Super-Pharm (Israel) Ltd. successfully secured the transfer of three domain names used to host deceptive content and phishing schemes. The panelist found the domains confusingly similar to the complainant’s established trademark, leading to an order for transfer.
Case Snapshot
| Case Number | D2026-3310 |
|---|---|
| Complainant | Super – Pharm (Israel) ltd. |
| Respondent | super acezhang zc |
| Disputed Domain | superpharmaph.cfdsuperpharmaph.clicksuperpharmaph.sbs |
| Threat Tactic | Phishing and Email Fraud |
| Decision Date | 2026-09-14 |
| Panelist | Reyes Campello Estebaranz |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3310 |
Facing Unauthorized Domain Registrations or Brand Abuse?
Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.
Request Case EvaluationThreat Assessment: Phishing and Reputational Risks from Brand-Adjacent Domains
The unauthorized registration of domain names such as superpharmaph.cfd, superpharmaph.click, and superpharmaph.sbs exposes the Super-Pharm brand to significant operational and reputational harm. These domains were leveraged to host deceptive content, including unauthorized gambling services and high-risk phishing platforms. By exploiting the established reputation of the SUPER-PHARM trademark, the Respondent created a credible vector for defrauding unsuspecting consumers. The use of privacy services from registrars like Dynadot further complicated the identification of the bad-faith actors, creating a barrier to immediate takedowns and allowing for a period of unchecked illicit activity that directly targeted the Complainant’s customer base.
The deployment of these typosquatting domains represents a calculated attempt to intercept traffic and erode consumer trust. Third-party evidence provided by ScamAdviser confirmed that these sites were actively engaged in deceptive activities, posing an objective threat to users who might confuse the infringing domains with the official Super-Pharm digital presence. Because the Respondent failed to provide a legitimate defense, it is evident that the tactical use of diverse, non-traditional gTLDs was intended solely to facilitate malicious activities under the cover of the complainant’s mark. This case underscores the necessity for brand owners to proactively monitor not only core domain assets but also the broader gTLD ecosystem to mitigate the risk of financial fraud and unauthorized brand association.
Legal Analysis: Confusing Similarity, Lack of Legitimate Interests, and Bad Faith
The WIPO panel in D2026-3310 affirmed that the disputed domain names were confusingly similar to the Complainant’s established trademark. The inclusion of the letters ‘aph’ did not prevent a finding of similarity, nor did the suffix ‘ph’ acting as a potential geographic reference to the Philippines. Furthermore, the Panel held that the selection of generic Top-Level Domains (gTLDs) such as ‘.cfd’, ‘.sbs’, and ‘.click’ are purely technical, standard components of domain registration that must be disregarded in the assessment of whether a domain is confusingly similar to a protected mark.
Regarding the second element of the UDRP, the Panel determined that the Respondent lacked any rights or legitimate interests in the contested domains. The Respondent failed to demonstrate it was commonly known by the names, nor could it point to any legitimate trademark rights. Critically, the Respondent lacked authorization from the Complainant to use the ‘SUPER-PHARM’ mark, failing to provide any evidence of a legitimate, non-commercial, or fair use that would satisfy the criteria under the policy.
The finding of bad faith was underscored by the Complainant’s reputation and the Respondent’s use of the sites for deceptive purposes. Third-party evidence, specifically from ScamAdviser, was instrumental in confirming that the domains were used to host phishing schemes and illicit gambling content. Because the Complainant’s brand is well-established, the Panel concluded that the Respondent knew or should have known the domains were infringing, rendering any claim of legitimate use impossible and supporting a swift order for the transfer of all disputed domains to the Complainant.
Strategy Breakdown: Leveraging Independent Reputation Data for Enforcement
The Complainant’s success in this matter relied on a robust evidentiary framework that extended beyond simple trademark assertions. By providing independent third-party documentation to substantiate the long-standing reputation of the SUPER-PHARM brand, established in 1978, the Complainant effectively neutralized the Respondent’s potential claims of legitimacy. This strategy was further strengthened by incorporating external reports from ScamAdviser, which clearly linked the disputed domains to fraudulent phishing and deceptive gambling activities. Using such objective, third-party validation provides panels with the necessary context to assess the bad faith element, particularly when the respondent utilizes privacy services to mask their identity and subsequently fails to respond to the complaint.
From a procedural perspective, the Complainant successfully navigated the challenge of identifying deceptive uses across diverse gTLDs, specifically .cfd, .click, and .sbs. The argument emphasized that these TLDs are mere technical components that do not distinguish the domains from the registered trademark. By framing the dispute around the misuse of these specific gTLDs for phishing and unauthorized commercial activity, the Complainant demonstrated a proactive approach to brand protection in non-traditional digital environments. This case serves as a model for utilizing clear evidence of consumer-facing harm and technical domain structure analysis to achieve a swift transfer, especially when dealing with bad-faith actors who attempt to evade accountability through default and anonymity.
Practical Recommendations
- Deploy automated domain monitoring tools that specifically track high-risk gTLDs (e.g., .cfd, .sbs, .click) to detect typosquatted versions of your primary brand names before they become active phishing hubs.
- Integrate third-party reputation data, such as ScamAdviser reports, into your internal enforcement repository to streamline the gathering of ‘bad faith’ evidence for future UDRP filings.
- Implement a proactive defensive registration strategy for core brand variations, particularly in high-volume regions and emerging TLD spaces, to reduce the surface area for impersonation.
- Establish a standardized internal protocol for identifying and documenting phishing indicators—including deceptive gambling content and unauthorized e-commerce activity—to accelerate the preparation of cease-and-desist or UDRP materials.
- Conduct regular audits of WHOIS records for identified lookalike domains to bypass privacy services early and identify patterns of registrant behavior that support ‘bad faith’ claims under the UDRP.
Frequently Asked Questions (FAQ)
Why were the domain names superpharmaph.cfd, superpharmaph.click, and superpharmaph.sbs considered confusingly similar to the Super-Pharm trademark?
The WIPO panel determined that the inclusion of the ‘aph’ suffix and the chosen gTLDs (.cfd, .click, .sbs) did not distinguish the domains from the registered SUPER-PHARM mark. The panel treated these gTLDs as standard technical components to be disregarded, finding the trademark remained clearly recognizable within the infringing strings.
What evidence confirmed that the respondent lacked legitimate rights to these domains?
The respondent was found to have no authorization to use the SUPER-PHARM trademark, and there was no evidence that the respondent was commonly known by those names. Furthermore, the respondent failed to file a response to the complaint, providing no defense for any legitimate interest in the disputed assets.
How did the complainant prove that the respondent acted in bad faith?
Bad faith was demonstrated by showing the respondent’s use of the domains to host phishing and deceptive gambling-related content. The panel concluded that given the strong international reputation of the SUPER-PHARM brand, the respondent had actual or constructive knowledge of the mark, and registered the domains specifically to capitalize on consumer confusion.
What key takeaway regarding domain monitoring did this case highlight for the business?
This case underscores the risk of ‘typosquatting’ across diverse, non-traditional gTLDs. Relying on external threat intelligence—specifically ScamAdviser reports—proved essential in substantiating the fraudulent nature of the sites, providing the panel with clear evidence of deceptive intent beyond simple domain registration.
Concerned about fake email or invoice fraud?
Protect your brand from deceptive phishing campaigns and bad-faith domain registrations. Our team can help you identify infrastructure patterns and evaluate your eligibility for UDRP transfer proceedings to secure your digital assets.
This case note is for informational purposes only and is not legal advice.
