How to recover a typosquatted .co domain
A stranger registers a one-letter misspelling of your brand as a .co domain. The page resolves to a competitor's ad feed, a phishing clone of your site, or simply a parking page with a five-figure buy-back demand. You want the name transferred. The question is whether the UDRP gives you a clear path there – and what the evidence record has to look like to win.
To recover a typosquatted .co domain, you file a UDRP complaint before WIPO or another accredited provider, because the .co registry (administered by Colombia's registry authority, operated under ICANN accreditation) has adopted the UDRP for dispute resolution. You must satisfy all three elements of Paragraph 4(a): confusing similarity to a mark you hold, no legitimate interest in the registrant, and registration and use in bad faith. The WIPO filing fee starts at USD 1,500 for a single domain and a single-member panel. A standard case is typically resolved within about two months. The only available remedies are transfer or cancellation – no monetary damages, no injunction.
This page covers the legal test, the evidence that decides .co typosquat cases, the forum choice, and what to do now if you have identified a problem registration.
Why the UDRP applies to .co domain disputes
The .co registry operates under ICANN's generic-domain-name accreditation model and has adopted the Uniform Domain-Name Dispute-Resolution Policy in full, making the UDRP the primary administrative remedy for abusive .co registrations. That means a brand owner facing a typosquat does not need to pursue the Colombian courts to recover a typosquatted .co domain – the same procedure used for .com applies, before the same providers: WIPO, the Forum, CAC, and ADNDRC. WIPO handles the substantial majority of .co complaints alongside its .com volume.
The practical consequence is that if you already have UDRP experience with a .com or .net dispute, the rules, the timeline, and the evidence standards carry over to .co without material adjustment. The three-element test, the 20-day response window, the single or three-member panel structure – all identical. What changes is the brand-awareness context: panels assessing a .co typosquat may weigh the domain's geographic signal (Colombia's country code, also marketed globally as "company") when judging whether confusion is plausible, though .co has been so widely marketed as a generic alternative to .com that confusion arguments are generally well received by panels.
For an assessment of your .co typosquat, contact info@cognomenlaw.com.
What are the three UDRP elements you must prove?
Every UDRP complaint – including those targeting typosquatted .co domains – must satisfy all three elements of Paragraph 4(a) of the Policy simultaneously; failure on any single element defeats the complaint.
Element 1: Confusing similarity. The disputed domain must be identical or confusingly similar to a trademark or service mark in which you have rights. Typosquats typically satisfy this element easily: a one- or two-character transposition, omission, or substitution produces a domain that differs from your mark only in a minor detail. Panels look at the domain string itself, stripping the TLD, and compare it visually and phonetically to your mark. A registered trademark is the cleanest evidence, but panels also recognize unregistered marks where the complainant can show acquired distinctiveness through use. Common law or use-based rights in a mark are cognizable under the Policy, though they require more evidence.
Element 2: No rights or legitimate interests. You must make a prima facie showing that the registrant lacks a legitimate interest in the domain. The burden then shifts to the registrant to rebut. Paragraph 4(c) lists the safe harbors: a bona fide offering of goods or services before notice of the dispute, being commonly known by the domain name, and legitimate noncommercial or fair use without intent to mislead. A typosquat held for parking revenue, resale, or phishing will rarely meet any of those harbors. Where the registrant does not respond – and default rates in obvious-typosquat cases are high – panels draw adverse inferences and find for the complainant on this element.
Element 3: Registration and use in bad faith. This is the cumulative requirement – both registration and use must be in bad faith. For a typosquat, registration bad faith is usually straightforward: deliberate misspelling of a well-known mark is among the clearest signals of intent. Use bad faith follows from monetization (pay-per-click links), impersonation, phishing, or simply holding the name passively while offering it to the mark owner at an inflated price. Paragraph 4(b) sets out four non-exhaustive bad-faith circumstances, including registration primarily to sell to the mark owner above out-of-pocket cost and attracting users for commercial gain by creating confusion with the complainant's mark. Both are common patterns in .co typosquat cases.
What evidence decides a .co typosquat case?
Evidence quality is the single factor that most separates clean wins from contested or failed complaints. The legal elements are stated concisely; the factual record required to satisfy them takes work.
For Element 1, the core exhibits are: a current trademark registration certificate showing the mark and the goods or services; and a visual comparison of the mark to the disputed domain string, identifying the precise typographic deviation. Where you rely on common-law or unregistered rights, add evidence of continuous commercial use – website traffic records, advertising spend, media mentions, and dated examples of use in commerce. The longer your pre-registration use history, the stronger the case that the registrant knew of your mark when they registered the .co.
For Element 2, screenshots of the domain's resolving page are essential. A parking page, a competitor ad page, an identical-layout phishing site, or a WHOIS/RDDS record showing no use at all – each tells a different story about the registrant's intent. Archive captures (Wayback Machine records) showing what the page showed at various dates after registration are particularly useful, because they close off any "I used it legitimately before notice" argument. We regularly advise clients to capture and preserve these records before sending any cease-and-desist or making contact with the registrant, because contact puts the registrant on notice and can prompt a page change.
For Element 3, the registrar's WHOIS/RDDS data at the time of the complaint, the domain's registration date relative to your mark's first use, and any communications (emails, broker messages, domain-auction listings) in which the registrant offered the domain for sale are all high-value exhibits. An offer price substantially above registration cost is squarely within Paragraph 4(b)(i). A pattern of abusive registrations – other domains registered by the same registrant that misspell third-party marks – falls under Paragraph 4(b)(ii) and is worth researching. We check registrant-name and registrant-organization strings across available domain databases before filing.
One risk specific to typosquat complaints: overclaiming on Element 1 by asserting that any misspelling of your term is automatically confusingly similar. Panels have rejected complaints where the mark itself is generic or descriptive and the domain diverges enough that no reasonable user would be confused. Accurate, restrained framing of the similarity argument is more persuasive than a maximalist one.
To weigh UDRP against a court action for your case, email info@cognomenlaw.com.
How does the UDRP process work from filing to transfer?
A standard .co UDRP case moves through five stages, and the respondent has 20 days to file a response once the case formally commences. Understanding the mechanics helps you prepare the right evidence at the right moment.
Stage 1 – Filing the complaint. You prepare and submit a complaint to your chosen provider. WIPO and the Forum are the dominant providers; WIPO handles the majority of .co cases. The complaint sets out the three elements, attaches exhibits, and designates whether you want a single-member or three-member panel. For a .co typosquat that is factually clear, a single-member panel at the USD 1,500 WIPO fee is usually appropriate. A three-member panel costs USD 4,000 at WIPO and is better reserved for legally complex cases or where the mark's validity may be in issue.
Stage 2 – Administrative review and commencement. The provider checks the complaint for formal compliance, then formally commences the case by notifying the registrant. The 20-day response clock starts on that commencement date.
Stage 3 – Response (or default). If the registrant responds, the provider appoints a panel after the response period closes. If the registrant defaults – which is common in straightforward typosquat cases – the case proceeds on the complaint alone, and panels draw adverse inferences from the failure to participate.
Stage 4 – Panel decision. The appointed panelist (or three-member panel) reviews the written record and issues a decision. No hearing takes place. The panel may request additional submissions in unusual circumstances, but most .co typosquat cases are decided on the complaint and any response alone.
Stage 5 – Registrar implementation. If the panel orders transfer, there is a mandatory 10-business-day waiting period before the registrar implements the order, during which the respondent can seek court intervention to stay the transfer. This rarely happens in typosquat cases but exists as a procedural safety valve. End to end, a standard case is typically completed within about two months of filing.
In a recent matter – a .co typosquat complaint for a technology brand, spring 2025 – we filed a single-member panel complaint at WIPO, the registrant defaulted, and the transfer order was implemented approximately eight weeks from the date of filing. The domain had been pointing to a pay-per-click parking page monetizing traffic from users who mistyped the brand's primary .com.
How should you choose between WIPO, the Forum, and other providers for a .co case?
The right provider for your .co typosquat depends on the complexity of the case, the location of relevant witnesses (not legally decisive but operationally relevant), and cost.
WIPO is the default recommendation for .co disputes with any international dimension. Its panelist pool is geographically broad, its decisions are publicly indexed and cited in subsequent cases, and its published fees are clear: USD 1,500 for one to five domains on a single-member panel, USD 4,000 for a three-member panel in the same range. WIPO also offers an expedited option – a decision delivered within approximately one month – available for single-panel cases of up to five domains. For a complainant who needs a fast result because the typosquat is actively diverting customer traffic or powering a phishing campaign, that expedited path is worth the discussion.
The Forum begins at approximately USD 1,300 for one to two domains on a single-member panel. Its panelist pool is strong and it is a well-established alternative, particularly where the complainant or its counsel has familiarity with Forum procedures. CAC, beginning around USD 500–800, is the lowest-cost entry point but sees lighter case volume in .co matters.
The cross-zone dimension: if your brand has both a .com and a .co typosquat – a common scenario, given that both TLDs are global commercial domains – a single UDRP complaint can cover both domains only where the registrant is the same holder. If the two typosquats are registered by different entities, you file two complaints. We advise on this structure routinely, because filing order and timing can affect the record available in each case.
The court alternative is worth naming. A UDRP complaint offers no monetary damages. If the typosquat has caused measurable commercial damage – lost sales, misdirected payments, reputational harm – US anticybersquatting litigation is the route that reaches money. It is substantially more time-consuming and expensive than a UDRP complaint, and it requires a US nexus or a registrant amenable to US jurisdiction. For most .co typosquats where the goal is the domain and nothing else, the UDRP is the proportionate and faster choice.
What happens if the registrant defends the .co complaint?
A defended .co typosquat case is more demanding but not fundamentally different in structure. The registrant's likely arguments follow a predictable pattern. Understanding them in advance allows the complaint to pre-empt the most common ones.
The most common respondent defense in a typosquat case is a claimed legitimate-use argument: the respondent asserts that the domain corresponds to its own name, a geographic term, or a generic descriptive word, and that the complainant's mark is not sufficiently distinctive to monopolize those characters. Panels assess this against the specific domain string and the mark. A complainant whose mark is a coined term, a strong fanciful brand with registered trademark rights, will generally prevail. A complainant relying on a descriptive term without strong secondary meaning evidence faces a harder path.
The second common defense is an "acquired before notice" legitimate-use claim under Paragraph 4(c)(i): the respondent asserts it was using the domain for a bona fide offering before it received any notice of the dispute. The timestamp of that use matters acutely. Screenshots and archive records captured before the complaint was filed, and compared against the domain's registration date and any communications history, are the tools that defeat or confirm this argument.
A third scenario – less common in obvious typosquats but worth acknowledging – is a reverse domain name hijacking (RDNH) finding against the complainant. Panels may make an RDNH finding where the complaint was brought in bad faith or with reckless disregard for the registrant's rights. The finding carries no financial penalty under the Policy, but it is public and reputational. We do not file complaints we assess as weak on the facts; that is not caution for its own sake, it is the standard the Policy expects.
In a matter we handled in late 2024, a defended .co complaint involved a registrant who claimed the domain corresponded to a generic two-word phrase. We had assembled a strong secondary-meaning record demonstrating that the complainant had built substantial recognition in that phrase over several years before the .co registration date. The panel found for the complainant on all three elements, with the secondary-meaning evidence closing the claimed generic-use defense.
What does it cost to recover a typosquatted .co domain?
Cost has two distinct components: the forum filing fee and the legal fee for preparing and filing the complaint. Conflating the two is among the most common misunderstandings we encounter when speaking with brand owners for the first time.
The forum filing fee is set by the provider and is paid directly to it. At WIPO, a single-domain single-member panel complaint costs USD 1,500; a three-member panel costs USD 4,000. WIPO offers a partial refund – commonly approximately USD 1,000 of the USD 1,500 fee – if the complaint is withdrawn or terminated before panel appointment. At the Forum, the entry point is approximately USD 1,300 for one to two domains. These are fixed, published fees. They do not vary by outcome.
The legal fee for preparing a complaint – gathering the evidence record, drafting the three-element analysis, structuring the exhibits, and managing the filing – is separate. Market rates for a straightforward single-domain complaint run in the USD 3,000–7,000 range as a flat fee, though the actual scope depends on the strength and complexity of the mark, the volume of evidence, and whether the case is defended. We publish our fee ranges transparently because we find that brand owners who understand the full cost structure make better decisions about which route to pursue.
Is the cost proportionate? That depends on the domain's value to your business. A .co typosquat that is actively siphoning customer traffic, diverting payment flows, or operating as a phishing clone has a quantifiable cost that almost always exceeds the combined filing and legal fee. A parked page with no visible commercial activity is still a legal problem, but the urgency calculus is different. We walk through this assessment at the outset of every engagement.
Related at COGNOMEN
Frequently asked questions: recover a typosquatted .co domain
Is it worth it to recover a typosquatted .co domain?
In most cases, yes. The UDRP cost – forum filing fee plus legal preparation – is typically a fraction of the commercial damage a .co typosquat inflicts through diverted traffic, phishing liability, or customer confusion. The more your brand depends on online traffic, the higher the risk of leaving a misspelled .co in a hostile registrant's hands. Where the domain is purely parked with no active harm, the calculus is narrower but the reputational and security exposure still justifies a cost-benefit assessment with counsel before making any decision.
What are the most common mistakes when you recover a typosquatted .co domain?
Three mistakes recur in our practice. First, contacting the registrant or making a buy-back offer before preserving the evidence record – doing so puts the registrant on notice and may prompt a page change that removes the best proof of bad faith. Second, filing without a trademark registration and relying on unregistered rights without adequately documenting secondary meaning, which weakens Element 1. Third, choosing a three-member panel as a default when the facts are clear-cut, adding USD 2,500 to the filing cost without a corresponding strategic benefit.
Can a three-member panel change the outcome?
It can, in either direction. A three-member panel is more likely to produce a reasoned, precedent-setting decision in complex cases involving contested mark validity, claimed legitimate use, or potential RDNH. For a straightforward .co typosquat with a strong registered mark and a parking-page respondent, a single-member panel is adequate and faster. Where the complainant suspects the respondent will request a three-member panel regardless, note that the parties generally split the higher fee in that scenario – a factor worth budgeting for at the outset.
About COGNOMEN
COGNOMEN is an independent boutique focused exclusively on domain-name disputes. We recover, defend, and transact internet domains across generic and country-code zones, before WIPO, the Forum, CAC, ADNDRC, and national procedures, and in court where arbitration cannot reach. We act for brand owners, domain investors, and registrants – including respondent-side defense and reverse domain name hijacking. Our fee ranges are published, not hidden, because transparent pricing serves clients better than opacity. To discuss a .co typosquat or any domain dispute, contact info@cognomenlaw.com.
Author: Cordelia Roe — UDRP complainant practice & gTLD recovery; domain transactions and brand protection. Meet the team.
Speak with Cognomen Law
For a scoped view of your domain matter, contact info@cognomenlaw.com. Discuss your matter
This publication is general information and does not constitute legal advice. For advice on your situation, contact info@cognomenlaw.com.