Bulgari S.p.A successfully reclaimed three domains used to mimic its financial infrastructure by appending ‘billing’ and ‘invoice’ to its trademark. The panel ruled in favor of the complainant, finding that the respondent had no legitimate interest and registered the domains in bad faith.
Case Snapshot
| Case Number | D2026-2095 |
|---|---|
| Complainant | Bulgari S.p.A |
| Respondent | Garini sarabiGarini sarabi, Novéo Clinicpayam basiri, rn mark |
| Disputed Domain | bulgari-billing.netbulgari-invoice.combvlgari-billing.com |
| Threat Tactic | Phishing and Email Fraud |
| Decision Date | 2026-07-24 |
| Panelist | Gill Mansfield |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-2095 |
Financial Deception and the Risk of ‘Billing’ Keyword Impersonation
The registration of domain names combining the well-known BULGARI and BVLGARI trademarks with terms such as ‘billing’ and ‘invoice’ presents a distinct threat to brand integrity and customer security. By adopting these specific suffixes, the respondent created a high risk of consumer confusion, as internet users are likely to perceive such domains as legitimate extensions of the brand’s financial or payment infrastructure. This tactic specifically targets the trust inherent in customer-facing business processes, potentially enabling unauthorized parties to pose as corporate billing departments to facilitate fraudulent requests or unauthorized data collection.
Although the domains in this dispute were in a state of passive holding at the time of the complaint, this status does not mitigate the underlying business risk. Passive holding is frequently a precursor to active phishing operations, and the use of multiple registrant identities for a single batch of domains suggests a deliberate effort to fragment ownership and complicate enforcement actions. Brand owners must recognize that such infrastructure-mimicking domains, even when inactive, serve as latent tools for social engineering and brand impersonation, necessitating proactive monitoring and swift legal intervention before active exploitation occurs.
Panel Reasoning: Navigating Confusing Similarity, Legitimate Interests, and Bad Faith
In the matter of Bulgari S.p.A. v. Garini sarabi et al. (Case No. D2026-2095), the panel began by addressing the threshold requirement of confusing similarity. By consolidating disputes against nominally different registrants, the panel established that the disputed domains—containing the globally recognized BULGARI and BVLGARI marks—met the standing requirement. The panel dismissed the relevance of domain registration suffixes, focusing instead on the direct integration of the complainant’s well-known trademarks within the disputed strings. This underscores that standard domain-naming conventions cannot serve as a defense when the underlying mark is famous and unaffiliated with the registrant.
Regarding the second element, the panel found the respondent failed to establish any rights or legitimate interests. The evidence highlighted that the respondent lacked authorization, licensing, or any commonly known association with the complainant’s marks. Given the absence of active websites or evidence of bona fide offerings, the panel correctly determined that the respondent had no colorable claim to the domains. This case serves as a reminder that the failure to actively resolve a domain does not grant immunity from UDRP scrutiny, as the lack of demonstrated use or preparation for legitimate use actively supports a finding against the registrant.
On the issue of bad faith, the panel reasoned that the incorporation of the complainant’s famous mark by an unaffiliated party creates a strong presumption of malicious intent. The addition of functional keywords like ‘billing’ and ‘invoice’ was deemed particularly predatory. By adopting these terms, the respondent likely sought to mislead internet users into believing the domains were official channels of the complainant’s financial infrastructure. This strategic choice reinforces the conclusion that the domains were intended for deceptive association, which constitutes bad faith regardless of whether the domains were actively hosting phishing content at the time of the complaint.
Strategic Consolidation and the Rebuttal of Passive Holding Defenses
The success of the Bulgari S.p.A strategy rested on the proactive consolidation of proceedings against multiple nominally distinct registrants. By treating the batch of domains as a single orchestrated effort, the complainant effectively mitigated the risk of fragmented litigation and successfully presented a unified narrative of bad faith. This procedural maneuver forced the panel to consider the cumulative impact of the respondent’s actions, rather than evaluating each domain in isolation. This consolidation was critical, as it prevented the respondent from leveraging the disparate registrant identities to obfuscate a coordinated campaign aimed at mimicking the brand’s internal financial operations.
Persuasiveness was further achieved by directly addressing the inherent danger posed by descriptive suffixes like ‘billing’ and ‘invoice’ when combined with a famous mark. Even though the domains were in a state of passive holding at the time of the complaint, the complainant successfully argued that the choice of these specific suffixes signaled an intent to facilitate financial deception. By asserting that these terms created a false perception of affiliation with the company’s administrative departments, the complainant effectively negated the utility of passive holding as a shield. The panel ultimately rejected the silence of the respondent, finding that the clear link to the complainant’s trademarks, absent any legitimate authorization or use, was sufficient evidence to support a finding of bad faith under the policy.
Practical Recommendations
- Proactively monitor domain registrations for ‘brand + financial’ keyword combinations, as appending terms like ‘billing’ or ‘invoice’ to your trademarks is a high-confidence indicator of phishing intent.
- Adopt a consolidated filing strategy for multiple infringing domains registered by different apparent owners if you can demonstrate a common pattern of conduct, as this reduces costs and prevents the respondent from fragmenting the enforcement effort.
- Do not wait for active phishing content to materialize; leverage passive holding findings in your UDRP complaints by emphasizing that the choice of trademark-plus-financial-keyword creates an inherent and unreasonable risk of confusion.
- Compile evidence of your global trademark portfolio and active social media marketing early to establish that your brand’s reputation is sufficiently famous to create a presumption of bad faith when used by an unaffiliated entity.
- In your complaint, specifically highlight how the use of hyphens in deceptive domains serves to reinforce a false association with your legitimate corporate infrastructure rather than acting as a distinguishing factor.
Frequently Asked Questions (FAQ)
Why did the panel consider domains like ‘bulgari-billing.net’ to be confusingly similar to the trademark?
The panel found that the disputed domains incorporated the well-known BULGARI and BVLGARI marks in their entirety. The addition of descriptive suffixes like ‘-billing’ and ‘-invoice’ did not distinguish the domains; instead, these terms increased the risk of confusion by causing internet users to mistakenly perceive the domains as official communication channels for the brand’s financial department.
How did Bulgari S.p.A prove a lack of rights or legitimate interests when the domains were not active?
The complainant demonstrated that the respondents had no trademark rights to the Bulgari marks and had never been authorized to use them. Since the domains did not resolve to active websites at the time of the complaint, the respondent failed to establish any bona fide offering of goods or services or any legitimate noncommercial use that would provide a defense.
What evidence established bad faith in this case despite the domains being passively held?
The panel inferred bad faith from the registration of a world-famous trademark by an unaffiliated entity, combined with the strategic choice of terms like ‘billing’ and ‘invoice’. Such tactics suggest a clear intent to impersonate the brand’s financial operations, and the panel noted that passive holding of infringing domains does not preclude a finding of bad faith.
How did the panel handle the multiple, nominally different registrants involved in this dispute?
The panel exercised its authority to consolidate the proceedings against the disparate respondents—which included entities like Garini sarabi and Novéo Clinic—into a single UDRP decision, recognizing the pattern of registration as a concerted effort to complicate brand enforcement.
Are your brand assets being weaponized for invoice fraud?
The Bulgari case demonstrates how bad actors use ‘billing’ and ‘invoice’ suffixes to impersonate corporate financial departments, even on inactive domains. If you suspect your brand is being targeted for similar phishing or domain abuse, our team can help you assess the risk and prepare a strategy for enforcement.
This case note is for informational purposes only and is not legal advice.
