Charlotte Tilbury TM Limited successfully petitioned for the transfer of five typosquatted domains, including charlottetilburry.shop and charlottetilburymart.com, following evidence of bad faith and phishing activities. The panel consolidated the claims against multiple respondent entities and ordered the transfer of all domains after the respondent failed to provide a defense.
Case Snapshot
| Case Number | D2026-3314 |
|---|---|
| Complainant | Charlotte Tilbury TM Limited |
| Respondent | Ba Tomer Jno, lar frankThierry Lombard |
| Disputed Domain | charlottetilburry.shopcharlottetilburymart.comcharlottetilburystore.comcharlottetilburyusstore.comcharlottettillbury.com |
| Threat Tactic | Typo Domains |
| Decision Date | 2026-09-19 |
| Panelist | Gökhan Gökçe |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3314 |
Facing Unauthorized Domain Registrations or Brand Abuse?
Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.
Request Case EvaluationOperational Risks of Typo-Squatting and Phishing Impersonation
The use of multiple typosquatted domains—such as charlottetilburry.shop and charlottetilburymart.com—presents a clear and present threat to consumer trust by facilitating phishing and unauthorized commercial activity. Evidence from this proceeding confirms that bad actors specifically weaponized these domains to host suspected phishing content, diverting unsuspecting users who navigate past initial security warnings. By incorporating unauthorized "© Charlotte Tilbury Store" footers, the operators attempted to establish a false sense of legitimacy, intentionally blurring the line between official brand channels and fraudulent storefronts. This tactic not only exposes consumers to significant financial risk but also dilutes the brand’s equity by associating its name with deceptive e-commerce platforms and unrelated product offerings, such as luxury jewelry.
The use of privacy protection services to mask the true identity of domain registrants presents a distinct enforcement challenge, complicating the ability of brand owners to identify and address the source of these threats. As demonstrated in this case, the deployment of multiple, ostensibly disparate domain registrations often involves a single underlying actor or alter ego entity, necessitating the consolidation of UDRP claims to effectively disrupt the entire network. Without rigorous monitoring and proactive intervention against such clusters, brands face a persistent risk of cyber-impersonation, where malicious actors exploit the ease of automated domain acquisition to scale their fraudulent reach. The lack of a respondent defense further underscores the intent to operate within the shadows of anonymous registration, highlighting the necessity for early detection and unified legal responses to protect the brand’s global reputation.
Panel Reasoning: Consolidation, Confusing Similarity, and Bad Faith
The panel evaluated the UDRP requirements through the lens of a consolidated proceeding involving multiple nominally different domain name registrants. By establishing that these entities acted under common control, the panel successfully addressed the disparate registrations as a single respondent. Regarding the first element of the UDRP policy, the panel performed a threshold comparison between the complainant’s registered ‘CHARLOTTE TILBURY’ trademarks and the five disputed domains. It concluded that the domains were confusingly similar, noting that the standing requirement is effectively met when a clear, straightforward comparison confirms the presence of the complainant’s protected mark within the challenged strings.
Following the establishment of confusing similarity, the panel addressed the respondent’s lack of rights or legitimate interests and the presence of bad faith registration and use. Because the respondent failed to file a formal response to the complainant’s allegations, the panel was able to draw reasonable inferences from the available evidence. This included documenting how the domains were utilized to host unauthorized content, specifically unauthorized ‘© Charlotte Tilbury Store’ footers, and how specific domains were flagged as active phishing sites by hosting providers. These findings underscore that the respondent had no bona fide intent to use the domains in a commercial or non-commercial, fair manner.
The bad faith finding was significantly supported by the respondent’s pattern of conduct, which involved creating a facade of legitimacy to mislead consumers. By deploying websites that mimicked the brand’s store presence while simultaneously engaging in high-risk activities such as phishing redirects and the promotion of unrelated luxury goods, the respondent demonstrated a clear intent to disrupt the complainant’s business and trade on its reputation. This case serves as a precedent for how panels may consolidate multiple anonymized domains to combat coordinated typo-squatting campaigns that seek to exploit consumer trust through deception and fraudulent storefronts.
Strategic Consolidation and Evidence-Based Enforcement
The success of Charlotte Tilbury TM Limited in case D2026-3314 relied on a proactive strategy of consolidating five disparate domain registrations under a single UDRP proceeding. By demonstrating that the domains—which utilized privacy protection services to obscure the registrant’s identity—were actually under common control, the complainant successfully navigated potential procedural hurdles. This consolidation was pivotal, as it allowed the complainant to present a unified narrative of bad faith, specifically highlighting the presence of unauthorized “© Charlotte Tilbury Store” footers across the sites. This evidence proved instrumental in establishing that the respondent was engaged in a pattern of systematic brand impersonation intended to deceive consumers.
Furthermore, the complainant’s strategy effectively leveraged objective technical data to underscore the severity of the threat. By citing hosting provider alerts regarding phishing activities associated with charlottetilburymart.com and documenting the promotion of unrelated luxury goods on other sites, the complainant established that the domains lacked any legitimate interest. The respondent’s failure to file a response served to confirm these allegations, leaving the panel with substantial evidence of bad faith. For brand owners, this case underscores the necessity of compiling forensic evidence—such as screenshots of fraudulent site content and reports of malicious redirects—to swiftly meet the burden of proof in multi-domain disputes against anonymous actors.
Practical Recommendations
- Utilize WIPO consolidation protocols for multi-domain disputes where common control is suspected, even if privacy services mask individual registrant identities.
- Implement proactive threat monitoring for typosquatted variations of your core trademark combined with high-risk TLDs like ‘.shop’ and ‘.com’ to catch phishing infrastructure early.
- Archive screenshots of ‘impersonation’ elements, such as unauthorized ‘© Brand Name’ footers, as they serve as high-probative evidence of bad faith intent for UDRP panels.
- Leverage hosting provider takedown reports alongside UDRP proceedings to document active phishing or malicious activity, strengthening the claim for ‘registration and use in bad faith’.
- Monitor domain registration spikes targeting your brand to identify coordinated malicious campaigns early, enabling consolidated legal actions that reduce filing costs and procedural time.
Frequently Asked Questions (FAQ)
How did the panel determine that domains like ‘charlottetilburry.shop’ were confusingly similar to the Charlotte Tilbury brand?
The panel applied a standard threshold test, finding that these domains—which contained minor misspellings or descriptive additions—were visually and phonetically near-identical to the complainant’s established global trademarks, effectively creating a high likelihood of consumer confusion.
What evidence confirmed the respondent acted in bad faith?
Bad faith was demonstrated by the respondent’s use of the domains to host unauthorized content, including phishing sites and luxury goods marketplaces, as well as the inclusion of deceptive ‘© Charlotte Tilbury Store’ footers intended to impersonate the official brand.
How did the complainant address the use of privacy shields by multiple, nominally different registrants?
The panel accepted the argument that the registrations were under common control and granted consolidation. This allowed the complainant to manage the disparate, anonymous registrants in a single proceeding, successfully overcoming the obstacles typically presented by identity-masking services.
Why were these domains considered a critical security threat to the brand?
Beyond standard typosquatting, the domains were actively used for malicious activity, with at least one domain flagged by hosting providers as a confirmed phishing site designed to compromise customer data, necessitating immediate transfer to prevent further consumer harm.
Recovering Look-alike Domains
Protect your brand integrity by identifying and recovering malicious domains that mimic your trademarks. Whether you are dealing with phishing sites or unauthorized ‘official’ storefronts, we can help you assess your portfolio and take action against bad-faith registrations.
This case note is for informational purposes only and is not legal advice.
