How to recover multiple .xyz domains in one UDRP complaint

How to recover multiple .xyz domains in one UDRP complaint. UDRP and ccTLD domain recovery and defense across .xyz. Email the firm to assess your case.

A brand owner discovers not one but a cluster of .xyz domains – each a slight variation on their registered mark – all pointing to pay-per-click pages or held passively while the registrant waits for an offer. Filing a separate complaint for every domain would multiply time and cost. The good news: the UDRP expressly allows a single complaint to cover multiple domains, provided the registrant of record is the same holder across all of them.

To recover multiple .xyz domains in one UDRP complaint, you must satisfy all three elements of Paragraph 4(a): the domains are confusingly similar to a mark you hold, the registrant has no rights or legitimate interests, and each domain was registered and is being used in bad faith. A standard WIPO case runs approximately two months from filing to decision; the filing fee for a single-member panel covering one to five domains is USD 1,500. Transfer or cancellation of the domains is the only remedy available.

This page explains exactly how the multi-domain mechanism works for .xyz, what evidence carries the case, how to choose your forum, and what realistic next steps look like once you are ready to file.

Why .xyz domains fall under the UDRP

.xyz is a generic top-level domain (gTLD) subject to ICANN's Uniform Domain Name Dispute Resolution Policy, which means the full UDRP machinery – WIPO, the Forum, CAC, and ADNDRC – applies from day one. The .xyz registry operates under standard ICANN accreditation, and every registrar offering .xyz registrations must include the UDRP in its registration agreement. There is no separate national dispute procedure to exhaust first and no ccTLD eligibility gatekeeping to satisfy.

That matters for strategy. A complainant targeting .xyz domains can go directly to WIPO or the Forum without first engaging the registry or any national authority. The same Policy that governs .com governs .xyz – identical elements, identical remedies, identical timeline. The only practical consideration is that .xyz is a new-style gTLD and, like other new gTLDs, is also covered by the Uniform Rapid Suspension (URS) procedure. We return to the URS comparison below, because for some multi-domain scenarios the URS is the faster route – but it does not transfer ownership, which is usually what brand owners want.

How does the single-complaint multi-domain rule work?

The UDRP Rules permit one complaint to name several domains only when a single registrant of record holds all of them. That is the threshold condition. If the registrant used different WHOIS contacts, different registrars, or separate privacy/proxy services that resolve to different underlying holders, consolidation is not automatic – you must argue that the circumstances warrant treating the registrations as a single enterprise, a showing that panels assess on the specific facts.

Assuming the same-holder condition is met, the mechanics are straightforward. The complaint lists every domain, develops the evidence for each one (or, where the domains form an obvious pattern, addresses the series collectively with individual notations), and pays a single forum fee covering the total domain count. At WIPO a single-member panel covering one to five domains costs USD 1,500; for six to ten domains the fee rises to USD 2,000. Filing a complaint domain-by-domain for, say, eight registrations would cost a multiple of that. The efficiency is real and material.

Panels also appreciate the consolidation. A clutch of domains – brand.xyz, brandstore.xyz, brand-official.xyz, brandsupport.xyz – tells a coherent story of a systematic bad-faith campaign. Presenting that story once, to one panel, produces a sharper record than scattered individual complaints. In our practice we consistently find that multi-domain complaints, where the domains share a common purpose (parking, phishing, typosquatting), produce cleaner decisions than sequenced single filings.

What are the three UDRP elements for a .xyz multi-domain case?

Every complaint must satisfy all three elements of Paragraph 4(a) of the UDRP. Failing any one defeats the complaint. Here is how each element applies when multiple .xyz domains are in play.

Element 1 – Confusing similarity

The panel compares each domain to the complainant's mark, setting aside the .xyz extension itself (it is irrelevant for this element under settled consensus). The question is whether the domain, standing alone as a text string, is identical to or confusingly similar to the mark. In a multi-domain case, each registration is assessed individually, though panels deal with them compactly where the pattern is obvious: a mark plus a descriptive suffix (brand + "shop", "official", "support", "store") is textbook confusing similarity. Registered trademark rights are the cleanest proof, but common-law rights – established through genuine commercial use and secondary meaning – are recognized, provided the complainant's evidence is thorough.

Element 2 – No legitimate interests

Because the complainant cannot always know what the registrant privately believes, the UDRP places the initial burden on the complainant to make a prima facie case that the registrant lacks rights or legitimate interests. Once that threshold is crossed, the burden shifts in effect to the respondent to come forward with evidence of any Paragraph 4(c) safe harbor: a bona fide offering before notice of the dispute, a demonstrated connection to the name, or a legitimate noncommercial or fair use. In a cluster of .xyz registrations showing no real commercial activity – parking pages, identical PPC layouts, passive holding – the prima facie case is usually self-evident. Multiple registrations of the same-mark pattern, held by the same party, reinforce each other.

Element 3 – Registered and used in bad faith

This element is cumulative: the domain must have been registered in bad faith and must be used in bad faith. Panels have consistently interpreted "used" flexibly – passive holding is not automatically a free pass; where the registrant had constructive knowledge of a well-known mark and cannot plausibly explain the registration, bad faith use can be inferred. Paragraph 4(b) lists specific non-exhaustive bad-faith circumstances: registering to sell to the mark owner at a profit, registering to disrupt a competitor, and registering to attract users commercially by creating confusion. A pattern of multiple registrations of the same-brand family strengthens the Paragraph 4(b)(ii) "pattern of abusive registrations" sub-element significantly. We regularly advise brand owners that the presence of several .xyz domains in a single registrant's portfolio is itself powerful bad-faith evidence – it is hard to argue innocent intent when the registrant holds brand.xyz, brand-inc.xyz, and brand-app.xyz simultaneously.

If you are assessing whether the three UDRP elements are met for your .xyz portfolio, reach us at info@cognomenlaw.com for an initial review. Knowing which elements are strong – and which need more evidence – before you file avoids a wasted filing fee and a denial on the record.

What evidence actually decides a multi-domain .xyz complaint?

Evidence quality is the single most variable factor in UDRP outcomes. The legal elements are the same for every complainant; the facts that fill them in are what distinguishes a clean transfer order from a denial.

For the confusing-similarity element, the foundation is a current trademark registration certificate or, for common-law rights, consistent commercial use evidence: dated product listings, invoices, press coverage, and sales data establishing when the mark acquired distinctiveness. The registration date matters because it frames the next element: if your mark postdates the domain registrations, your case faces a harder road.

For legitimate interests, the critical negative evidence is a WHOIS/RDDS history showing no active website, no business linked to the registrant, and no use under the domain that is not confusingly aligned with your brand. Screenshots of parking pages, PPC results pages, and Wayback Machine captures of historical content are standard exhibits.

For bad faith, the strongest evidence in a multi-domain case is the pattern itself. A registrant who holds eight .xyz variants of one brand was not randomly acquiring generic strings. Supporting evidence includes: RDDS data showing registration dates clustered around a brand announcement or product launch; a history of UDRP losses on similar domains (verifiable through public WIPO decisions); offers to sell any of the domains to the mark owner at a price exceeding registration costs; and email communications, if any, in which the registrant demanded payment.

In a recent matter (a .xyz multi-domain complaint, spring 2025), we assembled evidence showing that eleven domain variants of a consumer-technology mark were registered across a two-week window shortly after a major product launch. The clustering alone – alongside uniform PPC parking – was sufficient to establish the bad-faith pattern without a demand letter ever being sent. A transfer order issued for all eleven domains in the same decision.

Which forum should you choose – WIPO, the Forum, or another provider?

For .xyz, the four accredited UDRP providers are all available: WIPO, the Forum (formerly the National Arbitration Forum), CAC, and ADNDRC. The choice matters in practice, even though the legal test is identical across all four.

WIPO and the Forum together handle approximately 97% of all UDRP proceedings and maintain the deepest case databases, which is an asset when a panel must assess bad-faith patterns. WIPO is particularly well-suited to multi-domain, multi-territory brand disputes because of its international institutional familiarity; its filing fee for one to five .xyz domains on a single-member panel is USD 1,500. For six to ten domains it rises to USD 2,000 – still less than filing separately. The Forum's entry-level fee begins at approximately USD 1,300 for one to two domains; for larger clusters, confirm the current tiered schedule. CAC offers the lowest entry point – approximately USD 500–800 – and is appropriate for cases where cost is the primary concern, though it is the least frequently used of the four.

WIPO also offers an expedited option, delivering a decision within approximately one month on single-panel cases of up to five domains. If your multi-domain complaint covers five or fewer .xyz registrations and speed is paramount, the WIPO expedited path is worth evaluating.

What about a three-member panel? For a straightforward multi-domain .xyz case – same registrant, obvious parking, clear mark rights – a single-member panel is typically sufficient and less expensive. A three-member panel at WIPO costs USD 4,000 for one to five domains. You might elect three members where the case involves a genuinely complex legitimacy argument on the respondent's side, or where a pattern of inconsistent prior decisions makes predictability important. If you request a single panelist but the respondent requests three, the higher fee is generally split between the parties.

Is URS a better route than UDRP for .xyz?

The Uniform Rapid Suspension procedure is available for new gTLDs, which includes .xyz. Its main advantage is speed: a URS decision can suspend a domain faster than the standard UDRP timeline. Its decisive limitation is the remedy: suspension for the remainder of the registration term only, not transfer of ownership to the complainant.

The evidentiary bar is also higher. URS requires a "clear and convincing" showing on all three elements – a standard that panel guidance has interpreted as more demanding than the UDRP's preponderance standard. In a multi-domain scenario where the bad-faith evidence is strong and the complainant wants title transferred, the UDRP is almost always the correct route. URS makes sense when the complainant genuinely only needs the domains taken down – not transferred – and the evidence is so clear that the higher standard presents no risk. In most commercial situations, brand owners want the domains, not merely their suspension.

The choice, restated plainly: if you want to own the recovered .xyz domains, file UDRP. If you only need them disabled quickly and your evidence is unmistakably clear, evaluate URS. We advise clients on this threshold determination as the first step in every multi-domain engagement.

What happens between filing and the decision?

A standard UDRP proceeding runs approximately two months from filing to decision. The stages are: complaint submitted and formally reviewed for compliance, case commenced and served on the registrant, a 20-day response window opens, the panel is appointed after the response window closes, the panel deliberates and issues its decision, and the registrar implements any transfer or cancellation order.

For a multi-domain complaint, the same timeline applies. The panel will typically assess all listed domains in a single decision, which is procedurally efficient. If the registrant defaults – files no response – the panel proceeds on the complaint record alone. Default is not automatic victory; the panel still evaluates the evidence. However, a well-assembled complaint on a clear fact pattern with a defaulting respondent typically produces a clean outcome.

A note on implementation: after a transfer order issues, a lock period of generally around 10 days applies before the registrar moves the domains. This is the standard registrar-implementation window and is not cause for alarm. The domains are locked during this period to prevent any transfer away from the registrant.

If the registrant defaults or the complaint is ready to file, email us at info@cognomenlaw.com. We assess the three UDRP elements, assemble the bad-faith evidence, select the forum, and file the complaint on your behalf.

What if the registrant fights back – or the complaint is denied?

Panels may deny transfer for several reasons: weak or absent trademark rights, evidence that the registrant had a plausible legitimate reason for the registration, or a chronology where the registration predates any claim of mark use. A denial on the record can be embarrassing for a brand owner and, in egregious cases, generate a finding of Reverse Domain Name Hijacking (RDNH) – a formal panel statement that the complaint was filed in bad faith to strip a legitimate registrant of their domain. RDNH findings carry reputational weight even though the UDRP imposes no monetary penalty.

If a complaint is denied, the available next steps depend on the jurisdiction and the registrant's location. US anticybersquatting litigation remains an option for .xyz domains held by US-based registrants, offering a route to damages and a court-ordered transfer that the UDRP cannot provide. For registrants in other jurisdictions, the analysis turns to the applicable national courts and the practical enforceability of any judgment; COGNOMEN works with local litigation counsel in the relevant jurisdiction where court action is the appropriate path.

In our practice, the most common cause of avoidable denial is timing: a complainant files before assembling sufficient evidence of mark use predating the domain registrations. That sequence problem – mark use evidence versus registration date – is the first thing we check when reviewing a potential complaint.

How do costs break down for a multi-domain .xyz UDRP?

Two cost components apply: the forum filing fee and the legal fee for complaint preparation. They are entirely separate.

Forum fees at WIPO: USD 1,500 for a single-member panel, one to five domains; USD 2,000 for six to ten domains. If you withdraw or the case is terminated before panel appointment, WIPO commonly refunds approximately USD 1,000 of a USD 1,500 fee. Three-member panel fees at WIPO are USD 4,000 (one to five domains) and USD 5,000 (six to ten domains). For more than ten domains, WIPO quotes individually. The Forum begins at approximately USD 1,300 for one to two domains, with tiered pricing for larger clusters – confirm the current schedule before filing.

Legal fees for complaint preparation in the market typically range in the USD 3,000–7,000 bracket for a straightforward single-domain case. A multi-domain complaint covering closely related .xyz variants – same registrant, common pattern – does not multiply linearly; the incremental work per additional domain is lower once the core complaint is built. That efficiency is one of the concrete advantages of consolidating a portfolio attack into a single proceeding rather than sequenced single filings.

To put the math plainly: filing eight .xyz complaints individually at WIPO could cost eight times the USD 1,500 filing fee, plus eight times the minimum legal fee per filing. A consolidated complaint for the same eight domains costs the USD 2,000 WIPO fee (six to ten domain tier) plus a legal fee that reflects the consolidated work – a significant reduction. The multi-domain route is almost always the economically dominant choice when the same-registrant condition is met.

Related at COGNOMEN

• UDRP domain recovery services – the full range of complainant-side filings across all gTLD zones
• Analysis: recovering typosquat domains, including cross-zone considerations for brand owners
• FAQ: reversing an unauthorized domain transfer and what to do after account compromise