How to prove a registrant has no legitimate interest in a .co domain

How to prove a registrant has no legitimate interest in a .co domain. UDRP and ccTLD domain recovery and defense across .co. Email the firm to assess your case.

A brand owner searches the WHOIS record for their trademark, finds it registered as a .co domain by an unknown party, and faces a parking page with pay-per-click links. The name is theirs. The registrant is not. The question is how to take it back — and specifically how to satisfy the element that trips up the most UDRP complaints filed over .co names.

To prove a registrant has no legitimate interest in a .co domain, a complainant must satisfy the second of all three UDRP elements under Paragraph 4(a) of the Policy: the domain must be confusingly similar to a mark the complainant holds, the registrant must lack rights or legitimate interests, and registration and use must have occurred in bad faith. The .co registry has adopted the UDRP administered through WIPO and the Forum, so the same framework governs .co as governs .com. The standard filing fee at WIPO for a single-member panel starts at USD 1,500, and a decision typically issues within about two months of filing.

This page covers the mechanics of the legitimate-interest element, the evidence that decides it, the forum choices for .co, and the realistic next step for a brand owner ready to act.

Why the .co zone uses UDRP — and what that means for your complaint

The .co registry, operated under Colombian country-code authority, has designated WIPO as its dispute-resolution provider and adopted rules that closely track the UDRP. That means a complainant seeking to recover a .co domain files a UDRP-style complaint — not a domestic Colombian court proceeding — and the same three-element test under Paragraph 4(a) applies. The remedies are identical to the gTLD UDRP: transfer or cancellation only. No damages, no costs award, no injunction. A complainant who also wants monetary relief must pursue separate court proceedings through local litigation counsel in the relevant jurisdiction.

The practical benefit is significant. A brand owner already familiar with .com disputes can apply the same evidence, the same case law, and the same procedure to a .co complaint. Panel appointees at WIPO draw on the broad body of UDRP decisions when analyzing .co cases, and their reasoning is consistent. We regularly advise brand owners who underestimate how settled the doctrine is — and who therefore underinvest in evidence, assuming novelty excuses a thin record.

What changes slightly in .co is the registrant pool. The .co zone was marketed globally as a premium alternative to .com, which means .co registrations tend to skew toward domain investors and brand-adjacent uses more than most ccTLDs. Panels are alive to that context. A registrant who can point to genuine investment activity, a portfolio without targeting, or a demonstrably generic term has a stronger starting position in .co than in many zones.

For an initial assessment of whether your .co domain dispute meets the three UDRP elements, contact info@cognomenlaw.com.

What does "no legitimate interest" actually require a complainant to prove?

The second element of Paragraph 4(a) — that the registrant has no rights or legitimate interests — is the element most likely to determine whether a complaint succeeds or produces an RDNH finding against the complainant. The Policy deliberately sets up an asymmetry: the complainant carries the burden on all three elements, but with respect to the second element, a complainant who makes a prima facie case shifts the practical burden to the respondent to rebut. If the respondent defaults or offers no credible counter-evidence, the panel treats the complainant's prima facie showing as unrebutted.

Paragraph 4(c) of the Policy lists three safe harbors that a registrant can invoke to demonstrate legitimate interest:

• Use of the domain in connection with a bona fide offering of goods or services before notice of the dispute;
• Being commonly known by the domain name, regardless of any trademark registration; and
• Legitimate noncommercial or fair use — without intent to mislead consumers or tarnish the mark.

A complainant's job is not to disprove each safe harbor in the abstract. It is to produce enough evidence that a panel can find none of them plausible. That is a different analytical task. It requires the complainant to look at the registrant's actual conduct — what the domain resolves to, how long it has been inactive, what the registrant's own communications say — and to demonstrate that the conduct does not fit any of the three categories.

Panels have consistently held that a pay-per-click parking page that monetizes the complainant's trademark does not constitute a bona fide offering. Passive holding — a domain that simply does not resolve — raises different questions, and panels weigh the totality of circumstances. A registrant who acquired a .co that exactly matches a well-known mark, at a time when the mark was already in public use, faces a heavy burden in claiming generic or good-faith use.

What evidence is most effective when you prove a registrant has no legitimate interest in a .co domain?

Evidence decides this element more than argument does. A well-structured complaint that assembles the right record will survive a weak rebuttal; a complaint that substitutes assertion for documentation will not. In our practice, the following categories of evidence carry the most weight before WIPO panels reviewing .co disputes.

Trademark priority and distinctiveness. The mark must predate the domain registration. Priority documentation — registration certificates, first-use dates, published advertising predating the domain — establishes the baseline. The stronger and more widely known the mark, the less plausible any claim of independent, good-faith adoption becomes. A registrant who takes a coined word that has no dictionary meaning and no generic application cannot credibly claim ignorance of the mark.

What the domain actually does. Screenshots of the resolving page — captured via a reliable archival tool with timestamps — are indispensable. A parking page displaying ads tied to the complainant's own industry is highly probative. So is a page that mimics the complainant's website, redirects to a competitor, or displays an offer to sell the domain. What is absent also matters: panels note when a registrant who claims a bona fide business use cannot show a single email address, a product, an invoice, or a social media presence associated with the domain.

WHOIS and registration history. The name and contact details in the WHOIS record, and any changes to those details after the complainant first contacted the registrant, can undermine a claim of legitimate interest. Privacy or proxy services do not insulate a registrant from a panel inquiry, and panels regularly pierce proxy registrations where the underlying contact data reveals no connection to a genuine enterprise.

The registrant's own communications. An offer to sell the domain for an amount "well in excess of out-of-pocket costs" is a Paragraph 4(b) bad-faith indicator — but it also speaks to the second element. A registrant who opens negotiations by referencing the complainant's trademark by name has effectively conceded awareness of the mark and an intent tied to that awareness. We have seen communications introduced as exhibits that effectively collapsed the legitimate-interest argument before the panel needed to address it separately.

Absence of any business activity. Panels look for a corporate registration, a trade name, professional licensing, a business history, a web presence — any of the ordinary markers of a real enterprise. Where a respondent offers none of that in response to a complaint, the default inference is that none exists.

To weigh UDRP against a court action for your .co case, or to review whether your evidence supports a prima facie case, email info@cognomenlaw.com.

How does the UDRP procedure work for a .co domain — and what timeline should you expect?

Filing a UDRP complaint over a .co domain follows the same five-stage process as any UDRP proceeding: complaint submission and formal compliance review, commencement and notification to the registrant, the response window, panel appointment, decision, and registrar implementation. The registrant has 20 days to file a response after commencement. Most .co cases at WIPO resolve within about two months of filing, absent procedural complications.

WIPO handles the significant majority of .co UDRP complaints. The Forum also has authority. Both apply the same substantive rules, but WIPO's case management infrastructure and its published panel guidance make it the default choice for most complainants who want consistency. WIPO also offers an expedited option delivering a decision within about one month for single-panel cases involving up to five domains — useful where a registrant is actively monetizing the domain or the complainant has an imminent brand event.

The single-member panel fee at WIPO is USD 1,500 for one to five domains. A three-member panel costs USD 4,000. Either party can request a three-member panel, but if the complainant chose single-member and the respondent elects three-member, the parties typically split the higher fee. Three-member panels are worth the additional cost in cases involving a well-resourced respondent, genuinely ambiguous evidence, or a significant portfolio of .co domains — scenarios where a 2-1 decision carries more persuasive weight than a single panelist's reasoning.

Once a panel issues a transfer order, the registrar implements it after a brief administrative period, absent a court challenge from the registrant. The domain is then re-delegated to the complainant at the registrar of their choice. The total elapsed time from a complete filing to live control of the domain typically runs between six and ten weeks for a straightforward .co matter.

What fact patterns defeat a legitimate-interest claim — and which ones backfire?

Understanding when a legitimate-interest argument succeeds for the respondent is as important as understanding how to defeat it. Panels have found legitimate interest in a .co domain where the registrant demonstrated use of a common English word or acronym in a genuinely descriptive, non-trademark-specific way. If a complainant's mark consists of a common term, or the brand is only protected in a narrow geographic market, the registrant's claim of independent good-faith adoption becomes more credible. Filing a complaint in that scenario risks an RDNH finding — a formal finding that the complaint was brought in bad faith — which carries reputational consequences and is published in the WIPO case database.

Contrast that with the pattern we see most often on the complainant side: a coined or arbitrary mark, registered and in use well before the .co domain was created, a parking page full of ads linking to the complainant's own sector, and a registrant who has never operated a business under the name. That pattern produces a clean second-element finding, usually without a supplemental filing.

A more difficult scenario is the lapsed brand: a complainant whose trademark registration has expired, or whose first use date is contested, attempting to rely on common-law rights in the mark. Panels will recognize unregistered trademark rights if the complainant can produce credible evidence of secondary meaning, but the evidentiary bar is higher. We advise complainants in this position to invest additional effort in the trademark-rights element before pressing the legitimate-interest argument, because the elements interact — a weak mark dilutes the inference that the registrant targeted it.

In a recent matter involving a .co cybersquatting complaint (summer 2025), we advised a consumer brand that had relied only on its registered US trademark while the .co was held by a registrant claiming a plausible acronym use. The panel flagged the acronym argument but found the registrant's conduct — repeated unanswered sale offers following our client's public product launch — disposed of the legitimate-interest claim. The domain transferred approximately nine weeks after filing.

In a separate matter (spring 2025), a software company sought our assessment of a .co domain that incorporated its product name alongside a descriptive qualifier. The registrant had published a brief informational page unrelated to the complainant. We advised that the case was borderline on the legitimate-interest element and recommended assembling additional evidence of the registrant's knowledge of the mark before filing. That additional step avoided a potential RDNH exposure and ultimately produced a settled transfer before a panel was appointed.

How does the .co analysis compare to .com, .uk, and .eu disputes?

The route and the legal test depend on the zone. Getting this comparison right determines both the speed and the risk of the proceeding.

If the domain is a .com — or any standard gTLD — the UDRP applies in exactly the same way as for .co: the three-element test, WIPO or the Forum, transfer or cancellation as the only remedies. A brand owner who holds infringed .com and .co domains simultaneously can file a single complaint covering both, provided the registrant is the same holder — and panels assess the identical evidence for the identical test across both zones.

If the domain is a .uk, a distinct procedure governs. Nominet's DRS applies a test of "abusive registration" and reads the critical limb as registration or use in an abusive way — a lower cumulative bar than the UDRP's "registered AND used in bad faith." Nominet also requires a free mediation stage before any expert decision. Fees are denominated in GBP, and a full expert decision typically takes eight to twelve weeks. A .co and a .uk dispute involving the same registrant would run in parallel through different forums and different rules.

If the domain is a .eu, the EURid dispute procedure administered through the Czech Arbitration Court's ADR.eu platform applies. A .eu complainant must demonstrate an EU or EEA nexus, and the remedy may be transfer or revocation depending on eligibility. The rights recognized in .eu proceedings extend beyond registered trademarks to a wider range of prior rights, which can assist complainants whose protection is based on common-law use in an EU member state.

If the infringement spans a .de domain as well, there is no UDRP equivalent for .de. Disputes proceed through the German courts. A DENIC DISPUTE entry can block transfer of the .de domain while litigation proceeds, but it does not itself determine ownership. Court proceedings through local litigation counsel in Germany would run separately from the .co UDRP.

The cross-zone picture for a brand owner is therefore: start with the .co and any other gTLD-equivalent domains through a UDRP complaint, run Nominet DRS for .uk in parallel if needed, and address .de through German proceedings with separate counsel. The domains can often be handled on a coordinated timeline even though they proceed through different forums.

What is the respondent's perspective — and when should a registrant push back?

Not every .co complaint is well-founded. Panels have found RDNH — a formal finding that the complaint was filed in bad faith to deprive a legitimate registrant of a domain — in cases where the complainant targeted a registrant with a prior, documented legitimate use. That finding is reputational, not financial, but it is public and it matters. We act for registrants as well as complainants, and the analysis is the same.

A .co registrant who has a genuine business use for the domain — a pre-existing trade name, an operating website, a credible business history — can defeat the second UDRP element on the strength of Paragraph 4(c) safe harbors. The response must be filed within 20 days of commencement. A default is almost always fatal: panels treat the complainant's prima facie showing as unrebutted, and the practical path to an RDNH finding requires an active, well-documented response.

Domain investors who hold .co names in a portfolio should pay particular attention. A domain that exactly matches a current trademark, held without any active use for an extended period, is difficult to defend as a legitimate interest even if the original registration was in good faith. The "passive holding" doctrine requires careful reading of the full set of circumstances. We have defended registrants in this position by assembling evidence that the domain was acquired for its generic or descriptive value, without knowledge of the complainant's mark — a demanding but not impossible standard where the facts support it.

Related at COGNOMEN

• UDRP domain recovery services — filing and managing complaints across all UDRP-governed zones
• Recovering a phishing domain under .br — procedures, evidence, and cross-zone strategy
• Court action for cybersquatting in France — when arbitration is not enough