How to recover a .xyz domain through a UDRP complaint

How to recover a .xyz domain through a UDRP complaint. UDRP and ccTLD domain recovery and defense across .xyz. Email the firm to assess your case.

Someone has registered the .xyz version of your brand. The domain may be pointed at a competitor's site, left on a pay-per-click parking page, or held idle while the registrant waits for a ransom offer. You want it back. The question is which procedure applies – and what it actually takes to win.

To recover a .xyz domain through a UDRP complaint, a complainant must satisfy all three elements of Paragraph 4(a) of the Uniform Domain Name Dispute Resolution Policy: confusing similarity to a mark the complainant owns, no legitimate interest on the registrant's side, and registration and use in bad faith. The UDRP applies to .xyz because XYZ.com LLC, the .xyz registry, is an ICANN-accredited operator bound by the Policy. A standard case is normally resolved in about two months, with the WIPO filing fee starting at USD 1,500 for a single-member panel. The only available remedies are transfer or cancellation.

This page covers the governing procedure, the three-element test, the evidence that decides cases, the forum options, and how to start.

Does the UDRP apply to .xyz domains?

Yes – and the answer matters because .xyz is a new generic top-level domain (new gTLD), not a country-code zone. All new gTLDs launched under ICANN's expansion program, including .xyz, are governed by the UDRP through their registry agreements. There is no separate .xyz dispute procedure, no registry-specific eligibility test, and no additional layer of local law to clear before filing. The same Policy that covers .com and .net applies here, word for word.

That means the complainant files with one of the four ICANN-accredited providers – WIPO, the Forum, CAC, or ADNDRC – rather than with the .xyz registry itself. WIPO and the Forum together handle roughly 97% of all UDRP proceedings and are the standard choice for .xyz matters. The registry is a passive actor: once a transfer order issues, XYZ.com LLC's registrar implements it.

One practical implication is worth noting. Because .xyz carries no eligibility restriction on who may register it, the registrant pool is broad. That breadth has attracted opportunistic registrations of brand-matching names, which is exactly why the UDRP pathway is used with regularity across this zone.

What are the three UDRP elements a complainant must prove?

A panel will transfer or cancel a .xyz domain only if the complainant establishes all three elements of Paragraph 4(a) on the balance of probabilities. Each element is distinct, and a failure on any one is fatal to the complaint.

Element one: confusing similarity. The disputed domain must be identical or confusingly similar to a trademark in which the complainant has rights. For most brand owners this is the easiest element to satisfy. A registered trademark is sufficient; a common-law mark supported by evidence of use will also qualify. Panels assess similarity by comparing the textual string of the domain against the mark, setting aside the ".xyz" extension as a non-distinctive label. A domain that incorporates the mark with a generic word added ("buy-[mark].xyz", "[mark]-deals.xyz") is routinely found confusingly similar.

Element two: no legitimate interest. The complainant must show the registrant has no rights or legitimate interests in the domain. Because the complainant typically cannot see inside the registrant's business, the Policy permits an initial showing that raises a prima facie case, then shifts the burden to the respondent to produce evidence of legitimacy. Paragraph 4(c) enumerates three safe harbors: a bona fide offering of goods or services before notice of the dispute, being commonly known by the name, or legitimate noncommercial or fair use without intent to mislead. If none of those applies, the second element falls.

Element three: registration and use in bad faith. This element is cumulative under the UDRP: both registration and use must be in bad faith. Paragraph 4(b) lists non-exhaustive indicators – offering to sell the domain to the mark owner for more than out-of-pocket costs; registering it to disrupt a competitor; intentionally attracting users through confusion for commercial gain; and a pattern of abusive registrations. Passive holding of a domain that clearly corresponds to a well-known mark has also been found to satisfy the use requirement, even when no active site exists.

At COGNOMEN, we assess the three UDRP elements against your mark and the registrant's conduct before recommending a filing. To get a read on whether your case meets the threshold, reach us at info@cognomenlaw.com.

How does the UDRP complaint process work for .xyz?

A UDRP complaint for a .xyz domain follows five stages: complaint filing, formal compliance review, response period, panel appointment, decision, and registrar implementation. The procedure is run entirely in writing; there is no hearing.

The complainant drafts and submits the complaint to the chosen provider – most commonly WIPO – and pays the filing fee. WIPO verifies that the submission meets formal requirements, then commences the case and notifies the registrant. From commencement, the registrant has 20 days to file a response. If no response arrives, the panel decides on the complaint alone, which frequently – though not invariably – favors the complainant.

Once the response period closes, the provider appoints the panel. A single panelist is the default; either party may request a three-member panel, with the requester bearing the cost difference unless the other side joins. A three-member panel provides a broader deliberation and, where the outcome is contested, a more defensible decision in either direction.

The panel issues its decision. If transfer is ordered, the registrar is instructed to move the domain to the complainant. The registrant has a short window – typically ten business days – to initiate a court action to stay implementation. Absent a stay, the transfer is carried out. The entire process, from filing to transfer, is normally completed in about two months for a single-member, single-domain case at WIPO.

In a recent matter – a .xyz registration matching a European software brand, spring 2025 – we obtained a transfer order in under nine weeks from filing. The registrant had offered the domain for sale at a five-figure asking price. No response was filed; the panel found bad faith under Paragraph 4(b) on the sale-to-owner ground.

What evidence decides whether you recover the .xyz domain?

Evidence is what separates a complaint that prevails from one that fails on element two or three. The complaint itself is a legal submission: it must be supported by exhibits, not assertions.

For the first element, the complainant should attach trademark registration certificates (or evidence of common-law use if no registration exists), together with side-by-side comparison of the mark and the disputed string. For the second element, a WHOIS or RDDS record showing the registrant's name, screenshots of the domain's current use (or non-use), and any evidence that the registrant has no plausible connection to the name all build the prima facie showing.

The third element – bad faith – is the one that panels scrutinize most closely. Useful evidence includes: screenshots of the registrant offering the domain for sale (especially if the price exceeds plausible out-of-pocket costs); pay-per-click pages monetizing the complainant's mark; evidence the registrant registered many similar names (pattern evidence); correspondence showing the registrant was aware of the mark; and the timing of registration relative to the mark's first use or registration. Where the domain is passively held, the complainant should demonstrate that no legitimate use is conceivable given the fame or distinctiveness of the mark.

Accuracy and completeness matter. A complaint that attaches the wrong trademark certificate, omits the registrant's current use, or makes assertions unsupported by exhibits invites a denial – or a supplemental-filing request that delays the case. We regularly advise brand owners on the exhibit set before they file, precisely to avoid those avoidable failures.

Which forum should you choose: WIPO or the Forum?

For most .xyz complainants, the choice is between WIPO and the Forum. Both apply the same Policy, so the legal test is identical. The differences are procedural, financial, and strategic.

WIPO's filing fee is USD 1,500 for a single-member panel covering one to five domains. The Forum's fee begins at approximately USD 1,300 for one to two domains, single panelist. The Czech Arbitration Court (CAC) offers a lower entry point, though it is less frequently used. WIPO offers an expedited option delivering a decision in about one month for single-panel cases covering up to five domains – a meaningful advantage when the infringing domain is actively causing traffic diversion.

WIPO carries the broadest panelist pool and the longest published decision record, which matters when drafting a complaint: a complainant's counsel can assess how panels at a given provider have treated similar fact patterns. The Forum has a comparable depth of decisions and a strong US-based practice. Where the case is straightforward and cost is the primary concern, CAC's lower fee may be attractive. Where speed is paramount, WIPO's expedited track is the most direct option.

What the UDRP cannot do is award money damages or injunctive relief. If the registrant's conduct has caused commercial harm and you need damages, a court action under applicable anticybersquatting legislation in the relevant jurisdiction is the only route that reaches monetary relief. We weigh that option against the UDRP on a case-by-case basis and coordinate with local litigation counsel in the relevant jurisdiction where court action is appropriate.

A worked comparison: if you hold a registered trademark and the .xyz registration is clearly a bad-faith park, a WIPO single-panel complaint is almost always the faster and lower-cost path. If you face the same registrant across five new gTLDs including .xyz, a single consolidated complaint – filed against one registrant, across multiple domains, in one proceeding – avoids multiplying fees and panel time. That is an option WIPO explicitly accommodates where the registrant is the same holder.

If you are weighing WIPO against a court action for your .xyz situation, or considering a multi-domain consolidated filing, email us at info@cognomenlaw.com to walk through the options.

What are the realistic outcomes, and what can go wrong?

The UDRP offers two remedies: transfer and cancellation. Most complainants want transfer. Cancellation – deleting the domain – is ordered when the complainant cannot hold a domain in the relevant zone or when transfer is otherwise inappropriate, but for .xyz, which carries no eligibility restriction, transfer is almost always the requested and available remedy.

What can go wrong? Several things. First, a complainant with only a pending trademark application (not a registration) faces a harder showing on element one; common-law rights must be substantiated. Second, a respondent who can demonstrate prior use of the name before the mark was established has a strong legitimate-interest defense under Paragraph 4(c). Third, generic or descriptive domains – even if identical to a mark – attract more searching scrutiny. A panel that finds the domain plausibly corresponds to a descriptive term, not exclusively to the complainant's mark, will often deny the complaint.

Reverse Domain Name Hijacking (RDNH) is the finding that a complainant brought the complaint in bad faith to strip a legitimate registrant of a name it was entitled to hold. An RDNH finding carries no monetary penalty, but it is a public reputational sanction and is listed in the decision record. We have defended registrants against exactly this type of abusive filing and, where the facts supported it, pursued the RDNH finding aggressively.

In a second recent matter – a .xyz name corresponding to a three-letter acronym, autumn 2024 – a brand owner filed without a registered trademark and relied on an asserted common-law reputation. The registrant, a company in a different industry, had held the domain for years and operated a genuine business under the same initials. We documented the registration history and the bona fide use, and the panel denied the complaint. The RDNH issue was raised but not found on those facts.

Related at COGNOMEN

• UDRP domain recovery services – the full practice overview
• How to prove no legitimate interest in a UDRP complaint
• TMCH claims notices and what they signal about .xyz registrations