends on the zone and the goal. If the same registrant holds [trademark].com, [trademark].net, and [trademark].xyz, a single UDRP complaint can cover all three — provided the registrant of record is identical — and the WIPO filing fee applies to the combined domain count rather than per-domain. That consolidation is an important cost efficiency when a brand is targeted across multiple gTLDs simultaneously.

If the squatter also holds [trademark].uk, the Nominet DRS governs that domain, and the test differs from the UDRP: the DRS asks whether the registration was "abusive," which reads "registered or used" abusively rather than the cumulative "registered and used" standard. A DRS complaint runs in parallel with a UDRP complaint and does not consolidate with it; those are separate filings before separate bodies. For .eu, the ADR.eu procedure applies, and the remedy may be transfer or revocation depending on EU eligibility. For .de, there is no arbitration route — a German court action is required, and a DENIC DISPUTE entry can block transfer of the domain while the litigation proceeds.

A brand owner confronting multi-zone squatting must decide whether to pursue every zone simultaneously or prioritize by traffic and commercial significance. We regularly advise brand owners on that sequencing decision, factoring in each zone's procedure, timeline, and cost.

In a recent multi-zone matter (autumn 2025, a software brand), the registrant held the exact trademark across three new-gTLD extensions including .xyz, as well as a corresponding .uk domain. We filed a consolidated UDRP complaint at WIPO for the gTLD domains and a parallel Nominet DRS complaint for the .uk domain. Both matters resolved within their standard timelines without the registrant filing a response in either proceeding.

What happens if the registrant responds and contests the complaint?

A contested UDRP response does not change the legal standard — the complainant still bears the burden on all three Paragraph 4(a) elements — but it changes the practical challenge considerably. A registrant who responds typically argues one or more of the Paragraph 4(c) safe harbors: that it was operating a bona fide business under the domain before notice of the dispute, that it is commonly known by the name, or that its use is noncommercial or fair. Each safe harbor requires factual rebuttal, not just legal argument.

Respondents in .xyz disputes occasionally argue that the .xyz extension itself signals a distinct, non-trademark use — for example, a generic website in a technology context. Panels have generally not accepted the extension alone as a distinguishing factor where the second-level domain is confusingly similar to the mark. The relevant question remains the overall impression created by the domain as a whole.

A contested case also raises the possibility of a Reverse Domain Name Hijacking (RDNH) finding against the complainant, if the panel concludes the complaint was brought in bad faith to deprive a legitimate registrant. RDNH findings are not common, but they are recorded and published. They do not carry a monetary penalty, but the reputational effect on the complainant is real and the finding becomes part of the permanent WIPO case record. We assess RDNH risk as part of the pre-filing evaluation on every matter we handle.

Is a UDRP complaint always the right tool — or is court action better?

The UDRP is the right tool when you want a transfer or cancellation quickly and at defined cost, and when the evidentiary record supports all three elements. It is a poor fit when you also want monetary damages, when the registrant's identity is genuinely disputed, or when the complaint is being filed as a tactic to pressure a party with a legitimate claim to the name.

US anticybersquatting litigation — the court route for US-registered marks against US-based registrants — is the only path to monetary damages in a domain dispute. It is substantially more expensive and slower than the UDRP, but it reaches remedies the UDRP cannot. For a brand owner whose primary concern is recovering the .xyz domain at reasonable cost and speed, the UDRP is almost always the right starting point.

One scenario where court action becomes relevant even for .xyz: where the registrant is unknown or has obscured identity behind a privacy proxy, and registrar disclosure of the underlying registrant data is needed before a complaint can be filed. In that situation, pre-litigation discovery tools in the relevant jurisdiction may be needed to identify the proper respondent. We coordinate that step with local litigation counsel in the relevant jurisdiction before filing a UDRP complaint once the identity is established.

The practical decision matrix: if the domain is .xyz and you want transfer → UDRP at WIPO or the Forum, approximately two months, USD 1,500 forum fee plus legal fees. If the same registrant also holds .com and .net versions → consolidate into one UDRP complaint. If you also need .uk recovered → file a parallel Nominet DRS complaint. If you need money damages or the respondent's identity is obscured → consider court action, with local litigation counsel handling the disclosure step before UDRP filing.

Related at COGNOMEN

• UDRP domain recovery — the complete service for gTLD complainants
• Recovering a domain after a failed buy-back or app challenge
• TMCH claims notices and .biz — analysis of the notice mechanism in practice