How to file a UDRP complaint for a .xyz domain

How to file a UDRP complaint for a .xyz domain. UDRP and ccTLD domain recovery and defense across .xyz. Email the firm to assess your case. Transparent fees, r…

Your brand appears as a .xyz registration you never authorized. The registrant has pointed it at a parking page, a pay-per-click farm, or a site that trades on your reputation. You need it transferred – or cancelled – and you need to know whether the UDRP reaches .xyz at all.

The UDRP applies to .xyz. XYZ.com Registry has incorporated the Policy into its registry agreement with ICANN, which means all three UDRP elements of Paragraph 4(a) govern the dispute: confusing similarity to your mark, the registrant's absence of legitimate interest, and registration and use in bad faith. The registrant has 20 days to respond once a case commences. The only remedies are transfer or cancellation – no damages, no injunction.

This page explains what makes a .xyz complaint succeed, where to file it, what evidence you need, and how to begin.

Does the UDRP apply to .xyz domains?

Yes – .xyz operates under the full UDRP, administered by ICANN-accredited providers including WIPO and the Forum, exactly as .com does. XYZ.com Registry is an ICANN-contracted new-gTLD registry, and its registration agreement with ICANN incorporates the Uniform Domain Name Dispute Resolution Policy by reference. That means any .xyz registrant who accepts the registration agreement has agreed to submit to mandatory arbitration under the Policy when a qualifying complaint is filed.

There is no separate national procedure for .xyz. Unlike a country-code top-level domain – a .de, for example, which has no UDRP at all and routes disputes through the German courts, or a .uk, which operates the Nominet DRS – .xyz is a generic top-level domain subject to the same Policy that governs .com, .net, and every other ICANN-accredited gTLD. The complainant selects the forum; the registrant cannot choose a different venue.

One practical point: .xyz's positioning as a broadly available, low-cost new gTLD has made it attractive to registrants who engage in typosquatting and domain parking at scale. In our practice, we regularly advise brand owners who discover that their mark – or a close typographical variant – has been registered across multiple new gTLDs simultaneously, with .xyz among the most common. That pattern has significance at the bad-faith element, as discussed below.

What are the three elements you must prove to file a UDRP complaint for a .xyz domain?

A complainant must satisfy all three elements of Paragraph 4(a) of the UDRP; a failure on any one defeats the complaint entirely. The elements are cumulative, not alternative.

Element 1 – Identical or confusing similarity to a mark. The first element is the most straightforward. You must hold rights in a trademark – registered or, in appropriate circumstances, unregistered through demonstrated common-law use – and the disputed .xyz domain must be identical or confusingly similar to that mark. Panels assess confusing similarity by comparing the mark to the domain name at the second level (dropping the .xyz extension). A domain that reproduces the mark exactly, or with a minor misspelling, a generic prefix, or a descriptive suffix, will typically satisfy this element. The extension itself is generally disregarded for the similarity analysis.

Element 2 – No rights or legitimate interests. The second element shifts the practical burden. Once a complainant makes a prima facie showing that the registrant lacks a legitimate interest, the burden of production moves to the registrant to come forward with evidence of one. The Paragraph 4(c) safe harbors – a bona fide offering of goods or services before notice of the dispute, being commonly known by the domain name, or legitimate noncommercial or fair use – define the territory. A parking page monetized by pay-per-click advertising on trademark-related terms will not satisfy any of them.

Element 3 – Registered and used in bad faith. This is where .xyz complaints most often succeed or fail. The element is conjunctive: the domain must have been registered in bad faith and must be being used in bad faith. Panels have consistently held that Paragraph 4(b)'s non-exhaustive list of bad-faith circumstances – registration to sell to the mark owner at a profit, a pattern of abusive registrations, attracting users by creating a likelihood of confusion – are relevant indicators. Passive holding of a domain that is otherwise consistent with a bad-faith pattern can still meet the element under the doctrine developed across years of UDRP practice.

If you are not certain whether all three elements are met on your facts, contact COGNOMEN now for an assessment before investing in a filing. Reach us at info@cognomenlaw.com.

Which forum should you choose when you file a UDRP complaint for a .xyz domain?

Four ICANN-accredited providers accept .xyz UDRP complaints: WIPO, the Forum, the Czech Arbitration Court (CAC), and the ADNDRC. The choice matters for cost, timeline, and institutional depth of panel jurisprudence.

WIPO is the most widely used forum globally. Its filing fee starts at USD 1,500 for a single-member panel covering one to five domains. A three-member panel costs USD 4,000. WIPO also offers an expedited option for single-panel cases of up to five domains, targeting a decision within approximately one month. The WIPO database contains the deepest body of reasoned decisions, which makes its panel decisions the most-cited source of interpretive authority under the Policy. For most brand owners filing a first .xyz complaint, WIPO is the natural starting point.

The Forum begins at approximately USD 1,300 for one to two domains on a single-member panel. It handles a significant share of US-origin complaints and has a well-developed panelist roster. Together, WIPO and the Forum account for roughly 97% of all UDRP proceedings filed.

CAC offers the lowest entry-level fee, beginning around USD 500–800. It is less frequently used and has a smaller panel pool, which can be a consideration if your complaint turns on nuanced doctrine.

ADNDRC begins around USD 1,300 for one to two domains. It is the preferred forum for disputes with a strong Asia-Pacific nexus.

The decision matrix is straightforward for .xyz. If you hold a well-known international mark and the dispute is factually complex, choose WIPO – its published WIPO Jurisprudential Overview is the consensus reference for close questions. If cost is a constraint and the facts are clear-cut, the Forum or CAC are viable alternatives. If the registrant is based in mainland China or Southeast Asia, ADNDRC may add persuasive weight. Where multiple .xyz domains are involved and the registrant appears to be the same holder, a single complaint covering all of them at WIPO is usually the most efficient path.

What is the timeline once you file a UDRP complaint for a .xyz domain?

A standard .xyz UDRP complaint proceeds through five stages: complaint filing and formal compliance review, commencement and notification to the registrant, the response window, panel appointment and deliberation, and finally the decision and registrar implementation of any transfer order. Under the Rules, the registrant has 20 days from commencement to file a response. The overall process typically completes within about two months for a single-member panel, assuming no procedural complications.

Where does extra time come from? A request for a three-member panel adds a week or more to the appointment stage. A supplemental filing – permitted only at panel discretion – can delay the decision. A settlement suspension, which the panel may grant if the parties signal settlement discussions, pauses the clock entirely. And after the decision, the registrar has a short implementation period before effecting the transfer or cancellation. None of these extensions are automatic; the baseline timeline is fixed by the Rules.

The WIPO expedited option is worth considering if speed is critical. It is available for single-panel cases of up to five domains and targets a decision within approximately one month of filing. The filing fee is the same as for a standard WIPO case at that panel and domain count.

In a recent matter – a .xyz typosquat targeting a technology brand, spring 2025 – we filed the complaint at WIPO, the registrant defaulted, and a transfer order was issued approximately seven weeks after filing. Default does not guarantee a transfer; the panel still reviews the three elements on the evidence presented. That case also involved five additional new-gTLD registrations by the same registrant, all covered in a single complaint under one filing fee.

What evidence decides the outcome of a .xyz UDRP complaint?

The evidence record you build at the time of filing is the entire factual universe the panel considers. Unlike court litigation, there is no discovery, no cross-examination, no oral hearing. What you submit with the complaint – and what the registrant submits in the response – is what decides the case.

For Element 1, the core evidence is your trademark registration certificate (or, for an unregistered mark, evidence of long-standing and recognized use predating the domain registration). A clear chain of title matters. If the domain incorporates your mark with a minor variation, a side-by-side comparison in the complaint makes the visual similarity obvious to the panel.

For Element 2, screen captures of the registrant's use of the domain – the parking page, the pay-per-click ads, the competing goods or services, or the blank page – are the working material. A domain that resolves to pay-per-click advertising in your product category is strong evidence of no legitimate interest. So is a demand letter from the registrant asking for a sum far exceeding out-of-pocket registration costs.

For Element 3, panels pay close attention to the timing of registration relative to your mark's fame, the content of the website (or lack thereof), any prior communications between the parties, evidence of a pattern of registrations targeting multiple brand owners, and WHOIS or RDDS data showing the registration closely followed your product launch or a press event. A five-figure buy-back demand received shortly after the domain was registered is a potent indicator. So is a registration history showing the same registrant holds dozens of brand-matching domains across multiple zones.

We regularly advise brand owners who come to us weeks after discovering the registration, by which point useful evidence – such as the original content of the parking page – has been altered or removed. Preserving a timestamped record on discovery, before the registrant becomes aware of potential proceedings, is one of the most important steps a complainant can take.

Is the URS or a court action ever the better route for a .xyz dispute?

The right route depends on what you want and what the facts support. Three scenarios are worth mapping out for .xyz.

If you want the domain transferred and the facts meet all three UDRP elements, the UDRP is almost always the fastest and least expensive route. A standard complaint at WIPO costs USD 1,500 in filing fees plus legal fees, and is resolved in roughly two months. That is the baseline.

If you only need the domain suspended quickly – because it is actively harming your brand right now and you can accept suspension rather than outright transfer – the Uniform Rapid Suspension (URS) procedure is available for .xyz as a new gTLD. URS applies a higher "clear and convincing" evidentiary standard and its remedy is suspension for the registration term, not transfer. It is faster and cheaper, but the outcome is less permanent.

If you want monetary damages, neither the UDRP nor the URS can provide them. Both are limited to transfer or cancellation. A court action – in the US, for example, pursuing US anticybersquatting litigation – is the only route that reaches money. It is substantially more expensive and slower, and requires working with local litigation counsel in the relevant jurisdiction. For most brand owners facing a single .xyz registration, court action is disproportionate unless the conduct is egregious or the registrant is judgment-proof against a UDRP transfer order.

If the .xyz is one of several domains across multiple gTLDs and ccTLDs, a coordinated strategy may be necessary. A UDRP complaint at WIPO can cover all same-registrant gTLD registrations in one filing. A separate ccTLD procedure – say, a Nominet DRS filing for a parallel .uk, or an EURid/ADR.eu filing for a parallel .eu – will need to run concurrently, because ccTLDs have their own distinct procedures that are not covered by a UDRP complaint.

In a second recent matter – a .xyz and .com combination targeting a consumer-goods brand, autumn 2024 – we filed a single UDRP complaint at WIPO covering both domains, obtained transfer orders for both, and simultaneously coordinated a Nominet DRS filing for a parallel .co.uk held by the same registrant. The three-forum parallel approach added complexity but resolved all four disputed domains within four months.

If you are weighing the UDRP against a court action or a multi-forum filing, email us at info@cognomenlaw.com for a practical read on the facts and the route.

What does it cost to file a UDRP complaint for a .xyz domain?

Costs have two components: the forum filing fee and the legal fee. They are entirely separate.

The forum filing fee at WIPO is USD 1,500 for a single-member panel covering one to five domains. A three-member panel costs USD 4,000 for the same domain count. At the Forum, the filing fee begins at approximately USD 1,300 for one to two domains. If you file at WIPO and later withdraw before panel appointment, WIPO commonly refunds approximately USD 1,000 of the USD 1,500 fee.

Legal fees for a UDRP complaint on a single, straightforward .xyz domain typically fall in the USD 3,000–7,000 range in the current market, based on the flat-fee structures commonly offered for UDRP work. Multi-domain filings, factually complex disputes, or matters requiring an urgent strategy assessment at the outset will fall at the higher end of that range or beyond it. COGNOMEN publishes its fee ranges transparently rather than requiring a separate quote for each inquiry – because a brand owner deciding whether to file deserves to know the cost structure before committing.

The total all-in cost for a standard .xyz UDRP complaint at WIPO on a single domain – filing fee plus legal fee – thus typically sits in the USD 4,500–8,500 range, depending on complexity. That compares favorably with the cost of court litigation, which is substantially higher and harder to predict.

If the registrant requests a three-member panel after you have requested a single panelist, the parties generally split the additional cost of the three-member fee. That contingency is worth building into your budget at the outset.

What happens after you win a UDRP complaint for a .xyz domain?

A successful UDRP decision orders either transfer or cancellation of the domain. The XYZ.com Registry's registrar implements the order within a short post-decision window set by the Rules. Transfer means the domain is moved to a registrar and account of your choice; cancellation means the domain is deleted and returned to the open pool.

Most complainants request transfer rather than cancellation. Transfer gives you control of the domain and the ability to redirect it, park it, or retire it. Cancellation leaves the domain available for re-registration by anyone – including, in theory, the same registrant using a different identity.

There is a standard ten-business-day implementation hold after the decision is issued, during which the losing registrant could seek a court order staying implementation. In practice, a stay is rarely obtained. But it is a relevant consideration if the registrant has previously shown a willingness to litigate, or if the domain has significant commercial value that might motivate a court challenge.

One further point: a UDRP decision on a .xyz domain does not automatically transfer related domains in other zones. If the same registrant holds a matching .com or a matching ccTLD registration, each must be addressed separately – either through additional UDRP filings or through the applicable national procedure.

Related at COGNOMEN

• UDRP domain recovery – the full service across gTLDs and forums
• Recover a domain in passive holding – strategy and evidence for inactive registrations
• Serial cybersquatters – how panels identify patterns and what complainants must show

About COGNOMEN

COGNOMEN is an independent boutique focused exclusively on domain-name disputes. We recover, defend, and transact internet domains across generic and country-code zones, before WIPO, the Forum, CAC, ADNDRC, and national procedures, and in court where arbitration cannot reach. We act for brand owners, domain investors, and registrants – including respondent-side defense and reverse domain name hijacking. Our focus on domain disputes as the sole practice area means the practitioners advising you work this docket every day. To discuss a .xyz dispute or any other domain matter, contact info@cognomenlaw.com.

By Cordelia Roe | UDRP complainant practice and gTLD domain recovery

Disclaimer: This article is general information about domain-name dispute procedures and does not constitute legal advice. Outcomes depend on the specific facts, the zone, and panel or court discretion. For advice on your domain, contact info@cognomenlaw.com.

Speak with Cognomen Law

For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter

Related

• Udrp Recovery
• Recover Passive Holding Cloud
• Analysis Serial Cybersquatter Es

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.