TotalEnergies SE successfully secured the transfer of two disputed domains, fondation-totalenergies.org and totalenergies-foundation.org, through a WIPO UDRP proceeding. The sole panelist ruled that the domains, targeting the energy giant’s charitable foundation, were registered and passively held in bad faith by the respondent. Because the respondent did not reply, the panel ordered both domains to be transferred to the complainant.
Case Snapshot
| Case Number | D2026-0530 |
|---|---|
| Complainant | TotalEnergies SE |
| Respondent | aurelien houdyfrenkie caresma |
| Disputed Domain | fondation-totalenergies.orgtotalenergies-foundation.org |
| Threat Tactic | Brand Plus Keyword |
| Decision Date | 2026-04-08 |
| Panelist | Ingrīda Kariņa-Bērziņa |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-0530 |
The Exploitation of Corporate Philanthropy: Security Risks of Brand-Plus-Keyword Registrations
The strategic registration of brand-plus-keyword domains targeting corporate social responsibility (CSR) initiatives poses a severe threat to corporate reputation and customer trust. By registering domains such as fondation-totalenergies.org and totalenergies-foundation.org, unauthorized parties exploit the specific goodwill associated with a company’s charitable foundation. The use of proxy or privacy services and temporary, structured registrant email addresses indicates a deliberate attempt to conceal identity while establishing a highly convincing foundation for future deceptive activities. In the hands of malicious actors, these philanthropic identities represent prime vectors for executing fraudulent donation schemes or social engineering attacks that trade on corporate benevolence.
Furthermore, the passive holding of these domains does not diminish their potential for harm. Even when look-alike domains do not currently resolve to active fake shops or functional websites, their existence creates a persistent digital threat vector. If left unaddressed, such dormant domains can be quickly weaponized to launch email spoofing, spear-phishing campaigns, or fraudulent invoicing operations targeted at partners and employees. The mismatch between the French language used in the domains and the registrant’s listed location in Israel further underscores the anomalous and high-risk nature of these registrations. Proactive enforcement under the UDRP is critical to reclaiming these assets before actual deception or financial exploitation can be realized.
Panel Evaluation of Confusing Similarity, Legitimate Interests, and Bad Faith Passive Holding
In establishing confusing similarity under Paragraph 4(a)(i) of the UDRP Policy, the sole panelist, Ingrīda Kariņa-Bērziņa, assessed the Complainant’s registered trademark rights, including its French trademark for TOTAL filed in 1988 and its European Union registration for TOTAL ENERGIES in 2021. The disputed domain names, fondation-totalenergies.org and totalenergies-foundation.org, incorporate these marks in their entirety alongside the descriptive terms "fondation" and "foundation." Because these terms directly reference the Complainant’s philanthropic arm—the TotalEnergies Foundation, established in 1992—their inclusion does not prevent a finding of confusing similarity, but rather enhances the potential for customer and partner deception.
Regarding the second UDRP element under Paragraph 4(a)(ii), the panelist determined that the Respondent, identified as aurelien houdyfrenkie caresma, possessed no rights or legitimate interests in the disputed domain names. The Complainant confirmed it had never authorized or licensed the Respondent to use its trademarks. Furthermore, the Respondent failed to submit a formal response to the Complainant’s allegations. The panel observed that the registrations relied on privacy shields, and the underlying contact details featured temporary or fake email addresses structured as "[email protected]," further reinforcing the lack of any bona fide, legitimate business operation.
The panel’s finding of bad faith registration and use under Paragraph 4(a)(iii) centered on the doctrine of passive holding, as neither disputed domain resolved to an active website. The panelist concluded that bad faith was demonstrated by the deliberate targeting of the Complainant’s distinct corporate foundation, the use of identity anonymization shields, and a notable geographic misalignment where a French-language domain term was registered by an entity listing an address in Israel. These factors collectively indicated that the Respondent registered the domains with actual knowledge of the Complainant’s brand to exploit its corporate identity.
For brand protection professionals, this decision highlights how bad actors target corporate social responsibility and foundation assets for potential impersonation. Although the WIPO administrative record contains no evidence that active phishing email fraud, fake shops, or fraudulent invoices were deployed, the passive holding of these brand-plus-keyword domains created a severe threat vector. Proactive enforcement against such inactive foundation-themed domains is a critical defensive measure to prevent eventual social engineering schemes or unauthorized communication campaigns targeting donors and partners.
Strategic Consolidation and Evidentiary Benchmarks in Corporate Foundation Disputes
The Complainant’s strategy succeeded primarily due to a well-structured argument for consolidating the nominally different domain registrants, which prevented the Respondent from fracturing the dispute into separate proceedings. By demonstrating that both fondation-totalenergies.org and totalenergies-foundation.org were registered within a tight timeframe in September 2025, used the exact same registrar, employed a privacy shield, and targeted the same corporate social responsibility identity, the Complainant established a unified pattern of behavior. This allowed the sole panelist to treat the registrations as a single cohesive threat, streamlining the path toward a favorable transfer decision.
Furthermore, the Complainant presented a robust evidentiary record regarding bad faith that relied on the doctrine of passive holding and documented pre-complaint outreach. The Complainant proved its long-standing trademark rights dating back to 1988 and 2021, and its historical foundation established in 1992, making the Respondent’s choice of names highly implausible as a coincidence. By documenting its attempt to contact the Respondent via email on January 19, 2026, and highlighting the suspect ‘firstname+lastname’ email structure, the Complainant successfully demonstrated that the Respondent had no legitimate interests and was deliberately holding the inactive domains to exploit the Complainant’s established corporate goodwill.
Practical Recommendations
- Defensively register and secure key domain variations that combine core brand marks with CSR and philanthropic terms (such as ‘foundation’, ‘fondation’, ‘charity’, and ‘giving’) across major gTLDs to prevent bad actors from exploiting corporate social responsibility identities.
- Implement continuous digital brand monitoring that targets ‘brand-plus-keyword’ combinations and leverages MX record tracking to detect if passively held domains are being configured for email communication before active phishing or social engineering campaigns can launch.
- When confronting multiple infringing domains registered under different nominal aliases, systematically document evidence of commonalities—such as shared registrars, close registration timelines, identical email formats (e.g., ‘[email protected]’), or naming structures—to successfully petition for a consolidated WIPO UDRP proceeding and minimize legal costs.
- Establish a clear pre-litigation enforcement protocol that includes sending formal cease-and-desist letters to the email addresses behind domain privacy shields, documenting any lack of response to serve as additional evidence of bad faith in subsequent UDRP filings.
Frequently Asked Questions (FAQ)
Why were the domain names fondation-totalenergies.org and totalenergies-foundation.org considered confusingly similar to TotalEnergies’ trademarks?
The panel determined that the disputed domains fully incorporated the well-known ‘TOTAL’ and ‘TOTAL ENERGIES’ trademarks alongside descriptive terms, creating a high likelihood of confusion by misleading users into believing the domains were officially associated with the company’s charitable foundation.
How did the panel justify a finding of bad faith when the disputed domains were not hosting any active websites?
The panel applied the doctrine of passive holding, finding that the deliberate registration of domains mimicking the Complainant’s identity—combined with the use of privacy shields and lack of a legitimate business purpose—constituted bad faith usage despite the temporary absence of live content.
What evidence proved the respondent lacked legitimate rights or interests in these domain names?
The respondent failed to provide a response to the Complainant’s contentions. The panel noted that the respondent was never authorized to use the ‘TOTAL ENERGIES’ mark, and the linguistic mismatch between the domain content and the registrant’s location further suggested the absence of any legitimate interest.
What was the tactical significance of the WIPO panel’s decision to allow the consolidation of these domain registrations?
By allowing consolidation, the panel recognized that the domain names shared a common naming structure, registrar, and registration timeline, proving a unified bad-faith intent by the respondent to target the Complainant’s brand across multiple digital assets simultaneously.
Found a brand-plus-keyword impersonation domain?
Bad actors often register domains incorporating your brand and descriptive keywords like ‘foundation’ to build false credibility for social engineering or fraud. Don’t wait for these assets to be weaponized; assess your vulnerability to passive holding and proactive brand impersonation today.
This case note is for informational purposes only and is not legal advice.
