Goya Foods, Inc. successfully recovered the domain goyaservice.com from respondent Ellis Gabe via a WIPO UDRP proceeding. The respondent used the domain to send fraudulent purchase orders worth USD 450,000 to the complainant’s vendors while impersonating company staff.
Case Snapshot
| Case Number | D2026-3499 |
|---|---|
| Complainant | Goya Foods, Inc. |
| Respondent | Ellis Gabe |
| Disputed Domain | goyaservice.com |
| Threat Tactic | Phishing and Email Fraud |
| Decision Date | 2026-09-15 |
| Panelist | Debra J. Stanek |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3499 |
Facing Unauthorized Domain Registrations or Brand Abuse?
Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.
Request Case EvaluationOperational Risks: Corporate Impersonation and Procurement Fraud
The registration of ‘goyaservice.com’ exemplifies a high-impact tactical threat where domain names are utilized primarily for Business Email Compromise (BEC) rather than website-based consumer deception. By appending the descriptive term ‘service’ to the established GOYA mark, the respondent created a sophisticated, professional-appearing digital infrastructure intended to facilitate corporate impersonation. This approach exploits the inherent trust vendors place in corporate communication channels, as evidenced by the respondent’s attempt to orchestrate a fraudulent USD 450,000 procurement order. Such activities pose a severe risk to organizational supply chain integrity and financial security, as they leverage internal administrative processes to bypass standard security filters.
The use of this domain to send fraudulent purchase orders directly mirrors the operational risks associated with targeted employee impersonation. Because the domain did not host a public-facing website, it functioned as a ‘silent’ asset, minimizing exposure until the precise moment of the attack. This strategy forces organizations to monitor not only public-facing web content but also the broader DNS landscape for deceptive domain registrations that could support spoofed email communications. The failure of the respondent to participate in the UDRP process highlights the disposable nature of these domains, necessitating proactive domain monitoring and vendor verification protocols to mitigate the risk of financial loss and unauthorized transactional activities.
Legal Analysis and UDRP Burden of Proof
To prevail under the UDRP, Goya Foods, Inc. was required to satisfy the tripartite test under Policy paragraph 4(a): proving that the disputed domain name is confusingly similar to its protected marks, that the respondent holds no rights or legitimate interests in the domain, and that the domain was registered and used in bad faith. The Panel clarified that a respondent’s failure to submit a formal response does not shift the burden of proof, nor does it result in an automatic default judgment for the complainant; Goya Foods remained obligated to present sufficient evidence for each element of the complaint.
The panel found that ‘goyaservice.com’ is confusingly similar to the Complainant’s established GOYA trademark. By appending the descriptive term ‘service’ to the well-known mark, the respondent created a domain structure likely to deceive vendors into believing the domain was an authorized corporate portal. This finding is consistent with established WIPO jurisprudence regarding the use of descriptive suffixes that capitalize on the strength of a senior mark to create false institutional associations.
The determination of bad faith centered on the respondent’s active use of the domain to facilitate impersonation fraud. Evidence that the respondent utilized ‘goyaservice.com’ to send fraudulent USD 450,000 purchase orders under the guise of Goya employees directly negated any claim to a legitimate commercial interest. Although the domain did not resolve to a functional website, the panel concluded that the active employment of the domain in phishing communications satisfied the bad faith requirement, as the respondent deliberately used the domain to target the complainant’s supply chain.
Strategic Enforcement Against Email-Based Impersonation
Goya Foods, Inc. effectively leveraged the UDRP process by demonstrating that the respondent’s registration was not merely a passive holding, but an active instrument for corporate fraud. The complainant successfully established a clear link between the disputed domain, ‘goyaservice.com,’ and the unauthorized solicitation of a USD 450,000 purchase order from a vendor. By highlighting the deliberate use of the ‘service’ suffix combined with the well-known ‘GOYA’ trademark, the complainant persuasively argued that the domain was specifically engineered to deceive recipients into believing they were communicating with authorized personnel. This evidence of active procurement fraud served as the foundational proof of bad faith registration and use, overcoming the respondent’s subsequent non-responsive posture during the proceedings.
The decision underscores the importance of evidentiary detail when handling impersonation cases. Because the domain did not resolve to a functional website, the complainant’s reliance on internal records documenting the fraudulent email correspondence—specifically the usage of the domain to transmit fake purchase orders—was critical in securing the transfer. For brand owners, this case highlights that even in the absence of a live website, clear evidence of email-based impersonation provides sufficient grounds for relief under the UDRP. By providing a well-documented timeline of the respondent’s activity, the complainant forced a default, allowing the panel to move expeditiously toward a transfer of the domain, thereby mitigating further risk to the corporate supply chain.
Practical Recommendations
- Implement proactive domain monitoring for high-value trademark strings combined with service-oriented suffixes (e.g., ‘service’, ‘support’, ‘orders’) to detect early-stage impersonation registrations.
- Require vendor procurement teams to verify purchase orders sent via email by cross-referencing sender domain names against an internal ‘approved domain’ registry.
- Document evidence of fraudulent communication (e.g., headers, body text of fake POs) immediately upon detection to support a swift UDRP filing under the bad faith use criterion.
- Utilize WIPO UDRP filings even for non-resolving domains when evidence confirms they are being weaponized for email-based social engineering, as passive status does not grant a safe harbor.
- Conduct periodic supplier training on corporate impersonation indicators, specifically highlighting that genuine purchase orders should only originate from established, authenticated company infrastructure.
Frequently Asked Questions (FAQ)
Why was the domain goyaservice.com considered confusingly similar to Goya Foods’ trademark?
The domain was found confusingly similar because it incorporates the well-known ‘GOYA’ trademark in its entirety, merely appending the descriptive term ‘service’ to create a false impression of an official corporate communication channel.
What evidence proved the respondent’s lack of legitimate rights to the disputed domain?
The panel determined that the respondent, Ellis Gabe, was not authorized by Goya Foods to use its trademark and was not commonly known by the name ‘goyaservice’. The respondent’s total failure to participate in the proceedings further supported the conclusion that no legitimate interest existed.
How did the panel establish that the domain was registered and used in bad faith?
Bad faith was proven by the respondent’s active misuse of the domain to facilitate corporate impersonation, specifically by sending fraudulent purchase orders worth USD 450,000 to Goya Foods’ vendors while pretending to be a company employee.
What was the tactical outcome of this UDRP case for the complainant?
The panel ordered the immediate transfer of the domain goyaservice.com to Goya Foods. The case demonstrates the effectiveness of WIPO procedures in neutralizing fraudulent email infrastructure, even when the respondent chooses to remain silent and provides no defense.
Protecting your supply chain from procurement email fraud
Impersonation domains like those used in the Goya Foods case are frequently leveraged to target your vendors with fake invoices and fraudulent purchase orders. Secure your domain portfolio and implement proactive monitoring to stop attackers before they exploit your corporate identity.
This case note is for informational purposes only and is not legal advice.
