JCB Co., Ltd. successfully challenged the registration of jcbincome.com and jcbincome.online by Mansih Gupta. The panel ordered a transfer after finding the domains were used for phishing credentials and passive holding in bad faith.
Case Snapshot
| Case Number | D2026-3474 |
|---|---|
| Complainant | JCB Co., Ltd. |
| Respondent | Mansih Gupta |
| Disputed Domain | jcbincome.comjcbincome.online |
| Threat Tactic | Phishing and Email Fraud |
| Decision Date | 2026-09-25 |
| Panelist | Rodrigo Azevedo |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3474 |
Facing Unauthorized Domain Registrations or Brand Abuse?
Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.
Request Case EvaluationBusiness Risk Assessment: Phishing, Impersonation, and Credential Harvesting
The use of the disputed domains jcbincome.com and jcbincome.online by the respondent represents a significant threat to customer trust and brand reputation through explicit corporate impersonation. By deploying a fraudulent login interface labeled ‘JCB Project Safe Investment,’ the actor actively sought to deceive users into disclosing sensitive personal credentials, including phone numbers and passwords. This tactic exploits the brand’s goodwill by combining the well-known ‘JCB’ trademark with financial terminology, creating a high probability of initial interest confusion that places customers at risk of unauthorized account access and potential financial fraud.
Beyond the active phishing campaign, the respondent employed a multi-domain strategy that included the passive holding of jcbincome.online, which remained under the same control as the active fraudulent site. This infrastructure suggests a broader intent to maintain a portfolio of deceptive assets designed to mirror the complainant’s legitimate operations. The fact that the registrar verification process uncovered contact information inconsistent with the respondent’s initial disclosures further highlights the use of obfuscation techniques. Such practices complicate enforcement efforts and pose a persistent risk of future malicious activity, as the registrant can rotate content or shift domains to evade detection while continuing to compromise user security and dilute the perceived integrity of the brand.
Panel Reasoning: Evaluating Trademark Infringement and Bad Faith
The panel determined that the disputed domain names, jcbincome.com and jcbincome.online, are confusingly similar to the Complainant’s well-established ‘JCB’ trademark. With rights dating back at least sixteen years prior to the domain registrations, the Complainant demonstrated that the inclusion of the ‘JCB’ mark in its entirety, combined with the word ‘income’, created an heightened risk of confusion rather than dispelling it. In accordance with standard UDRP practice, the generic Top-Level Domains were disregarded, reinforcing that the branding strategy intentionally mimicked the Complainant’s identity to foster a sense of implied corporate affiliation.
Regarding the Respondent’s rights or legitimate interests, the record established that the Respondent, Mansih Gupta, lacked any authorization or license to use the ‘JCB’ trademark. The Respondent is not commonly known by the disputed names, holds no relevant trademark rights, and has not engaged in any legitimate trade under the ‘JCB’ banner. The panel specifically noted that the utilization of jcbincome.com for a fraudulent login page, coupled with the passive holding of jcbincome.online, failed to confer any legitimate interest. Such activities fall strictly outside the scope of permissible domain use and clearly demonstrate an absence of rights.
The finding of bad faith was centered on the proactive misuse of the domains for credential harvesting. By deploying a ‘JCB Project Safe Investment’ site designed to solicit user phone numbers and passwords, the Respondent engaged in a clear attempt to attract users for commercial gain through initial interest confusion. This misuse, compounded by the passive holding of the second domain under common control, solidifies the conclusion that the domains were registered and operated in bad faith. The discrepancy between the registrant contact details provided in the complaint and those surfaced during the registrar verification process further underscored the lack of good faith by the registrant.
Strategic Enforcement: Documenting Malicious Intent and Identity Discrepancies
The Complainant’s strategy effectively leveraged the preservation of historical evidence to establish bad faith, specifically by documenting that jcbincome.com previously hosted a phishing portal branded as ‘JCB Project Safe Investment.’ By capturing screenshots of the login page and the unauthorized use of the JCB device mark, the Complainant successfully demonstrated that the Respondent’s primary intent was to engage in credential harvesting. This evidentiary trail allowed the Panel to bypass purely speculative claims and confirm that the registration was a deliberate effort to deceive consumers into providing sensitive personal data under the guise of an authentic financial service.
Beyond the phishing activity, the Complainant fortified its case by utilizing registrar verification responses to highlight registrant discrepancies. The revelation that the provided contact information differed from the details in the complaint served as a critical red flag, undermining the Respondent’s legitimacy and reinforcing the argument for bad faith. Furthermore, by framing the ‘passive holding’ of the associated jcbincome.online domain as a strategic tool for maintaining a broader malicious infrastructure, the Complainant provided a comprehensive view of the Respondent’s tactics. This multi-faceted approach, grounded in both the clear evidence of fraud and the procedural inconsistencies of the registration, compelled the Panel to order the transfer of both domain names.
Practical Recommendations
- Conduct immediate ‘brand-plus-keyword’ domain monitoring to identify and block registrations using financial terms like ‘income’ or ‘investment’ alongside core trademarks to prevent phishing infrastructure deployment.
- Utilize registrar verification early in the dispute process to identify discrepancies between WHOIS privacy data and the actual registrant identity, which serves as strong evidence of bad faith intent.
- Prioritize the preservation of forensic evidence, such as screenshots of fraudulent login pages, as this documentation is critical to prove malicious intent in UDRP proceedings.
- Implement proactive takedown strategies for domains passively held under common control with identified phishing sites, as passive holding is sufficient to demonstrate lack of legitimate interest and bad faith usage under UDRP.
Frequently Asked Questions (FAQ)
Why were the domain names jcbincome.com and jcbincome.online considered confusingly similar to JCB’s trademarks?
The panel determined that the domains incorporated the well-known ‘JCB’ trademark in its entirety, combined with the descriptive word ‘income.’ This combination, alongside the Complainant’s sixteen years of trademark history, created a strong risk of implied corporate affiliation for consumers.
What evidence did the panel cite to prove that the respondent lacked rights or legitimate interests?
The Complainant demonstrated that it had never authorized Mansih Gupta to use the ‘JCB’ mark. Furthermore, the Respondent was not commonly known by these names, held no corresponding trademark, and utilized the site for a deceptive phishing scheme, which can never confer legitimate rights under UDRP policy.
How was the respondent’s bad faith conduct established in this case?
Bad faith was proven by evidence showing the Respondent used jcbincome.com as a fraudulent login portal, specifically designed to harvest customer phone numbers and passwords under the guise of a ‘JCB Project Safe Investment,’ while simultaneously holding jcbincome.online in a passive state.
What is the strategic takeaway regarding the respondent’s identity in this UDRP proceeding?
Registrar verification revealed that the contact information provided during registration differed from the data initially filed in the complaint, serving as a tactical red flag for identity shielding. The panel ultimately ordered the transfer of both domains to JCB Co., Ltd. following the Respondent’s failure to respond to the proceedings.
Concerned about fake email or invoice fraud?
Your brand’s reputation is vulnerable when bad actors use look-alike domains to harvest customer credentials or distribute fraudulent investment schemes. If you have identified suspicious domains mimicking your corporate infrastructure, take proactive steps to secure your digital footprint.
This case note is for informational purposes only and is not legal advice.
