.co domain names

What .co is

.co is the country-code top-level domain (ccTLD — a two-letter extension assigned to a country or territory under the ISO 3166-1 standard) for Colombia. IANA classifies it as country-code, not generic, and it was delegated on 24 December 1991. Whatever the marketing implies, .co is not an abbreviation of company, corporation or commerce. It belongs to Colombia, and the Colombian state governs it.

The sponsoring organisation at IANA is Colombia's Ministerio de Tecnologias de la Informacion y las Comunicaciones (MinTIC), which sets policy and licences an operator to run the namespace commercially. That licence has moved repeatedly: Universidad de los Andes from 1991 to 2010, .CO Internet S.A.S. from the 2010 global relaunch, Neustar from 2014, GoDaddy Registry from 2020.

Since 2025 the operator has been Equipo PuntoCo, a joint venture between Team Internet Group (through CentralNic) and the Colombian registrar CCI, awarded a ten-year licence after a competitive tender concluded in June 2025. Responsibility transferred on 3 October 2025, with roughly 3.3 million domains migrated over the following weekend and no service disruption. The IANA record, last updated 17 February 2026, lists CentralNic as technical contact and whois.registry.co as the WHOIS server.

Who can register .co

At the second level — the ordinary example.co form — .co is fully open. No domicile requirement, no Colombian nexus, no declaration, no documentation. Anyone may register in real time, and because nothing is declared there is no audit exposure and no risk of cancellation for a false statement.

The third level splits in two. The open zones .com.co, .net.co and .nom.co are available generally, and a .org.co zone is documented historically. The restricted zones are genuinely restricted: .gov.co, .edu.co and .mil.co are reserved for qualifying Colombian government, educational and military entities, and are not sold through ordinary accredited registrars at all. They are administered through a dedicated local portal at registrocolombia.co, where institutional status is checked before a name is issued.

What .co costs to own

.co sits in the mid-premium band: more expensive than legacy generic extensions, cheaper than the country codes that particular industries have bid up.

Its defining pricing feature is the gap between the first year and every year after it. .co is among the most heavily first-year-discounted extensions at retail, which makes the proportional jump at renewal larger than for most extensions. Quote yourself the renewal, and multiply it by the years you intend to hold the name.

• Premium names. Short labels, dictionary words and high-value terms sit in registry premium tiers, and they renew at premium rates annually rather than carrying a one-off surcharge.
• Restoration. Recovering a lapsed .co from redemption costs substantially more than a renewal, because a restore fee is charged on top of it.
• Direction of travel. Team Internet won the 2025 tender partly on lower pricing, and the operator's revenue share fell from 19% to 8%. Whether any of that reaches wholesale rates has not been confirmed, and no registry increase has been reported in connection with the transition. Treat cheaper .co as a possibility, not a plan.

Registration terms, renewals, and transfers

.co registers for a minimum of one year and a maximum of five. That ceiling is the operationally distinctive fact about the extension, and it catches out brand-protection buyers who register defensively for ten years wherever they can. On .co you cannot, so renewal dates need active tracking rather than one long registration.

Transfers use the standard EPP authorization code mechanism: unlock at the losing registrar, obtain the auth code, submit it at the gaining registrar. The domain must be at least 60 days old, must not have been transferred within the previous 60 days, and must not carry a TransferProhibited status. A successful transfer adds one year. The 2025 operator change introduced no new registry-specific locks.

Expiry runs in three stages: a late-renewal window of roughly 44 days; then around 30 days of quarantine or redemption, during which only the original registrant can restore the name and only on payment of a restore fee; then pending delete. Because .co is a country code these windows are registry policy rather than ICANN-mandated, so confirm exact day counts with your registrar rather than assuming gTLD behaviour.

WHOIS, RDAP, and privacy

The authoritative WHOIS server is whois.registry.co. This changed with the 2025 transition, and references to whois.nic.co still circulating in older documentation are stale — monitoring scripts pointed at the old host need updating. RDAP, the Registration Data Access Protocol that returns structured JSON registration data in place of port-43 WHOIS text, is available through the current operator.

Privacy and proxy services are permitted and widely offered by registrars. The registry publishes a Personal Data Processing Policy and a Privacy Policy alongside its Registration Policies and Anti-Abuse Policy, so the framework is documented rather than informal. The structural caveat: as a country code, .co is not bound by ICANN's consensus policies for generic extensions, including the Registration Data Policy that dictates what a .com registrar must redact. Practice closely resembles gTLD practice; the legal basis is different.

DNSSEC — cryptographic signing that lets a resolver verify a DNS answer has not been altered in transit — is supported, with registrar-managed DS records. Internationalised domain names are supported, including the accented characters used in Spanish, which is genuinely useful for Colombian and wider Hispanophone brands.

Who .co suits, and who should avoid it

Begin with what the marketing skips. .co is Colombia's country code, governed by MinTIC under a licence re-tendered roughly once a decade. It is not a generic extension, it certifies nothing about corporate status, and its policy can be changed by a government that owes no duty to registrants outside Colombia. That discretion has never been used to restrict global registration, but it is real.

.co suits:

• Startups and established companies wanting a short, credible alternative where the matching .com is taken or unaffordable. Of the country codes sold generically, .co is the most mainstream-acceptable.
• Businesses with genuine Colombian or Latin American operations, using a country code as intended, with IDN support for Spanish.
• Link shorteners and short-URL products, where two characters matter. t.co is why most people have loaded a .co without noticing.
• Risk-averse buyers who want a two-letter extension without ISO 3166-1 exposure. Colombia is a large, long-established sovereign state and no retirement pathway is in prospect.

It suits you poorly if you cannot tolerate .com confusion, which is .co's central practical weakness; if brand protection requires ten-year registrations; or if you are liable to conflate .co with .com.co, a separate namespace with different pricing and a different audience.

Common mistakes with .co

Treating the promotional first year as the ongoing price. .co is among the most aggressively discounted extensions at retail, so the proportional renewal jump is severe. Register a portfolio on promotion and the bill twelve months later is a different order of magnitude.

Not planning for .com leakage, especially email. People type .com by reflex, hear dot co as dot com, and print it wrong. You catch some .com typo traffic; you also lose some of your own traffic and, more damagingly, some of your own mail. A message sent to [email protected] instead of [email protected] reaches a stranger — possibly a competitor, possibly an operator collecting it. Acquire the matching .com if you can, monitor it if you cannot.

Registering .co when you meant .com.co, or the reverse. Colombian buyers in particular land on the wrong one. They are separate registrations with separate renewals.

Assuming .co carries legal meaning. It certifies no company, corporation or registered legal entity. No incorporation status is implied, checked or verified.

How a dormant country code became a global namespace

.co was delegated on 24 December 1991 and then did essentially nothing for nineteen years. Under Universidad de los Andes it was a restricted, third-level-oriented namespace with little international presence. The university examined commercialising it and abandoned the plan in 2002 — eight years before the relaunch that made .co one of the most successful ccTLD commercialisations attempted.

What separates .co from the other country codes sold generically is that its transition was engineered rather than accidental. Others drifted into global use on a linguistic coincidence. .co was relaunched through public procurement, on a published schedule, with the phased rights-protection sequence normally reserved for a brand-new generic extension:

• Sunrise A, 1 to 20 April 2010, for holders of registered local trademarks.
• Sunrise B, 26 April to 10 June 2010, for holders of national-effect trademarks.
• Landrush, 21 June to 13 July 2010, for names of high commercial value.
• General availability, from 20 July 2010.

The sequencing mattered. Two staged trademark windows before landrush, and landrush before open registration, meant .co reached general availability with the obvious conflicts settled rather than litigated afterwards. Uptake followed: roughly 500,000 registrations by September 2010, about 2.2 million by December 2018, and 3.3 million at the 2025 migration.

Colombia's return has improved with each renegotiation. Under the 2025 licence the operator takes 8% of gross revenue where its predecessor took 19%, leaving the Colombian state with roughly 92% of gross .co revenue — a share very few commercially exploited country codes match. Team Internet won that tender against Radix and Identity Digital substantially on price. The migration is the reassurance case: 3.3 million domains moved backend providers over a single weekend, one of the largest registry migrations in DNS history, and registrants experienced nothing. .co holders have now lived through three operator changes without losing a registration.