Protect a brand in a new .co gTLD launch: what panels actually decide

Protect a brand in a new .co gTLD launch: what panels actually decide. UDRP and ccTLD domain recovery and defense across .co. Email the firm to assess your cas…

A new .co delegation opens, sunrise applications close, and a week later a stranger has registered your brand as a .co domain — perhaps with a typo, perhaps exact-match — pointing it at a pay-per-click page. You want it transferred. The question is which procedure applies, what the panel will actually examine, and how strong your position is before you spend a dollar on filing fees.

To protect a brand in a new .co gTLD launch, the controlling procedure is the UDRP as administered by WIPO or the Forum, because .co is one of the ccTLDs that has adopted the UDRP rather than operating a separate national procedure. The complainant must satisfy all three elements of Paragraph 4(a): confusing similarity to a mark, absence of respondent rights or legitimate interests, and registration and use in bad faith. A standard single-member case at WIPO carries a filing fee of USD 1,500 and runs about two months from filing to decision.

This analysis walks through the governing doctrine, the evidence panels weigh, where consensus ends and minority reasoning begins, and the practical choices a brand owner faces at each stage of a .co launch dispute.

Why .co falls under the UDRP, not a separate ccTLD procedure

.co is administered by the Colombian registry but has operated under UDRP dispute rules since the zone's commercial expansion, with WIPO as the designated provider. That single fact changes everything about strategy. Unlike .de — where there is no UDRP and disputes belong in German courts — or .uk — where Nominet runs its own DRS with a distinct "abusive registration" test — a .co complainant works within the familiar three-element UDRP framework used for .com and other major gTLDs.

Panels deciding .co disputes apply the same Paragraph 4(a) test verbatim. They cite the same body of UDRP precedent. They apply the same Paragraph 4(b) bad-faith indicators and the same Paragraph 4(c) safe harbors. For a brand owner this is reassuring: the analysis you run before filing a .com complaint translates almost directly to a .co complaint. For a registrant on the receiving end, the defenses available — bona fide use before notice, being commonly known by the name, legitimate noncommercial use — are equally familiar.

One nuance worth noting: because .co is a ccTLD, the registry could in principle modify dispute procedures for future delegations. For now the UDRP governs, but counsel should confirm the current registry rules at the time of filing rather than relying on older guidance.

What the UDRP three-element test means in a .co launch dispute

Satisfying all three UDRP elements simultaneously is the only path to a transfer or cancellation order; a panel that finds the complainant fails even one element will deny the complaint in its entirety. That rule shapes every strategic decision from evidence assembly to forum selection.

Element one: confusing similarity. Panels treat this as largely a technical comparison — the disputed domain against the trademark on record. In practice, the .co extension is treated as a generic suffix and disregarded, just as .com is. An exact-match registration (brand.co = trademark) passes element one virtually automatically. Typosquats typically pass too, as long as the deviation is minor and the visual impression is similar. Descriptive additions ("buy", "official", "shop") rarely save a registrant at this stage; they are more relevant at element three.

Element two: no rights or legitimate interests. The complainant's burden at element two is to make out a prima facie case — to show no apparent legitimacy — and the burden then shifts to the respondent to rebut. A respondent who remains silent (defaults) loses this element by operation of the shift alone. Common failing responses include an unsubstantiated claim of descriptiveness without supporting evidence of actual use, and a business plan document created after receiving the complaint.

Element three: registered and used in bad faith. The UDRP is cumulative: the domain must have been registered in bad faith and must be used in bad faith. "Passive holding" — parking a domain without active use — can satisfy the use limb when combined with strong mark recognition and no plausible legitimate use. Panels weigh: the timing of registration relative to the mark's fame; whether the registrant could have been unaware of the brand at the time of registration; and what the domain resolves to, if anything.

For a read on whether the three UDRP elements are met in your .co dispute, reach us at info@cognomenlaw.com.

URS versus UDRP: which tool fits a .co launch scenario?

The Uniform Rapid Suspension system — URS — was created alongside the new gTLD program to provide a fast, low-cost suspension remedy. It applies to new-gTLD domains (the post-2012 TLDs like .brand, .app, .shop). It does not apply to .co. That distinction matters enormously for brand owners who conflate the two procedures after reading about sunrise periods and TMCH claims notices in the context of new gTLDs.

The practical table here is straightforward. If the disputed domain is in a new gTLD (say, yourbrand.shop or yourbrand.app), URS is available alongside UDRP. URS is faster and cheaper, and the remedy is suspension for the registration term — the domain resolves to a non-operational page — rather than a transfer of ownership. UDRP, by contrast, delivers an actual transfer of title. For a brand that needs to operate the domain, URS is not enough. For a brand that simply needs the infringing use stopped rapidly and cheaply, URS can be the efficient first step.

The evidentiary bar under URS is higher than under UDRP. The standard is "clear and convincing evidence" rather than UDRP's "on the balance of probabilities" approach. A marginal case — one where bad faith is arguable but not overwhelming — is more likely to survive a URS challenge than a UDRP challenge. That asymmetry is another reason brand owners with a strong, clear-cut case often prefer UDRP for new gTLDs too: the lower evidentiary threshold and the transfer remedy make it the more powerful tool when the facts support it.

For .co specifically: URS is off the table. UDRP before WIPO or the Forum is the only arbitral path. If the domain is genuinely beyond the reach of UDRP — for example because the registration predates the trademark, or because the registrant has a genuine claim to the name — a court action seeking anticybersquatting relief remains available, handled with local litigation counsel in the relevant jurisdiction. That route is substantially slower and more expensive, but it is the only route that can reach monetary relief.

What panels actually weigh: the evidence that decides .co launch disputes

Procedural knowledge is necessary but not sufficient. The question brand owners most consistently ask us — and most consistently underestimate — is what evidence actually moves a panel from "arguable" to "decided." In our practice, the gap between a winning complaint and a losing one is almost always an evidence problem, not a law problem.

Timing of registration. A domain registered within days or weeks of a trademark becoming publicly known — a product launch, a press release, a trademark publication — is a powerful circumstantial bad-faith indicator. Panels treat near-simultaneous registration as evidence that the registrant was aware of the mark. The brand owner needs to document the timeline precisely: date of first use in commerce, date of trademark application, date of public announcement, date the disputed domain was created. WHOIS/RDDS data (with appropriate caveats about accuracy) is the usual source for creation dates; screenshots from web archives can confirm what the domain displayed at relevant points.

Pattern of conduct. Paragraph 4(b) of the UDRP explicitly lists "a pattern of conduct" as a bad-faith indicator. A registrant who holds multiple domains incorporating third-party trademarks faces a structural disadvantage. Brand owners who can document the pattern — even across different trademark owners — strengthen their case materially.

Respondent's claimed use. Panels examine what the respondent says about why they registered the domain. A claim that a two-word domain incorporating a famous brand is a coincidental acronym, without contemporaneous supporting evidence, rarely persuades. Conversely, a respondent with actual business use of the name predating the complaint, supported by business records, invoices, or web archives, has a genuine Paragraph 4(c) safe-harbor argument.

The domain's current and historical resolution. Pay-per-click pages monetizing clicks from trademark-related searches are close to dispositive on bad-faith use. Even a parking page with generic links can suffice. Panels have consistently held that a registrant who allows a domain to be used for third-party advertising revenue cannot easily claim passive innocent holding when the advertising categories track the complainant's goods or services.

In a recent matter — a .co registration, late 2024 — we assembled a timing file showing the domain was created within a week of a widely-covered product announcement, paired with evidence that the domain resolved to a competitor's affiliate page. The panel found bad faith on all three limbs without significant controversy. Cases with messier facts — earlier registrations, descriptive marks, respondents with partial legitimate use — require more layered analysis and a more selective evidence strategy.

The consensus view and the minority position on "passive holding" in .co disputes

Passive holding — where a domain simply sits inactive, pointing nowhere or to a registrar placeholder — is one of the most litigated issues in UDRP practice, and the consensus is not as settled as some brand owners assume.

The consensus view, followed by the large majority of panels, is that passive holding can constitute bad-faith use when: the complainant's mark is well-known or distinctive; there is no plausible good-faith use to which the domain could be put; and the registrant has provided no credible explanation for holding the domain. This reading of the UDRP does not require a finding of active harm — inaction itself, in the right factual context, suffices.

The minority position — held by a meaningful cohort of panels, particularly in cases involving less famous marks — requires something more. Under this view, a complainant must demonstrate some affirmative evidence that the registrant intended harmful use, not merely that no legitimate use is apparent. The implication for brand owners is practical: if your mark is well-known globally, passive holding is unlikely to save a respondent. If your mark is regional, sector-specific, or recently registered, the passive-holding argument is weaker, and you should develop additional bad-faith evidence before filing.

What does this mean for you? A .co dispute filed on passive-holding grounds alone, against a registrant with a mark that is not yet widely recognized, carries meaningful risk of denial. We regularly counsel brand owners in this position to wait for active use — a redirect, a monetization attempt, a sale solicitation — before filing, rather than committing filing fees to a borderline complaint.

The TMCH, sunrise periods, and pre-launch brand protection mechanics

Prevention is faster and cheaper than cure. Understanding the pre-launch mechanics of a new domain zone — whether a new gTLD or a newly commercialized ccTLD like .co — is the starting point for brand protection strategy.

The Trademark Clearinghouse (TMCH) is the central registry of validated trademark records. Brands registered in the TMCH receive two benefits: priority rights during any new gTLD's sunrise period (allowing the brand owner to apply for the exact-match domain before general availability), and claims notices during the landrush and general availability phases (alerting both the registrant and the brand owner when a TMCH-registered mark is being registered as a domain).

For a new .co-style ccTLD zone that elects to implement a sunrise process — not all do — TMCH registration is the prerequisite for participation. If your brand is in the TMCH and you hold a sunrise registration, the corresponding domain is yours from day one of the zone's life. That is categorically preferable to filing a UDRP two months later.

Claims notices serve a different function. They are not a blocking mechanism; they are an information mechanism. A registrant who proceeds to register a TMCH-validated mark despite receiving a claims notice cannot later credibly claim ignorance of the trademark. That post-notice registration is, in practice, one of the cleanest bad-faith indicators available — and it significantly simplifies the third UDRP element if a complaint later becomes necessary.

We work with brand owners on pre-launch monitoring and TMCH strategy through our TMCH claims notice and cloud strategy guide, which sets out the timing and filing mechanics in detail. Getting that infrastructure in place before a zone opens is the most cost-effective brand protection investment available.

Choosing the forum for a .co UDRP: WIPO versus the Forum

WIPO and the Forum together handle approximately 97% of all UDRP proceedings, and both accept .co complaints. The choice between them is not purely mechanical, and it matters more than many filers appreciate.

WIPO's filing fee for a single-panel case covering one to five domains is USD 1,500. The Forum's entry fee begins around USD 1,300 for one to two domains on a single-member panel. The cost difference is modest. More significant are the practical considerations: WIPO maintains a larger and more internationally diverse panelist pool, a fact that can matter when the brand owner and the registrant are from different legal cultures. The Forum's panel pool is more concentrated in North American practitioners, which can be a practical advantage for disputes with a US nexus.

WIPO also offers an expedited option — available for single-panel cases of up to five domains — that targets a decision within about one month. For a brand experiencing active harm from a .co registration, that acceleration can justify the slight cost premium if any.

CAC (the Czech Arbitration Court) is a third option with lower entry fees — beginning around USD 500–800 — but it handles a much smaller share of the global caseload. Where precedent development and panelist familiarity matter, WIPO and the Forum remain the default choice for most brand counsel.

In our practice, we select the forum based on three inputs: the geographic origin of the registrant, the complexity of the bad-faith argument, and whether expedited resolution would materially affect the brand's commercial position. A .co dispute where the registrant is actively diverting revenue warrants the WIPO expedited option. A straightforward default case — registrant absent, no response filed — can comfortably run through the Forum at the lower fee.

The respondent-side view: legitimate registrations and RDNH risk

Not every .co registration that matches a brand name is abusive. Panels have found for respondents — and made Reverse Domain Name Hijacking (RDNH) findings against complainants — in .co and similar disputes where the brand owner overreached.

RDNH is a finding that the complaint was brought in bad faith to deprive a legitimate registrant of a domain. The finding carries no monetary penalty, but it is a public reputational mark against the complainant. Panels find RDNH where the complainant: filed knowing the elements were not met; misrepresented facts about the registration timing; targeted a respondent with an evident good-faith claim and brought the complaint anyway.

When is a .co registration likely legitimate? Common scenarios include: a generic or descriptive word that several businesses plausibly share; a domain registered years before the complainant's trademark was first used or applied for; a personal name domain; and a domain held by a professional domain investor with a documented history of good-faith investment in descriptive terms.

In a recent matter in early 2025, a brand owner filed a .co UDRP complaint against a registrant who had held the domain for several years before the complainant's trademark registration date. The registrant had documented use of the name in a distinct industry sector. We advised on the respondent's evidence package — contemporaneous business records, web archive material, and communications predating the trademark — and the panel denied the complaint, noting the complainant had not credibly explained how the registration could have been in bad faith at the time it was made. No RDNH finding resulted, but the denial was complete.

For respondents: the defense strategy under the UDRP is not symmetric to the complainant's attack. The respondent's task is to raise a genuine issue of fact on element two or element three — not to disprove all three elements. A strong Paragraph 4(c) safe-harbor argument, well-documented and timely filed within the 20-day response window, is the most efficient path to a denial.

COGNOMEN handles respondent defense and pursues RDNH findings where the facts support them. See our respondent defense and RDNH practice for the full analysis of what that defense looks like in new-gTLD and .co contexts.

To weigh UDRP against a court action for your .co case, or to assess a complaint you have received, email info@cognomenlaw.com.

Practical decision matrix: which route fits which scenario?

The right path in a .co brand-protection matter depends on the zone, the goal, the timeline, and the strength of the underlying facts. Here is how the options map out.

If the domain is .co and the registration is clearly abusive — exact-match of a well-known mark, registered after the mark became famous, resolving to a competitive or monetized page — UDRP before WIPO is the default choice. The USD 1,500 WIPO single-panel fee, a two-month timeline, and a transfer remedy make it the most direct path. WIPO expedited processing reduces that to roughly one month where speed matters.

If the domain is a new gTLD (not .co) and the brand simply needs the harmful use stopped without needing to take ownership, URS is faster and cheaper. But if ownership transfer is the goal — because the brand wants to operate the domain — UDRP is the tool, even for new gTLDs, despite the slightly higher procedural bar relative to URS's clear-and-convincing standard.

If the facts are borderline — a less-famous mark, a registration that predates trademark use, a registrant with a plausible explanation — filing a UDRP complaint carries real denial risk and potential RDNH exposure. In those cases, waiting for active harmful use to develop, or pursuing pre-litigation correspondence, can reset the factual picture before the higher-stakes forum filing.

If the brand wants damages in addition to a transfer — which UDRP never awards — or if the registrant is clearly beyond the reach of UDRP (jurisdiction issues, lack of registrar cooperation), US anticybersquatting litigation or an equivalent national-court action is the alternative, handled with local litigation counsel in the relevant jurisdiction. That route is substantially more expensive and measured in months to years rather than months, but it is the only avenue that reaches money.

A full overview of the URS procedure and new-gTLD filing mechanics is available at COGNOMEN's URS and new-gTLD disputes service page.

Related at COGNOMEN

• URS and new-gTLD disputes: suspension, UDRP strategy, and launch-phase brand protection
• TMCH claims notices and cloud strategy: how to protect a brand before a new zone opens
• Respondent defense and RDNH: keeping a generic domain against an abusive complaint