9 July, 2026

Addressing Trademark Infringement and Email Fraud Risks in LEGO Domain Disputes

UDRP Cases

LEGO Holding A/S successfully secured the transfer of the domain lianlego.com from a Vietnamese company following a WIPO UDRP dispute. The panel found that the domain, which contained MX records indicative of potential phishing risks, was registered and used in bad faith.

Case Snapshot

Case Number D2026-1547
Complainant LEGO Holding A/S
Respondent CONG TY TNHH TU VAN DICH VU VA SAN XUAT THUONG MAI LIAN
Disputed Domain
lianlego.com
Threat Tactic Brand Plus Keyword
Decision Date 2026-06-10
Panelist Pham Nghiem Xuan Bac
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-1547

Business and Security Risks of Trademark-Infringing Domains

The registration of lianlego.com demonstrates a clear intent to leverage the global recognition of the LEGO trademark to mislead internet users. By incorporating the brand name into a secondary string, the respondent creates a false impression of corporate affiliation, which poses a direct risk to consumer trust and brand equity. Even in instances where a domain does not resolve to a live website, the act of registration itself serves as an unauthorized appropriation of intellectual property that necessitates proactive monitoring and legal intervention to protect the brand from future exploitation.

A significant technical risk identified in this dispute is the configuration of Mail Exchange (MX) records on the disputed domain. The presence of these records suggests that the domain was prepared for the facilitation of email communications, creating a high potential for business email compromise (BEC) and phishing campaigns targeting unsuspecting consumers or partners. Because such infrastructure allows bad actors to send fraudulent communications that appear to originate from an authentic brand-affiliated source, the preemptive removal of these domains through UDRP processes is essential to neutralizing systemic fraud vectors before they manifest into measurable financial harm.

Strategic Leverage of Technical Infrastructure in UDRP Proceedings

The Complainant successfully navigated the challenge of a non-responsive registrant by highlighting the technical configuration of the disputed domain, specifically the presence of Mail Exchange (MX) records. While the website was inactive at the time of the decision, the Complainant’s proactive identification of these records demonstrated a clear intent to facilitate potential business email compromise or phishing fraud. By linking the domain’s infrastructure to the high global profile of the LEGO trademark, the Complainant effectively shifted the burden of proof to demonstrate that the domain’s utility was inherently malicious rather than benign, even in the absence of live consumer-facing content.

This case underscores the efficacy of leveraging trademark fame as a cornerstone for proving bad faith, particularly when the registrant provides no evidence of legitimate business use. The Complainant’s strategy relied on establishing a direct correlation between the inherent distinctiveness of their global brand and the registrant’s choice to incorporate that brand into a domain registration. By presenting comprehensive evidence of the brand’s digital reach—citing approximately 38 million monthly visits to their primary site—the Complainant established a high probability that the registrant targeted their IP for commercial gain. This evidence-based approach proved persuasive enough to secure a swift transfer despite the Respondent’s failure to engage in the procedural process.

Practical Recommendations

  • Prioritize monitoring for domains with active MX records, as these are strong indicators of potential business email compromise (BEC) and phishing risk rather than mere passive holding.
  • Include technical evidence of MX configuration in UDRP complaints to bolster arguments of bad faith use, even when the domain does not resolve to an active website.
  • Leverage the fame of your trademark as a primary evidentiary pillar to demonstrate that a registrant could not reasonably have been unaware of your rights, simplifying the burden of proof in non-responsive cases.
  • Document the volume and nature of legitimate brand traffic in your filings to establish the potential for consumer harm and commercial gain, even if no direct financial loss is currently confirmed.
  • Proactively initiate UDRP filings once a clear infringement pattern is identified, as non-responsive respondents often rely on procedural delays to continue unauthorized activity.

Frequently Asked Questions (FAQ)

Why was the domain ‘lianlego.com’ considered confusingly similar to the LEGO trademark?

The Panel determined that the dominant element of the disputed domain is the term ‘lego,’ which is identical to the Complainant’s globally recognized trademark. The inclusion of the additional term ‘lian’ was insufficient to prevent a likelihood of confusion, as the overall impression of the domain points directly to the Complainant’s mark.

How did the presence of MX records influence the finding of bad faith?

While the domain was not actively resolving to a website, the configuration of Mail Exchange (MX) records provided critical evidence. The Panel noted that this setup created a significant risk for business email compromise (BEC) and phishing, demonstrating an intent to use the domain for deceptive communications under the guise of the LEGO brand.

What evidence confirmed that the Respondent lacked legitimate interests in the domain?

The Complainant established that it never authorized, licensed, or otherwise permitted the Respondent to use the LEGO trademark. Combined with the Respondent’s failure to file a formal response to the UDRP complaint, the Panel found no basis for the Respondent to claim any rights or legitimate interests.

What was the tactical outcome for LEGO Holding A/S in this dispute?

LEGO Holding A/S successfully secured the transfer of ‘lianlego.com’ through a swift WIPO UDRP resolution. The case highlights that even without a functioning website, proactive monitoring and the identification of suspicious technical configurations like MX records are sufficient to prove bad faith and regain control of infringing domains.

Found a brand-plus-keyword impersonation domain?

Protect your digital footprint from unauthorized combinations of your trademark and generic keywords. Our expert team provides rapid UDRP eligibility assessments and enforcement strategies to mitigate reputation theft and email fraud risks.

Assess brand threat

Contact us
We will find the best solution for your business

    Thank you for your request!
    We will contact you within 5 hours!
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.