Step-by-step: recover a typosquatted .mx domain

Step-by-step: recover a typosquatted .mx domain. UDRP and ccTLD domain recovery and defense across .mx. Email the firm to assess your case. Transparent fees, r…

A Mexican domain registered as a one-letter swap of your brand is not a coincidence. It is a deliberate play on consumer error — and it can redirect your customers to a phishing page, a competing storefront, or simply a parking page while the registrant waits for your offer. The question is not whether to act. It is which procedure applies and how to build a case that holds up under scrutiny.

To recover a typosquatted .mx domain you generally proceed under the Política de Resolución de Disputas de Nombres de Dominio (LDRP), Mexico's ccTLD dispute procedure, which mirrors the UDRP's three-element test: the domain must be confusingly similar to a mark you hold, the registrant must lack rights or legitimate interests, and the registration must have been made and used in bad faith. A respondent has 20 days to file a response once proceedings commence, and a standard case resolves in roughly two months. The only remedies are transfer or cancellation of the domain.

This guide walks each step of the recovery path, names the trap hidden in each one, and addresses how the .mx procedure compares to a straight UDRP filing or Mexican court action for brand owners weighing their options.

What governs .mx domain disputes — and how does the LDRP connect to the UDRP?

The LDRP is the dedicated dispute procedure for .mx, administered by NIC México under rules that closely follow the UDRP's structure and three-element test. Mexico's registry adopted a model that tracks Paragraph 4(a) of the UDRP, making prior UDRP precedent persuasive — though not binding — on .mx panels. For brand owners who already manage a .com portfolio under the UDRP, the core logic is familiar; the procedural details are not.

The important distinction from a pure UDRP filing is jurisdictional: .mx is a country-code zone, and the governing rules are those published by NIC México, not ICANN's generic Policy. Panels apply the LDRP rules to determine the dispute; WIPO and the Forum each administer UDRP proceedings for gTLDs, but .mx sits outside that forum structure. That means your complaint goes to a provider authorized by NIC México under LDRP rules, not directly to WIPO or the Forum. Confirm the current authorized provider before filing — the registry's published rules control, and they can change.

One practical implication: if the typosquatter registered both the .mx and a .com version of your brand, you face two separate proceedings under two separate sets of rules. We regularly advise brand owners in this situation on sequencing — whether to file both simultaneously or to pursue the gTLD UDRP first and use any transfer order as corroborating evidence of bad faith in the .mx proceeding.

For an assessment of whether the three elements are met in your .mx dispute, reach us at info@cognomenlaw.com.

Step 1: Confirm your trademark rights and check confusing similarity to the typosquat

The first LDRP element — confusing similarity — is almost always the easiest to meet in a typosquatting case, but the trap is assuming it is automatic. Panels require the complainant to demonstrate rights in a mark, not merely a business name or an unregistered designation. A registered trademark in Mexico, or in a jurisdiction with commercial relevance to the dispute, is the strongest foundation.

In a typosquatting context, the domain will differ from your mark by one transposition, an omitted letter, a doubled character, or a substituted numeral. Panels have consistently held that these modifications do not dispel confusing similarity — the domain is assessed against the mark as a whole, and minor character variations are precisely the kind of deviation the LDRP and UDRP were designed to address. The .mx country-code extension is disregarded in the comparison, exactly as .com is under the UDRP.

The trap: some brand owners discover their Mexican trademark registration lapsed, or was never obtained in the first place. Check the current status of your IMPI registration before assessing the strength of the case. If the mark is pending, expired, or unregistered in Mexico, the complaint may still proceed on the basis of foreign trademark rights — but panels will scrutinize the connection between the mark and Mexico more closely. We have seen complainants lose the first element, or receive a weakened decision, because the trademark record was not confirmed before filing.

Step 2: Build the legitimate-interest case against the registrant

The second LDRP element requires showing the registrant has no rights or legitimate interests in the disputed domain. In practice, the complainant must establish a prima facie case, which then shifts the burden to the respondent to demonstrate that one of the safe harbors applies. The safe harbors under the UDRP — and the LDRP by analogy — include: a bona fide offering of goods or services before notice of the dispute, being commonly known by the domain name, and legitimate noncommercial or fair use.

A pure typosquat almost never satisfies any safe harbor. No bona fide business operates under a misspelling of a competitor's brand; no registrant is "commonly known" as a slight character variation of another's mark. The practical task is documentation: confirm the registrant is not a licensee, not a reseller, and not a business with any colorable claim to the name. WHOIS/RDDS history, ICANN registrar data, and screenshots of the domain's use are all relevant.

The trap here is the passive-holding scenario. A registrant who holds the domain with no active website may seem easier to defeat, but panels apply different frameworks depending on whether the domain resolves to a parking page, a pay-per-click page monetizing your brand's traffic, or a blank page. Each carries different evidentiary implications for bad faith — which feeds directly into Step 3.

Step 3: Document bad faith at registration and in use

Bad faith is the element that typosquatting cases turn on. Paragraph 4(b) of the UDRP — and the corresponding LDRP provision — identifies non-exhaustive bad-faith circumstances, including registration primarily to sell to the mark owner, registration to attract users by creating confusion as to source, and a pattern of abusive registrations. Typosquatting fits most squarely within the confusion-for-commercial-gain factor: the registrant's entire scheme depends on users mistyping your domain and landing on the registrant's page.

The key is evidence that the registrant knew of your mark at the time of registration. This is where a gap in your trademark portfolio can hurt: if your mark is not registered in Mexico, and your business has limited Mexican market presence, a panel may find the registrant plausibly did not target you. Conversely, a well-known brand with documented Mexican consumer recognition is nearly impossible for a registrant to credibly claim ignorance of.

Assemble the following before filing: screenshots of the domain's current and historical use (archive tools can retrieve prior states of the page); evidence of the mark's registration date and priority relative to the domain registration date; any correspondence from the registrant offering to sell the domain; and any third-party typosquatting across other zones that follows the same character-variation pattern. In a recent matter — a .mx typosquat targeting a consumer-goods brand, early 2025 — we documented approximately a dozen typosquatted variants across .com, .mx, and .co zones, each registered within weeks of each other. That pattern was central to the bad-faith finding.

To weigh the evidence you have and the route that fits your timeline, email info@cognomenlaw.com.

Step 4: Choose a forum and file the complaint — where does .mx go?

For .mx, the complaint is filed with an authorized dispute-resolution provider under the LDRP, not with WIPO or the Forum directly. Before filing, confirm with the current NIC México registry rules which providers are authorized, as the approved panel list can change. This is a trap that catches brand owners who assume any UDRP accredited provider handles .mx — the registry authorization is zone-specific.

The right route depends on the zone and the goal. If the domain is a .com typosquat and you want transfer under WIPO or the Forum, you proceed under the standard UDRP, with WIPO filing fees starting at USD 1,500 for a single-member panel on one to five domains and Forum fees beginning around USD 1,300 for one to two domains. If the domain is .mx, the filing is under the LDRP with the authorized Mexican provider, under its published fee schedule. If both zones are affected simultaneously, sequencing matters: gTLD filings can run concurrently with an .mx filing, but each proceeding stands alone on its facts.

What if the registrant is also running the domain in connection with fraud, phishing, or active trademark infringement at a commercial scale? The LDRP and UDRP deliver transfer or cancellation — no monetary remedy, no injunction, no damages. If you need damages or injunctive relief against ongoing infringement, the path is Mexican federal court, coordinated with local litigation counsel in that jurisdiction. Court proceedings take substantially longer and cost more, but they are the only route to financial relief.

The URS — the Uniform Rapid Suspension system — does not apply to .mx. It is a remedy only for new-gTLD domains. Do not let this option appear on your shortlist for a ccTLD dispute.

How does the 20-day response window shape your filing strategy?

Once a complaint is filed and commences formally, the respondent has 20 days to submit a response. That window is firm. A registrant who files nothing is in default, and panels in default cases regularly transfer the domain — but a default does not mean automatic transfer. The complainant must still satisfy all three elements on the record presented.

The strategic implication: your complaint must be complete and well-evidenced even when you expect default. Panels have denied complaints in default cases where the complainant failed to establish confusing similarity, failed to identify a registered mark, or failed to show that the registration date post-dated the mark's priority date. We have defended registrants in cases where the complainant filed a thin complaint expecting an easy default win, and secured an RDNH finding — a formal panel declaration that the complaint was brought in bad faith to deprive a legitimate registrant. That finding is reputational and follows the complainant into future proceedings.

If the respondent does respond, the timeline extends somewhat, but a standard case should still resolve within roughly two months. There is no oral hearing; everything is on the papers. Supplemental submissions require panel permission and are granted sparingly — another reason to build the full evidentiary record before filing, not after.

What evidence decides the outcome in a .mx typosquat case?

Panels deciding .mx typosquat cases look first at the character-variation pattern — one transposed letter or added character — and compare it against the mark in the complaint. That comparison is visual and phonetic. Next, panels look at how the domain is being used: a pay-per-click landing page monetizing the mark owner's brand traffic is the clearest evidence of bad faith use; a phishing page or a page directing users to a competing product strengthens the case further. Passive holding alone can also support bad faith under well-settled panel reasoning, particularly where the domain is identical or nearly identical to a famous or distinctive mark.

Priority date evidence is critical and frequently underdocumented. The mark must predate the domain registration. Pull the IMPI certificate, the international registration under the Madrid Protocol (if applicable), and any evidence of use in commerce in Mexico before the domain was registered. If your mark postdates the registration, the bad-faith element almost certainly fails under the LDRP's cumulative standard.

Panels also examine correspondence. An unsolicited offer by the registrant to sell the domain — particularly for an amount exceeding out-of-pocket registration costs — is direct evidence of the Paragraph 4(b) first bad-faith factor. Preserve any such communications in their original form. Do not respond with a counter-offer if you intend to file, as that exchange can complicate the record.

Can you lose a .mx domain dispute that looks straightforward?

Yes — and the failure modes are predictable. The most common: a complainant cannot establish a registered trademark with priority over the domain registration date. The second most common: the complainant's evidence of bad faith is entirely circumstantial, with no documentation of the domain's actual use beyond a single screenshot. Panels expect a reasoned account of why the registrant targeted the complainant's mark specifically; generic evidence of typosquatting without connecting it to the mark holder does not clear the bar.

A third failure mode is the myth that a ccTLD like .mx is harder to recover than a .com because of "local rules." That is not accurate. The LDRP tracks the UDRP's elements closely enough that the same evidentiary discipline applies. The procedural difference is forum authorization — .mx requires an LDRP-authorized provider — not a higher substantive threshold. Brand owners who have successfully pursued .com typosquats under the UDRP should expect a comparable substantive framework, applied by a different authorized panel.

What about the registrant who holds the typosquat for years without using it? Passive holding does not shield a registrant indefinitely. Panels have consistently held that passive holding of a domain confusingly similar to a well-known mark, by a registrant with no apparent legitimate interest, satisfies the bad-faith use requirement under the UDRP — and by analogy under the LDRP. The analysis asks whether it is impossible to conceive of any good-faith use of the domain. For a letter-swap of a distinctive brand, it often is.

Related at COGNOMEN

• UDRP domain recovery — filing a complaint to recover a domain across gTLDs
• WIPO vs. the Forum — how to choose the right provider for your UDRP complaint
• How to defend an investment domain in .mx against an abusive complaint