ComScore, Inc. successfully recovered the domain ‘careers-comscore.com’ from respondent Anupam Kachhap. The panel ordered a transfer after finding the domain was used in a bad-faith phishing scheme to impersonate the company for recruitment purposes.
Case Snapshot
| Case Number | D2026-3891 |
|---|---|
| Complainant | ComScore, Inc. |
| Respondent | Anupam Kachhap, Renaissance Academy of Wisdom Private Limited |
| Disputed Domain | careers-comscore.com |
| Threat Tactic | Phishing and Email Fraud |
| Decision Date | 2026-10-05 |
| Panelist | Edoardo Fano |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3891 |
Facing Unauthorized Domain Registrations or Brand Abuse?
Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.
Request Case EvaluationBusiness Risk: Corporate Impersonation and Recruitment-Based Phishing
The registration of ‘careers-comscore.com’ represents a targeted threat to ComScore’s corporate reputation and the security of its prospective workforce. By utilizing a domain that mimics the company’s name and focuses on recruitment, bad actors facilitate high-trust phishing attacks. Such tactics leverage the credibility of the ComScore brand to deceive job seekers, potentially inducing them to disclose sensitive personal, professional, or financial information under the guise of an authentic employment opportunity. Even though the domain resolved to an inactive page at the time of review, the deployment of this infrastructure for malicious email campaigns demonstrates a clear intent to exploit the company’s established digital footprint for fraudulent activity.
Furthermore, this case highlights the operational friction and risks created by deceptive domain registrations that utilize privacy-masked or mismatched registrant details. The discrepancy between the named Respondent and the information revealed during the Registrar verification process complicates efforts to identify the actors behind these schemes. Such tactics force brand owners to dedicate significant resources to monitor and initiate legal recovery procedures under the UDRP to mitigate harm. Proactive monitoring for domains that append HR-related keywords—such as ‘careers’—to established trademarks is essential for identifying these threats before they can facilitate successful phishing campaigns or inflict long-term damage on customer and employee trust.
Panel Reasoning: Evaluating Confusion, Illegitimacy, and Malicious Intent
The panel evaluated the case under the three-pronged criteria of UDRP Policy 4(a). Regarding the first element, the panel determined that ‘careers-comscore.com’ is confusingly similar to ComScore, Inc.’s established COMSCORE trademark, which has been protected by U.S. registrations since 2002. This alignment demonstrates that the disputed domain creates a high risk of consumer confusion by incorporating the brand name directly into the URL, a classic tactic used to lend a veneer of authenticity to unauthorized communications.
On the issue of rights or legitimate interests, the panel found no evidence that the respondent held any authorization to utilize the COMSCORE trademark. The respondent failed to demonstrate a bona fide offering of goods or services or any legitimate non-commercial use of the domain. In the absence of a formal response from the respondent, the panel concluded that the registrant lacked any legitimate basis for the registration, reinforcing the complainant’s assertion that the domain was acquired solely for unauthorized use.
The final determination regarding bad faith relied on the domain’s documented role in a phishing scheme. Although the domain redirected to an inactive page at the time of the review, the complainant provided sufficient evidence that the site had been actively used to facilitate fraudulent recruitment emails. By mimicking the company’s corporate identity to deceive prospective employees, the respondent demonstrated a clear intent to mislead and exploit the brand’s reputation for personal gain, justifying the panel’s decision for a domain transfer.
Strategic Approach: Combating Phishing Through Proven Trademark Precedence
The complainant’s strategy effectively leveraged established trademark rights dating back to 2002 to counter the respondent’s domain-based impersonation. By documenting the exact identity of the COMSCORE trademark, the complainant established a clear foundation for a confusing similarity claim under the first UDRP element. The critical persuasive element was the submission of external, non-web-based evidence—specifically, documentation of recruitment phishing emails—which proved that the respondent was actively utilizing the domain for fraudulent purposes despite the domain itself resolving to an inactive landing page. This proactive approach allowed the panel to move beyond the lack of an active website to establish clear bad faith registration and use.
The case serves as a model for addressing corporate impersonation where the threat exists outside the traditional web environment. By linking the domain registration to verifiable phishing activities, the complainant successfully neutralized the respondent’s potential defense of passive holding. The evidence provided regarding the fraudulent employment solicitation was instrumental in demonstrating the respondent’s lack of legitimate interest. Furthermore, the complainant benefited from the registrar verification process, which uncovered registrant details that contradicted the named respondent, thereby further undermining the respondent’s credibility. This combination of documented trademark priority and tangible evidence of scam activity ensured a successful transfer despite the respondent failing to provide a formal response.
Practical Recommendations
- Secure copies of all fraudulent recruitment emails as primary evidence, specifically capturing the headers and the sender’s address to demonstrate the link between the disputed domain and phishing activities.
- Perform proactive WHOIS monitoring for domains incorporating your brand name combined with common business suffixes like ‘-careers’, ‘-hr’, or ‘-jobs’ to detect threats before they escalate.
- Request a formal registrar verification at the outset of the dispute process, as discrepancies between the named registrant and the registrar’s internal data can serve as strong indicators of fraudulent intent.
- Document the absence of a functional website or non-commercial use of the domain, and use this to challenge any potential defense of ‘legitimate interest’ under the UDRP.
- Implement DMARC, SPF, and DKIM protocols on your legitimate corporate email domains to minimize the ability of attackers to successfully spoof your domain in conjunction with their fraudulent registrations.
Frequently Asked Questions (FAQ)
Why was ‘careers-comscore.com’ considered confusingly similar to ComScore’s trademarks?
The domain was found confusingly similar because it incorporates the protected ‘COMSCORE’ trademark in its entirety, coupled with the term ‘careers,’ which misleadingly suggests an official affiliation with the ComScore corporate recruitment process.
How did ComScore prove bad faith when the domain resolved to an inactive page?
While the domain was inactive at the time of review, the panel accepted evidence that it had been actively used to conduct a phishing scheme, specifically by sending fraudulent employment solicitation emails that impersonated ComScore.
What evidence established the respondent’s lack of rights or legitimate interests?
The respondent failed to provide a formal response to the UDRP complaint, and the Complainant demonstrated that the respondent was never authorized to use the ‘COMSCORE’ trademark or offer services on the company’s behalf.
What was the tactical outcome for the brand in this UDRP proceeding?
The panel ordered the transfer of the domain ‘careers-comscore.com’ to ComScore, neutralizing the threat of ongoing corporate impersonation and preventing further potential harm to job applicants from fraudulent recruitment activities.
Concerned about fake email or invoice fraud?
Brand-mimicking domains are often used to facilitate recruitment scams and corporate impersonation. Learn how to secure your brand assets and neutralize these threats through WIPO UDRP procedures.
This case note is for informational purposes only and is not legal advice.
