4 September, 2026

Addressing Passive Holding Risks: The Sanofi Domain Dispute Case

UDRP Cases

Sanofi successfully reclaimed the domain sanofi-stake.com after the respondent registered it to impersonate the brand. The WIPO panel ordered the cancellation of the domain, citing bad faith passive holding and a lack of legitimate interests by the respondent.

Case Snapshot

Case Number D2026-2535
Complainant Sanofi
Respondent golizo golizo
Disputed Domain
sanofi-stake.com
Threat Tactic Passive Holding
Decision Date 2026-08-27
Panelist Leo (Yi) Liu
OutcomeCancellation
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-2535
UDRP Legal Assistance

Facing Unauthorized Domain Registrations or Brand Abuse?

Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.

Request Case Evaluation

Business Risks of Passive Holding and Domain Squatting

The registration of sanofi-stake.com by an unauthorized third party presents a persistent risk of brand dilution and potential future exploitation. Even where a domain name resolves only to a ‘403 Forbidden’ page or remains inactive, the mere control of a domain that mimics a multinational pharmaceutical brand provides a foundation for malicious activity. In this instance, the respondent utilized privacy services to mask their identity at the time of registration, a common tactic designed to delay brand owner intervention and complicate the enforcement process. This strategy effectively forces the complainant to dedicate internal resources and incur legal fees to reclaim their intellectual property, highlighting the financial burden that even passive squatting imposes on organizations.

While there is no evidence that this specific domain was utilized for active phishing or customer deception, the registration of a ‘brand-plus’ domain creates a latent infrastructure vulnerability. Passive holding often serves as an initial phase in a broader campaign, where bad actors wait for an opportune moment to weaponize the domain for credential harvesting, fraud, or reputational damage. By establishing the domain with a deceptive prefix, the registrant creates a credible vector for impersonation that can bypass basic user scrutiny. For multinational entities like Sanofi, proactive monitoring and the utilization of established UDRP mechanisms remain essential to mitigate these risks before they transition from passive holding to active cyber threats.

Proving Bad Faith Through Passive Holding in UDRP Proceedings

The success of Sanofi’s recovery strategy in case D2026-2535 rested on the clear demonstration of bad faith through the doctrine of passive holding. Although the disputed domain, sanofi-stake.com, did not host an active website—initially displaying only a ‘403 Forbidden’ error before becoming inactive—the complainant effectively argued that such inactivity, combined with the registration of a well-known trademark, satisfies the bad faith requirement. By proactively submitting evidence of their extensive trademark portfolio and domain ecosystem, Sanofi established a prima facie case that the respondent, who utilized privacy services to mask their identity, held no legitimate interest in the domain. This approach compelled the panel to evaluate the intent behind the registration rather than relying on evidence of active commercial exploitation.

The respondent’s eventual decision not to contest the proceedings reinforces the effectiveness of a robust initial filing that emphasizes the distinctive nature of the brand. When a respondent fails to provide a credible explanation for holding a domain that incorporates a multinational trademark, the panel is permitted to draw adverse inferences regarding bad faith. For brand owners, this case illustrates that even when a domain appears dormant and lacks evidence of active phishing or financial harm, the UDRP remains a powerful tool for asset recovery. By demonstrating that the respondent had no bona fide intent to make a legitimate, noncommercial, or fair use of the trademark-infringing domain, Sanofi successfully secured an order for cancellation without the need for complex discovery regarding the respondent’s underlying operational motives.

Practical Recommendations

  • Implement proactive domain monitoring for variations of core trademarks, specifically targeting the addition of generic terms like ‘stake’ to detect potential phishing or impersonation infrastructure early.
  • Utilize passive holding precedents in UDRP filings, even when a domain shows no active content or only error pages, by emphasizing the respondent’s lack of legitimate rights and the brand’s global reputation.
  • Conduct immediate technical investigation upon discovery of suspicious domains to capture evidence of intent, such as DNS history or server response patterns, before the respondent can delete content or mask activity.
  • Adopt a clear enforcement policy for domain disputes that prioritizes swift WIPO filing to leverage the ‘prima facie’ case standard, which forces the respondent to justify their holding or face cancellation.
  • Standardize internal documentation of trademark portfolios in UDRP-ready formats to minimize legal overhead and streamline the submission of evidence against squatters using privacy services.

Frequently Asked Questions (FAQ)

Why was the domain sanofi-stake.com considered confusingly similar to Sanofi’s trademark?

The panel found that the disputed domain name incorporates the famous ‘SANOFI’ trademark in its entirety, merely appending the word ‘stake’. This combination is insufficient to avoid a finding of confusing similarity with the complainant’s well-established mark.

How did the panel determine that the respondent lacked rights or legitimate interests in the domain?

The respondent failed to provide any evidence of rights or legitimate interests. Furthermore, there was no indication of any bona fide, noncommercial, or fair use of the domain, and the respondent was neither affiliated with nor authorized by Sanofi.

How was bad faith established in this case given the domain was largely inactive?

The panel relied on the doctrine of passive holding. By registering a domain that perfectly mirrors a well-known global brand without any active or legitimate use, the respondent acted in bad faith, a conclusion supported by the respondent’s own admission that they did not wish to contest the proceedings.

What was the practical outcome of the UDRP filing for Sanofi?

Following the respondent’s failure to present a defense and their subsequent communication to the WIPO Center indicating an intent to abandon the domain, the panel ordered the cancellation of ‘sanofi-stake.com’, effectively removing the risk of future brand impersonation or phishing from that specific asset.

Is someone blocking a brand domain?

Even without active content, passive domain holding can signal bad-faith intent and threaten your digital infrastructure. Learn how WIPO precedents like D2026-2535 can help you reclaim unauthorized assets before they are weaponized.

Check recovery options

Get Expert UDRP & Domain Dispute Assistance
Request a confidential case evaluation from our domain dispute attorneys. We will review your domain situation and reply within 24 hours.

    Thank You for Your Request!
    Our legal team is reviewing your dispute details and will contact you via email shortly.
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.