How to recover a .co domain held passively in bad faith

How to recover a .co domain held passively in bad faith. UDRP and ccTLD domain recovery and defense across .co. Email the firm to assess your case.

Your brand name sits in a .co domain owned by a stranger. The site loads nothing — no content, no product, no apparent business. The registrant is simply holding it. That silence is not neutral. Under the UDRP, passive holding can constitute bad faith, and the .co registry has adopted the UDRP as its governing dispute policy, meaning you have a clear procedural path to recover a .co domain held passively in bad faith.

To recover a .co domain held passively in bad faith, you must satisfy all three elements of Paragraph 4(a) of the UDRP: confusing similarity to a mark you hold, no legitimate interest on the registrant's part, and registration plus use in bad faith. A WIPO proceeding for a single .co domain, single-member panel, carries a filing fee of USD 1,500 and typically concludes in about two months. The only available remedies are transfer or cancellation of the domain.

This page sets out the governing rules, the evidence that decides passive-holding cases, the forum choices, and the realistic next step for a brand owner ready to act.

Why the .co zone is governed by the UDRP

The .co registry — administered by the Colombian registry authority — adopted the UDRP, giving complainants access to all four ICANN-accredited providers: WIPO, the Forum, CAC, and ADNDRC. In practice, WIPO and the Forum together handle the vast majority of .co proceedings, with WIPO being the most commonly selected forum for international brand owners. The procedure, the three-element test, and the available remedies are identical to those used in .com disputes. The same consensus-view jurisprudence applies.

That is a significant advantage. Years of WIPO and Forum decisions on passive holding — developed largely in the .com context — transfer directly to .co proceedings. If your trademark is registered or well-established through use, and the registrant cannot point to any credible legitimate purpose, the legal machinery is already in place to support a transfer claim.

One cross-zone point is worth flagging early. If your brand is also squatted in a .com or a country-code zone — say, a .de or a .uk — those disputes run under separate rules and, in the case of .de, through the German courts rather than UDRP arbitration. A .co UDRP complaint covers only the .co domain. Multi-zone exposure usually calls for a coordinated strategy across forums, not a single filing.

What does passive holding actually mean under the UDRP?

Passive holding — sometimes called "passive bad faith" — refers to a situation where a registrant holds a domain without actively using it in any visible way, yet panels conclude that bad faith is present based on surrounding circumstances. The domain resolves to nothing, or to a generic parking page, and the registrant has not offered any bona fide goods or services. That absence of activity is the first marker.

The reasoning runs like this: a registrant who chose a domain identical or highly similar to a well-known mark, and who has no plausible legitimate purpose for holding it, cannot escape a bad-faith finding simply by keeping the page blank. Panels have consistently held that inaction does not insulate a registrant when the mark is distinctive, the registration timing followed the mark's public launch or news coverage, and no credible explanation for the registration has been advanced.

Several factors reinforce a passive-holding finding. The complainant's mark being coined or inherently distinctive — with no obvious generic meaning — is powerful. WHOIS data listing a privacy proxy with no verifiable registrant identity adds weight. A history of the registrant holding other mark-corresponding names (a pattern of abusive registrations under Paragraph 4(b)) can be decisive. So can an unanswered demand letter: a registrant who ignores a cease-and-desist before the complaint is filed gives the panel nothing to work with on legitimate interest.

What passive holding is not: a weak or common-word mark sitting in a domain that has been held for years with no contact from the brand owner. In those cases, panels have declined to infer bad faith from silence alone. The strength and distinctiveness of your trademark, the circumstances at the time of registration, and the registrant's conduct throughout — all of it matters.

How do the three UDRP elements apply to a passive-holding .co dispute?

Each element of Paragraph 4(a) has specific implications when the domain sits dormant.

Element one: confusing similarity. This is almost always the easiest hurdle. If the disputed .co domain incorporates your mark — exactly, or with a minor alteration — the panel applies a straightforward comparison. The gTLD or ccTLD extension is generally not considered in the similarity analysis. A domain like yourbrand.co is confusingly similar to a trademark for YOURBRAND. You must demonstrate rights in that mark: a registered trademark is the clearest evidence, but documented common-law rights established through long use and commercial reputation can also qualify.

Element two: no legitimate interest. This element places an initial burden on the complainant to make a prima facie case, after which the burden shifts to the registrant to produce evidence of legitimate interest. The Paragraph 4(c) safe harbors include a bona fide offering of goods or services before notice of the dispute, being commonly known by the domain name, and legitimate noncommercial or fair use. A domain that has never resolved to any content, and whose registrant has no relationship to your mark, satisfies none of those safe harbors. A defaulting registrant — one who files no response — generally forfeits the opportunity to demonstrate legitimate interest, and panels draw a negative inference from that silence.

Element three: bad faith registration and use. This is where passive-holding doctrine does its work. The UDRP requires that the domain was registered and used in bad faith — a conjunctive requirement. Where the domain is genuinely inactive, the "use" prong is met by inference from the totality of circumstances. Panels look at: the notoriety of the mark at the time of registration; whether the registrant could plausibly have had any purpose other than targeting the mark; whether the registrant responded to any outreach; and whether there is any pattern of similar registrations. In a clean passive-holding case — strong mark, late registration, no response — panels regularly infer that the registration was made with the mark in mind, and that the holding itself constitutes use in bad faith.

If you are reading this having just discovered a .co registration of your brand, the three-element analysis above is the checklist. To get a read on whether your specific facts meet each element, contact info@cognomenlaw.com.

What evidence is needed — and what gaps sink a claim?

Evidence strategy in a passive-holding case differs from an actively-abused domain. The registrant has given you almost nothing to point to — no competing website, no confusing product, no explicit extortion demand. You are, in large part, building the inference from contextual facts.

The following categories of evidence carry the most weight in proceedings we handle for brand owners targeting .co passive holders.

• Trademark registration certificates — ideally predating the domain registration, covering the relevant jurisdiction(s). If your mark postdates the domain, you face a harder argument on element three, since a registrant generally cannot have registered in bad faith toward a mark that did not yet exist. Established unregistered rights with provable use predating registration can fill the gap.
• Proof of the mark's distinctiveness and public profile — media coverage, press releases, commercial launch dates. The stronger and more widely known the mark at registration time, the stronger the inference that the registrant chose it deliberately.
• WHOIS / RDDS records — registration date, registrant identity (or privacy proxy), any historical WHOIS snapshots showing changes in listed contact.
• Screenshots of domain resolution history — even a blank page or a "domain for sale" parking page is evidence. A parking page with pay-per-click links related to your industry goes further, potentially supporting an active bad-faith use argument beyond mere passive holding.
• Any correspondence with the registrant — demand letters sent, or, critically, a buy-back approach from the registrant. An unsolicited offer to sell at a figure beyond documented registration costs is itself a Paragraph 4(b) bad-faith circumstance.
• Evidence of a pattern — other domains registered by the same registrant incorporating third-party trademarks. Registrar records, RDDS lookups, and reverse-WHOIS searches help build this record.

What sinks claims? The most common failure point is a weak or descriptive mark. If the disputed domain could plausibly serve a generic purpose — if "co" plus a common English word is something a legitimate business might choose without targeting you — panels apply heightened scrutiny. A second frequent problem is a registration date that precedes your trademark rights. And a third is evidence that the registrant is in fact commonly known by the name, runs a real business, and held the domain for years before your brand grew to prominence. Each scenario calls for a different approach.

In one matter we handled (a .co passive-holding case, spring 2025), the registrant held a domain matching a client's coined trademark, had registered it within weeks of the client's brand launch announcement, and had never activated it. The WHOIS listed a privacy service. No response was filed. The panel transferred the domain on all three elements, drawing the bad-faith inference from the combination of a coined mark, registration timing, and registrant silence.

Which forum should you choose — and does it matter for a .co case?

Because .co follows the UDRP, you can file at WIPO, the Forum, CAC, or ADNDRC. The choice of forum affects filing fees, panelist pool, average timeline, and — in ways that are subtle but real — the tone of the reasoning you are likely to receive.

The decision matrix for a standard .co passive-holding case breaks down as follows.

If your primary concern is institutional credibility and your brand has an international footprint, WIPO is the standard choice. The WIPO filing fee for a single-domain, single-member panel case is USD 1,500, and the expedited WIPO option can deliver a decision in about one month for single-panel cases of up to five domains. WIPO's published passive-holding jurisprudence is deep, and its decisions are cited globally — useful if you are building a portfolio enforcement record.

If the respondent defaults — files no response — a cost-conscious complainant might consider the Forum, where entry-level filing fees begin around USD 1,300 for one to two domains on a single-member panel. Procedurally, the Forum follows the same UDRP rules. For uncontested passive-holding cases where cost is a factor, the difference in filing fees may be relevant.

CAC carries the lowest entry-point fees (beginning around USD 500–800), but it is the least-used of the four providers and sees less passive-holding .co traffic. For a brand owner with a straightforward case and a cost constraint, it is a viable option, though the panelist pool is smaller.

ADNDRC is used less frequently for .co disputes unless the parties have an Asia-Pacific connection. Fees begin around USD 1,300 for one to two domains on a single-member panel.

One structural point: if the complainant requests a single-panel hearing but the respondent requests a three-member panel, the parties generally split the higher three-member fee. For .co cases, where passive holding is the central theory, a single panelist is almost always sufficient unless the facts are genuinely close.

A second cross-zone comparison is worth making. If your brand is also targeted in a .uk, the Nominet DRS governs — an entirely separate procedure with a free mediation stage, its own "abusive registration" test, and the critical distinction that the DRS test reads "registered or used" abusively, a lower bar than the UDRP's conjunctive "registered and used." A .co UDRP complaint does not touch the .uk. Coordinating the filings — or sequencing them — is a practical decision worth making before either complaint is filed.

If you are weighing WIPO against the Forum for your .co case, or deciding whether to consolidate with a .com filing, email info@cognomenlaw.com for an assessment.

What is the process, and how long does it take?

A UDRP proceeding against a passive .co holder runs through five stages: complaint filing, formal compliance review, service on the registrant and commencement, the response window, panel appointment, decision, and registrar implementation.

The registrant has 20 days to file a response after commencement. In passive-holding cases, a significant portion of registrants simply do not respond. Default does not mean automatic transfer — the panel still applies the three-element test — but it does deprive the registrant of the opportunity to present any legitimate-interest evidence. Panels draw a negative inference from silence, and in practice a well-evidenced complaint against a defaulting registrant in a clear passive-holding scenario has a strong record.

After the response window closes (whether or not a response was filed), the provider appoints a panel. For a single-member panel at WIPO, the decision typically follows within about two weeks of appointment. End to end, from complaint filing to a transfer order, the standard timeline is approximately two months. The registrar then implements the decision — locking and transferring the domain — within a further short period following the implementation instructions from the provider.

A few variables lengthen that timeline. A request for a three-member panel adds appointment time and cost. If either party seeks a suspension for settlement negotiations, the clock pauses. Supplemental filings — additional submissions beyond the complaint and response — are rarely permitted but add days when allowed. None of these are common in straightforward passive-holding cases, particularly where the registrant defaults.

In a second matter we handled (a .co domain, summer 2024), the registrant had held the domain for approximately three years without activating it, then surfaced with a buy-back proposal shortly after our client's demand letter. That unsolicited approach — at a price well above any plausible registration cost — supplied a Paragraph 4(b) bad-faith circumstance that simplified the already-strong passive-holding argument. The panel transferred the domain within the standard timeline, and the registrant did not seek any court challenge to the decision.

Can a registrant defend against a passive-holding complaint?

Yes — and understanding the defense landscape matters for calibrating your own complaint's strength. A registrant who files a substantive response can defeat a passive-holding claim if the facts support it.

The strongest respondent defenses in passive-holding cases are these. First, establishing that the mark is not distinctive — that the domain corresponds to a common word or phrase that a legitimate business might use without targeting the complainant. Second, demonstrating rights or legitimate interests through pre-dispute evidence: a business plan, correspondence, product development records, or evidence that the registrant is commonly known by the name. Third, challenging the complainant's trademark on priority grounds — if the domain predates the mark, the "registered in bad faith" prong of element three fails on its face.

Reverse Domain Name Hijacking (RDNH) is also a live risk for complainants with weak cases. A panel may find that a complaint was brought in bad faith to deprive a legitimate registrant — for example, where the mark is generic, the complainant knew the registrant predated the mark, or the complaint was filed primarily to obtain a domain rather than to vindicate a genuine trademark right. An RDNH finding carries no monetary penalty, but it is a reputational mark on the complainant's record. We regularly advise brand owners to assess RDNH risk before filing, not after.

What does it cost to recover a .co passive-holding domain?

Two costs apply: the forum filing fee and the legal fee for preparing and filing the complaint.

Forum filing fees are set by the provider, not by counsel. For a single .co domain, single-member panel, the WIPO filing fee is USD 1,500; the Forum's entry-level fee begins around USD 1,300; CAC begins around USD 500–800. These are fixed, published rates. A three-member panel at WIPO costs USD 4,000. If a WIPO complaint is withdrawn or resolved before panel appointment, WIPO typically refunds approximately USD 1,000 of the USD 1,500 fee.

Legal fees for a UDRP complaint on a straightforward passive-holding case — single domain, clear trademark, defaulting or weakly-responding registrant — typically fall in the market range of USD 3,000–7,000, flat, separate from the forum filing fee. Complexity drives that range: the more contested the facts, the more filing preparation, the more evidence curation, the higher the legal cost. A three-member panel complaint with a respondent who files substantively is more expensive to handle than an uncontested passive-holding default.

Total outlay for a standard single-domain UDRP at WIPO — filing fee plus legal fee — commonly falls in the USD 4,500–8,500 range, depending on complexity. That compares favorably to court litigation for a .com or .co domain, where costs for a US anticybersquatting action run substantially higher and hourly billing applies throughout.

What the UDRP cannot do: award damages or legal costs. If the registrant has caused quantifiable commercial harm — customer diversion, lost sales, reputational damage — those claims require court action, handled with local litigation counsel in the relevant jurisdiction. The UDRP recovers the domain. It does not compensate for the harm caused by holding it.

Related at COGNOMEN

• UDRP domain recovery — the full complainant process across all gTLDs and .co
• Recovering a domain from a serial cybersquatter — pattern evidence and strategy
• Pre-acquisition domain due diligence — dispute history, chain of title, and risk