31 August, 2026

Addressing Passive Domain Holding and Fraudulent Registrant Data in Carrefour Dispute

UDRP Cases

Carrefour SA successfully secured the transfer of carrefbr.com after the WIPO panel found the respondent used fabricated contact details to hold the domain in bad faith. The domain was inactive, confirming a clear case of passive holding infringing on the complainant’s trademark rights.

Case Snapshot

Case Number D2026-2836
Complainant Carrefour SA
Respondent Kieran Holmes
Disputed Domain
carrefbr.com
Threat Tactic Passive Holding
Decision Date 2026-08-24
Panelist Karen Fong
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-2836

Risks Associated with Passive Holding and Fabricated Registrant Data

The registration of ‘carrefbr.com’ presents a clear case of passive holding that targets the Carrefour brand by leveraging geographic indicators associated with its extensive Brazilian retail operations. While the domain currently resolves to an inactive page, such tactics are frequently employed as a preparatory phase for more aggressive infringements, such as credential harvesting or phishing, by establishing an initial foothold in the domain ecosystem. The use of a domain name that mimics the Complainant’s established naming conventions forces brand owners to monitor for future activation or redirection, consuming resources and heightening the risk of brand dilution among a global audience of millions of followers.

Furthermore, the reliance on fabricated contact information in the WHOIS data creates a significant obstacle for enforcement and due diligence teams. By combining disparate international location identifiers—specifically, South Yorkshire, United Kingdom, with a country code for Afghanistan—the respondent intentionally obscured their true identity, complicating legal service and investigative efforts. This obfuscation is a critical indicator of bad faith, demonstrating a deliberate attempt to evade accountability while maintaining control over an asset designed to impersonate a well-known trademark. The absence of legitimate registrant details necessitates robust verification protocols for brand protection programs to effectively identify and mitigate the risks posed by bad-faith actors who hide behind anonymization services.

Strategic Enforcement Against Passive Holding and Fabricated Registrant Identity

The Complainant’s strategy relied on reinforcing the global stature of the CARREFOUR brand to establish a high baseline for trademark rights, while simultaneously leveraging the registrar’s verification process to expose bad-faith conduct. By documenting extensive global trademark registrations dating back to 1968 and highlighting its significant market presence—including 1.3 million daily webstore visitors and 12 million social media followers—Carrefour SA successfully frame-shifted the dispute from a simple domain conflict to an clear infringement on a well-known mark. This foundation of evidence effectively neutralized any potential defense the Respondent might have raised, as the panel required minimal effort to conclude that the disputed domain was registered in bad faith despite its current state of inactivity.

A critical component of the Complainant’s success involved technical diligence regarding the Respondent’s registration data. The evidence confirmed that the Respondent provided fabricated contact information, specifically combining locality details from the United Kingdom with an Afghan country code. By ensuring this registrar-verified discrepancy was presented to the WIPO panel, the Complainant demonstrated that passive holding—the act of registering a domain without active content—was clearly intended to exploit the brand’s identity under a veil of anonymity. This factual demonstration of fraudulent intent, combined with the domain’s obvious typosquatting nature targeting the ‘br’ regional identifier, allowed the panel to move directly to a transfer decision, confirming that the absence of active misuse does not insulate a respondent from UDRP liability when identity-masking practices are detected.

Practical Recommendations

  • Utilize domain monitoring services to identify new registrations containing trademark variations in real-time, focusing on top-level domains frequently abused for typosquatting.
  • Perform WHOIS data validation checks immediately upon the identification of suspicious domains to flag inconsistencies such as mismatched location data or synthetic contact information.
  • Document passive holding by capturing screenshots of inactive or placeholder pages to establish a record of non-use, which supports arguments of bad faith under UDRP criteria.
  • Maintain an updated portfolio of active official domain assets and provide this evidence in UDRP filings to establish a clear contrast between legitimate brand infrastructure and infringing domains.
  • Engage with registrars early in the discovery phase to secure verified registrant details when privacy services hide underlying contact information, as this data is critical for proving bad faith identity fabrication.

Frequently Asked Questions (FAQ)

Why was the domain carrefbr.com considered confusingly similar to Carrefour’s trademarks?

The panel determined that the domain name incorporates the core ‘CARREFOUR’ trademark, which is globally recognized. The addition of the suffix ‘br’ mimics a country-specific identifier, which creates a likelihood of confusion among internet users given the complainant’s significant operations in Brazil.

How did the respondent’s contact information impact the finding of bad faith?

The panel identified that the respondent provided a fabricated address, which improperly combined location details from the United Kingdom with a country code for Afghanistan. This evidence of deceptive and fraudulent contact data, combined with the lack of any legitimate response, supported the finding that the domain was registered and held in bad faith.

Does the fact that the domain was inactive (‘passive holding’) prevent a UDRP transfer?

No. Passive holding does not shield a respondent from a UDRP transfer. In this case, the combination of the complainant’s well-known trademark, the respondent’s failure to provide any evidence of rights or legitimate interests, and the use of false registration data led the panel to conclude the domain was held in bad faith.

What does this case suggest about the risks of typosquatted domains?

The case highlights that typosquatted domains, such as carrefbr.com, are often registered by bad actors who use fraudulent registrar information to avoid accountability. For businesses, this underlines the necessity of proactive brand monitoring and the ability to leverage UDRP procedures to reclaim domains even before they are utilized for active fraud or phishing.

Is someone blocking a brand domain?

Inactive domains using your brand are often precursors to more active threats like phishing. Don’t wait for misuse to escalate; secure an assessment of your domain portfolio’s vulnerabilities today.

Check recovery options

Contact us
We will find the best solution for your business

    Thank you for your request!
    We will contact you within 5 hours!
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.