.xyz domain names: registry, rules and pricing

XYZ.COM LLC is the sponsoring organisation and registry operator named on both the IANA delegation record and the ICANN Registry Agreement, signed 5 December 2013. See the base Registry Agreement for the details. Nothing in the dossier points to a separate corporate parent sitting above XYZ.COM LLC. You'll sometimes see the brand called "Generation XYZ", but that reads as a trading name rather than a distinct legal entity.

The servers that actually answer DNS queries and process registrations are run by CentralNic, listed as technical contact on the IANA record. ICANN sits above both as policy authority, the contracting party behind the Registry Agreement, setting the rules registries and registrars have to follow.

Put in .xyz's own terms: the registry, XYZ.COM LLC with CentralNic running the backend, keeps the master database of every .xyz domain and sets registry-level policy and pricing, as laid out on its pricing page. Registrars such as Namecheap or Rebel are the accredited retailers selling and managing individual registrations on the registry's behalf. The registrant is whoever holds the domain, and neither party vets them beyond the usual payment and contact checks.

The .xyz registry does not vet who buys its domains. Anyone, anywhere, can register one on a first-come, first-served basis, according to registrar guidance summarising registry policy. No local presence, no trademark, no stated purpose required, which puts it well outside the norm for country-code domains that often demand proof of residency or business registration.

The only rules that exist are technical. Names must run between 3 and 63 characters, excluding the .xyz itself, and can use letters, numbers and hyphens, though not at the start or end of the string. IDN scripts work across a wide range of languages too. None of that is an eligibility test, it's just formatting.

Registrars themselves can bolt on extra checks, identity verification to stop fraud, or their own acceptable-use terms, but that's registrar practice rather than registry rule. Premium and numeric-tier names are a separate matter entirely: pricing runs from a cheap numeric block right up to five-figure annual fees for the top premium names, all laid out on the registry's pricing page.

Transfers run through the standard ICANN mechanism: an authorisation code (EPP code) from the losing registrar, an unlocked domain at your current registrar, and sign-off from the registrant. The usual 60-day locks apply after registration and after transfer, same as any other gTLD, per ICANN transfer-lock policy. A transfer adds a year to your registration.

Minimum term is 1 year. The maximum is murkier: TLD-List puts the ceiling at 9 years, while Namecheap and TheXYZ list registrations running up to 10. Don't assume either number, check the term limit your own registrar offers at checkout.

Once a domain expires, registrars typically point to a 40-day renewal grace period followed by 30 days of redemption, per TheXYZ and NordName. Oddly, gen.xyz's own pricing page says domains can still renew for up to 15 days post-expiry, a figure that clashes with the 40-day number quoted everywhere else. Redemption fees swing wildly depending on the registrar, anywhere from roughly $50 to over $115, according to gen.xyz, DNSimple and Spaceship. Miss redemption and the name is deleted, up for grabs to anyone. The registry raised prices across the board in August 2025, registration, renewal and transfer fees all went up, as Namecheap reported, and another increase is already scheduled by CentralNic for August 2026. The registry itself doesn't fix an exact grace-period length or restore cost, both come down to whatever policy your registrar has decided to run with.