How to recover a lapsed .co domain that was re-registered

How to recover a lapsed .co domain that was re-registered. UDRP and ccTLD domain recovery and defense across .co. Email the firm to assess your case.

Your brand's .co domain lapsed during a renewal gap — a billing error, an administrative oversight, a registrar change that went sideways. Within days, a third party registered it. Now it points at a pay-per-click parking page, or worse, at a site designed to trade on your goodwill. You want it back. The question is which legal route applies and whether your prior use gives you a recoverable claim.

To recover a lapsed .co domain that was re-registered by a third party, the primary route is a UDRP complaint administered by WIPO, which serves as the dispute-resolution provider for the .co zone. You must satisfy all three UDRP elements: confusing similarity to a mark you hold, no legitimate interest on the registrant's part, and registration and use in bad faith. The WIPO filing fee starts at USD 1,500 for a single-member panel covering one to five domains. A standard case resolves in roughly two months.

This page covers the full recovery path: the governing test, the evidence that decides outcomes, chain-of-title considerations, the realistic cost structure, and the choice between UDRP and alternative routes.

Why the .co zone is covered by WIPO and the UDRP

The .co registry operates under UDRP-based dispute rules administered by WIPO, meaning the same three-element test that applies to .com governs .co disputes. That is a significant procedural advantage: brand owners who already understand UDRP procedure for gTLDs do not face a separate national filing system in Colombia. WIPO acts as the forum; the Colombian registrant is subject to the same mandatory arbitration clause embedded in every .co registration agreement.

That uniformity matters practically. A complainant does not need to retain counsel in Colombia or pursue proceedings through Colombian courts merely because .co is a country-code zone. The dispute is handled in English (or Spanish, if both parties agree and the panel permits), decided on documentary evidence, and resolved on the same timeline as any gTLD proceeding. Where a dispute also touches a .com or a .net, both can often be consolidated in a single WIPO complaint — provided the same entity holds all the registered domains at issue.

One nuance is worth flagging at the outset. The UDRP requires that bad faith exist at the moment of registration and continue through use. A third party who registered your lapsed .co without knowledge of your mark, and who has since built a genuine business on it, presents a more difficult case than one who grabbed the domain within hours of expiry to demand a ransom. The facts of acquisition timing and post-registration conduct are central to every .co recovery analysis.

If you believe a lapsed .co domain was registered opportunistically, the starting point is a rapid assessment of the three UDRP elements against your specific facts. For that assessment, contact info@cognomenlaw.com.

What are the three UDRP elements and how do they apply to a lapsed .co?

Under Paragraph 4(a) of the UDRP, a complainant must prove all three elements — and the lapsed-domain scenario creates specific vulnerabilities in each.

Element one: confusing similarity. This element is ordinarily the easiest to satisfy. If your brand is registered as a trademark and the domain reproduces it, similarity is established. The addition of a generic word or the mere change of the TLD from .com to .co does not break the similarity finding. However, if your trademark registration lapsed at the same time as the domain, or if you relied on unregistered (common law) trademark rights, you must assemble evidence of continuous use — advertising spend, sales records, press coverage, dated website archives — to establish that the mark subsisted independently of the domain at the moment of the third party's registration.

Element two: no legitimate interest. Panels assess whether the registrant was commonly known by the domain name before any dispute arose, whether there is a bona fide offering of goods or services, and whether the use is legitimate noncommercial or fair use under Paragraph 4(c). A drop-catcher who registered the domain moments after expiry and parked it has a weak claim to legitimate interest. A party who registered it, built a separate business under that name, and operated for two years before you asserted rights presents a harder picture. Timing and the registrant's pre-dispute conduct are dispositive.

Element three: registration and use in bad faith. This is where lapsed-domain disputes diverge most sharply from fresh registrations. Bad faith at the moment of registration requires evidence that the registrant knew — or in the circumstances should have known — that the domain corresponded to someone else's mark. Circumstantial indicators panels credit include: the domain dropped and was re-registered within a very short window; the re-registrant used automated drop-catching tools; the post-registration use is a pay-per-click page monetizing the mark's traffic; or a sale offer arrived shortly after registration. Passive holding — pointing the domain nowhere — can still constitute bad faith where the registrant had constructive knowledge of the mark and has no plausible good-faith use.

In our practice, the most challenging .co lapse cases are those where the re-registrant waited several months before deploying the domain, thereby obscuring the timing connection. Panels have consistently held that evidence of awareness of the mark at registration — emails, a prior failed purchase attempt, industry context — can substitute for near-instantaneous registration timing.

Chain-of-title checks before you file: what you must know first

Before filing a UDRP complaint to recover a lapsed .co domain that was re-registered, a chain-of-title and prior-dispute check is not optional — it is the work that decides whether filing is worth the cost and whether a transfer order, if obtained, delivers a clean asset.

Four specific checks matter. First, review the domain's WHOIS/RDDS history and any publicly archived WIPO case records to confirm the domain has not been the subject of a prior UDRP proceeding. A domain that was previously transferred to a different complainant — or one that was previously defended on RDNH grounds — carries a procedural history that will be visible to the panel and may affect credibility. Second, confirm that your own trademark registration is current, covers the relevant goods and services, and predates the third-party registration date. A trademark filed after the disputed domain was re-registered will generally not satisfy Element one. Third, verify that the lapse was genuine — an administrative failure on your side — rather than a deliberate non-renewal that could be characterized as abandonment. Panels have on occasion treated a deliberate multi-year non-renewal as evidence that the complainant had relinquished rights. Fourth, if the domain was held by a previous registrant who sold it commercially before you, trace that prior ownership; a clean chain strengthens the argument that the current registrant grabbed a name with established third-party goodwill rather than a genuinely available domain.

We regularly advise brand owners who discover that a lapsed domain has changed hands multiple times. In those cases, a due-diligence review of the transfer chain — using archived WHOIS snapshots and registry data — can identify whether any prior holder had a legitimate claim that later transferred or whether the current holder is a pure opportunist with no pre-existing connection to the name.

For a deeper discussion of chain-of-title verification in domain transactions, see our analysis on how to verify chain of title in domain acquisitions.

What evidence actually decides a .co lapse recovery?

Evidence quality separates UDRP complaints that transfer a domain from those that fail. The panel reads only what the parties submit; there is no discovery, no cross-examination, and no oral hearing. Getting the documentary record right before filing is the critical step.

For the complainant, the core evidentiary package in a lapsed .co case typically includes: the trademark registration certificate and any renewal history; dated website captures from before the lapse (the Wayback Machine is routinely cited); traffic or revenue records demonstrating continuous use; the WHOIS record showing the registration date and the identity of the current registrant; a screenshot of the current domain use (parking, redirect, or sale listing); and any direct communication from the registrant offering to sell — or any ransom demand — which panels treat as among the strongest bad-faith indicators under Paragraph 4(b).

What decides close cases? Two fact patterns, based on our work with similar disputes, stand out.

First: speed of re-registration. A domain grabbed within hours of drop — particularly using automated services that monitor expiry queues — is very difficult for the re-registrant to defend. The timing alone creates a strong inference of targeting. Panels have consistently held that a registrant who acquires a dropped domain seconds after it becomes available, in a zone where the mark is well-known, has constructive knowledge of that mark.

Second: the content deployed at the domain post-registration. A parking page with pay-per-click links targeting the mark owner's industry, a site selling competing goods, or a site designed to impersonate the original owner all constitute bad faith under the Paragraph 4(b) commercial-gain-by-confusion factor. A blank domain or one pointing to an unrelated hobby site is harder to prosecute, particularly if the registrant offers a plausible explanation for the registration.

In a recent matter (a .co domain, spring 2025), we assembled a complaint for a consumer-brand owner whose registration had lapsed during a registrar migration. The re-registrant had deployed a parking page within 72 hours and sent an unsolicited sale offer three weeks later. The documentation — archive captures, registrar migration logs, and the sale email chain — supported all three UDRP elements cleanly, and the matter proceeded without a response from the re-registrant.

If a prior filing or response produced a bad outcome, or if you are unsure whether the evidence you hold is sufficient, a focused second read can find the element that was missed. Email info@cognomenlaw.com to discuss the record.

How does the .co UDRP compare to a court action or a direct purchase?

Three routes exist when a lapsed .co domain is held by a third party: a UDRP complaint, a court action, or a negotiated purchase. Each has a distinct cost profile, timeline, and risk.

The UDRP at WIPO is the standard path where a trademark-based claim can be established. Filing fees start at USD 1,500 (single-member panel, one to five domains). Legal preparation adds to that, but the total cost is typically a fraction of litigation. The timeline is roughly two months. The remedy is transfer or cancellation — no monetary damages. If the registrant defaults, the panel decides on the complainant's record alone, which is frequently the outcome in opportunistic lapse registrations where the re-registrant has no real defense.

A court action — anticybersquatting litigation, handled with local litigation counsel in the relevant jurisdiction — is appropriate where UDRP is unavailable or insufficient. For .co, UDRP is available, which means court is rarely the first choice unless you also need damages or injunctive relief against conduct that a transfer order alone would not remedy. Colombian courts or, where the registrant is US-based and the domain is used to harm a US-resident brand owner, US anticybersquatting litigation may offer a damages route. Litigation is substantially more expensive and slower than UDRP; describe the trade-off qualitatively until the specific facts are known.

A negotiated purchase makes sense when the re-registrant has a colorable legitimate interest — genuine use, no targeting evident — and the brand owner simply wants operational control back faster than a dispute would deliver it. In that case, pre-acquisition due diligence is essential. Paying a ransom to a bad-faith re-registrant without a dispute history check can mean acquiring a domain with an adverse UDRP record, prior liens, or a chain-of-title problem that resurfaces later. We run pre-acquisition checks on chain of title and prior dispute history before any .co domain purchase we handle.

In a second recent matter (a .co typosquat, autumn 2024), a mid-market software company approached us after receiving a five-figure buy-back demand. A chain-of-title review revealed that the current holder had acquired the domain in a secondary sale from the original drop-catcher. The prior holder had attempted a sale to a different brand owner two years earlier. That history — combined with the timing of the original drop-catch and the current holder's parking page — formed a strong bad-faith narrative before a single filing was made. We filed at WIPO rather than negotiate, and the complaint was decided in the complainant's favor.

For the full range of transactional options — purchase, sale, escrow, and due diligence — see our domain transactions service page.

What does a .co UDRP complaint cost and what does the timeline look like?

Cost in a .co UDRP complaint has two distinct components: the official forum filing fee and the legal preparation fee. They are separate, and any transparent practitioner quotes them separately.

The WIPO filing fee for a single-member panel covering one to five .co domains is USD 1,500. If you request a three-member panel — which provides greater authority where the stakes are high or the legal questions are close — the fee rises to USD 4,000. If the complainant chose a single panelist but the respondent requests a three-member panel, the parties generally split the higher three-member fee. WIPO's partial-refund policy returns approximately USD 1,000 of the USD 1,500 fee if the case is withdrawn or settled before panel appointment.

Legal fees for a straightforward single-domain .co complaint are typically in the USD 3,000–7,000 range in the market, separate from the filing fee. More complex cases — multiple domains, a contested record, or a registrant with a colorable legitimate-interest argument — run toward or above the top of that range.

On timeline: the respondent has 20 days to file a response after the case formally commences. Absent procedural complications, a decision typically issues within about two months of filing. WIPO also offers an expedited option, delivering a decision in roughly one month for single-panel cases involving up to five domains — useful where the operational harm of the re-registration is immediate and measurable.

The registrar implements any transfer order after the mandatory 10-business-day waiting period following notification of the decision, absent a court challenge by the losing party. That period is rarely used to mount a challenge in straightforward cybersquatting cases; it exists primarily to protect against procedural error.

Respondent-side angle: what if the demand comes to you?

Not everyone reading this page is the brand owner seeking recovery. Some readers registered a lapsed .co domain legitimately — after it had been publicly available, without targeting anyone's mark — and have now received a cease-and-desist or a WIPO complaint.

Legitimate registrants facing a UDRP complaint have real defenses. Paragraph 4(c) of the UDRP sets out safe harbors: a bona fide offering of goods or services before any notice of the dispute; being commonly known by the domain name; and legitimate noncommercial or fair use without intent to mislead. If you registered the domain because it matched your own business name, your personal name, or a project you were genuinely developing, that record — assembled with documentary precision — can defeat a complaint and, where the complainant filed abusively, result in a finding of Reverse Domain Name Hijacking (RDNH).

RDNH is a reputational finding, not a financial penalty, but it is publicly recorded in WIPO's case database and carries real weight. Complainants who file against a registrant with a legitimate interest — particularly where the brand is not well-known, the trademark is generic, or the complainant knew the domain had been available for a substantial period before registration — run a real RDNH risk. We have defended .co registrants facing abusive UDRP complaints and pursued RDNH findings where the filing was opportunistic.

For an analysis of how transfer remedies and defenses play out differently across ccTLD zones, including zones where "registered or used" replaces the UDRP's cumulative "registered and used" standard, see our piece on ccTLD transfer remedy analysis.

What does COGNOMEN do to prepare and file a .co recovery?

COGNOMEN handles .co domain recovery end to end. We assess the three UDRP elements against your specific facts and trademark record, identify the weakest element in your case before filing, run chain-of-title and prior-dispute checks, advise on single-member versus three-member panel selection, draft the complaint and the supporting evidence package, and manage the WIPO filing and any supplemental correspondence. Where a respondent files a substantive defense, we advise on reply options and the risk of escalation to a three-member panel.

Where UDRP is not the right route — because the registrant has a colorable claim, because you also need damages, or because a direct acquisition is faster — we run the pre-acquisition due diligence and structure escrow. We do not suggest UDRP when a negotiated purchase is clearly faster and cheaper; we do not suggest a negotiated purchase when the re-registrant is a bad-faith actor who will be replaced by another if bought out.

The decision between those routes is the most important one you will make in a .co lapse situation. It turns on the registrant's identity, the timing of re-registration, the use to which the domain has been put, and the strength of your trademark record. That is the analysis we provide at the outset.

Related at COGNOMEN

• Domain transactions, due diligence, and brand-protection monitoring across gTLDs and ccTLDs
• How to verify chain of title before acquiring a domain with a complex history
• ccTLD transfer remedy analysis: how recovery standards vary across national zones