Ooredoo IP LLC successfully secured the transfer of myooredoo.store from an anonymous respondent. The panel found that the domain was used to imitate the company’s official branding to deceptively attract users.
Case Snapshot
| Case Number | D2026-2074 |
|---|---|
| Complainant | Ooredoo IP LLC |
| Respondent | my ooredoo |
| Disputed Domain | myooredoo.store |
| Threat Tactic | Corporate Impersonation |
| Decision Date | 2026-07-14 |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-2074 |
Risk to Customer Trust and Brand Integrity via Impersonation
The registration of ‘myooredoo.store’ presents a significant threat to consumer trust by deliberately mimicking the Complainant’s ‘My Ooredoo’ service ecosystem. By incorporating the ‘my’ prefix—a naming convention central to Ooredoo’s legitimate digital service applications—the Respondent actively engineered a high-probability vector for user confusion. This tactic exploits the customer’s expectation of a secure, official portal, effectively directing traffic toward an unauthorized commercial interface that replicates Ooredoo’s proprietary branding and design elements. Such activities erode the perceived integrity of official support channels and jeopardize the direct, authenticated relationships the company maintains with its user base.
Furthermore, the Respondent’s use of the .store gTLD combined with the visual imitation of the OOREDOO brand represents a calculated attempt to facilitate commercial gain through deception. By resolving to a site that falsely suggests affiliation or endorsement, the Respondent undermines the Complainant’s efforts to provide a secure environment for mobile and telecommunications services. The reliance on privacy services to obscure the registrant’s identity not only hinders direct accountability but also highlights the bad-faith nature of the impersonation strategy. For brand owners, this case underscores the danger posed by deceptive domain registrations that specifically target customer-facing service extensions, necessitating proactive monitoring to defend against the dilution of brand identity and the potential compromise of customer data safety.
Legal Analysis: Establishing Infringement and Bad Faith in Domain Impersonation
In the matter of D2026-2074, the panel concluded that the disputed domain ‘myooredoo.store’ is confusingly similar to Ooredoo IP LLC’s highly distinctive ‘OOREDOO’ trademark. The addition of the ‘my’ prefix and the usage of the ‘.store’ gTLD did not serve to distinguish the domain but rather amplified the risk of consumer confusion. The panel reasoned that such naming conventions specifically evoke the Complainant’s legitimate ‘My Ooredoo’ service offerings, thereby creating a false impression of an official affiliation or endorsement that misled users seeking genuine telecommunications support.
Regarding the Complainant’s burden to prove a lack of rights or legitimate interests, the panel found the Respondent failed to provide any evidence of a bona fide offering or authorized use of the ‘OOREDOO’ mark. Because the Respondent did not respond to the contentions and held no trademark rights associated with the name, the Complainant successfully established a prima facie case. This shift in the burden of proof highlighted the Respondent’s failure to demonstrate any legitimate commercial interest in the site beyond the unauthorized appropriation of the brand’s identity.
Finally, the panel determined that the registration and use of the domain were undertaken in bad faith. The Respondent’s adoption of the Complainant’s specific branding and visual design elements, coupled with the use of a privacy service to obscure registration details, were viewed as tactical efforts to profit from brand imitation. Given the long-standing international presence of the OOREDOO brand since 1987, the panel found it implausible that the Respondent was unaware of the Complainant’s rights at the time of registration in October 2025, ultimately confirming that the domain was used to deceptively attract Internet users for commercial exploitation.
Strategic Enforcement Against Digital Impersonation
The Complainant successfully established a persuasive case by meticulously documenting the overlap between the respondent’s domain and their own legitimate digital infrastructure. By highlighting that the term ‘my’ served to specifically mirror the naming convention of their ‘My Ooredoo’ service, the Complainant effectively demonstrated that the disputed domain was designed to deceive consumers. Furthermore, the Complainant provided concrete evidence of visual brand imitation, showing that the respondent replicated their registered design marks and aesthetic elements to create a false sense of affiliation, which proved instrumental in satisfying the panel regarding bad faith registration.
From a business perspective, the strategy prioritized the protection of customer trust by focusing on the danger posed to official support channels. By leveraging their extensive history of trademark use since 1987, the Complainant underscored the implausibility of the respondent’s unauthorized activities. The inclusion of the .store gTLD was framed as a direct attempt to facilitate commercial exploitation of the Ooredoo brand. This multifaceted approach, combining legal standing in telecommunications service classes with evidence of deceptive digital interface design, ensured the panel reached a clear finding of bad faith, leading to the successful transfer of the disputed domain.
Practical Recommendations
- Proactively monitor gTLDs like .store for ‘My [Brand]’ naming patterns, as these are frequently used by bad actors to mimic legitimate digital service portals.
- Document and archive visual branding assets (logos, color schemes, and layout) on official sites to serve as evidentiary support for demonstrating ‘confusingly similar’ design mimicry in UDRP filings.
- Implement a defensive registration strategy for common brand extensions, specifically those that align with user-facing service prefixes such as ‘my-‘ to mitigate typosquatting and impersonation risks.
- Utilize domain monitoring tools to identify registrations that leverage privacy services, as these are often primary indicators of bad faith intent in the early stages of a domain’s lifecycle.
- Standardize the evidence collection process for UDRP complaints by capturing screenshots of the full website user experience, not just the homepage, to prove the deceptive commercial intent of the respondent.
Frequently Asked Questions (FAQ)
Why was the domain ‘myooredoo.store’ considered confusingly similar to Ooredoo’s trademark?
The panel determined that the domain incorporates the OOREDOO trademark in its entirety. Furthermore, the addition of the prefix ‘my’ created a direct association with the Complainant’s legitimate ‘My Ooredoo’ services, which likely causes public confusion regarding the source or affiliation of the website.
What evidence established that the respondent lacked legitimate interests in the disputed domain?
The respondent failed to provide any evidence of rights or legitimate interests. The Complainant successfully established a prima facie case showing that the respondent was not authorized or licensed to use the OOREDOO mark and made no bona fide use of the site, shifting the burden of proof which the respondent failed to meet.
How did the panel conclude that the respondent acted in bad faith?
Bad faith was demonstrated by the respondent’s intentional imitation of the Complainant’s visual branding and design elements on a commercial website. The timing of the registration—long after the Complainant had established its global brand—combined with the use of a privacy service to hide their identity, confirmed a clear intent to deceptively attract users for commercial gain.
What was the practical outcome and key business takeaway from this WIPO decision?
The WIPO panel ordered the transfer of ‘myooredoo.store’ to the Complainant. The case highlights the critical risk of brand dilution and customer distrust caused by actors using the .store gTLD to mimic official digital customer interfaces, necessitating proactive monitoring of domains that replicate established ‘My [Brand]’ service naming conventions.
Facing Corporate Impersonation through a domain?
Is your brand being leveraged to deceive customers through look-alike portals? We can help you assess the risks and determine if a UDRP filing is the right path to recover your digital assets.
This case note is for informational purposes only and is not legal advice.
