5 May, 2026

WIPO Orders Transfer of Typosquatting Domain eriscson.com to Ericsson

UDRP Cases

Telefonaktiebolaget LM Ericsson successfully secured the transfer of the domain eriscson.com in a WIPO UDRP decision. The panelist found that the respondent, James Nicole, registered the domain—a deliberate typosquatted misspelling of Ericsson’s registered mark—in bad faith and held it passively behind a privacy service. Because the respondent had no rights or legitimate interests, the domain was ordered transferred to the complainant.

Case Snapshot

Case Number D2025-5204
Complainant Telefonaktiebolaget LM Ericsson
Respondent James Nicole
Disputed Domain
eriscson.com
Threat Tactic Typo Domains
Decision Date 2026-01-30
Panelist John C. McElwaine
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2025-5204

Exploitation of Typographical Vulnerabilities: Commercial Traffic Diversion and Latent Corporate Impersonation Risks

The registration of eriscson.com illustrates how bad actors exploit common typing mistakes to intercept legitimate user traffic. By transposing the letters ‘s’ and ‘c’ in the famous ERICSSON trademark, the respondent targeted the typographical errors naturally made by customers, partners, and employees seeking the Swedish telecommunications leader. This typosquatting tactic threatens brand integrity by diverting organic traffic away from official corporate channels. Even when such a domain is passively held—resolving only to a standard registrar parking page indicating pending WhoIs verification—the third-party control of a highly confusing misspelling disrupts the exclusive digital pathway between a brand and its stakeholders.

While the case record contains no evidence of active phishing campaigns or direct financial harm originating from eriscson.com, the passive holding of a typographical variant presents an ongoing security risk. Unauthorized domains mimicking core corporate identities are frequently weaponized in subsequent email-based social engineering schemes, corporate impersonation, or credential harvesting. The respondent’s use of a registrar privacy service to shield their identity, combined with their complete failure to respond to Ericsson’s pre-litigation cease-and-desist letters, underscores the bad-faith positioning of the asset. This pattern of evasion forces brand owners to incur substantial administrative and legal expenses to proactively neutralize defensive vulnerabilities before they escalate into active cyber threats.

Evidentiary Foundations and Bad Faith Inference in Typosquatting Disputes

The Complainant’s strategy succeeded by leveraging its long-standing trademark rights, specifically citing global registrations such as the U.S. Trademark Registration No. 1,313,196, which dates back to January 8, 1985. This extensive trademark history established a strong baseline of fame, making the Respondent’s selection of the domain name ‘eriscson.com’—which features a deliberate transposition of the letters ‘s’ and ‘c’—appear highly targeted. By framing this character transposition as a classic typosquatting tactic, the Complainant successfully argued that the domain was registered with the sole intent of catching mistyped user traffic, satisfying the confusing similarity test under the first element of the UDRP.

Furthermore, the Complainant bolstered its case by establishing bad faith through a combination of passive holding and non-responsiveness. The Complainant documented that the Respondent registered the domain using a privacy service, ignored formal pre-suit cease-and-desist letters, and held the domain passively with a page indicating that WhoIs verification was pending. By invoking established passive holding principles alongside evidence of the Respondent’s total silence, the Complainant enabled the panelist to draw adverse inferences regarding the Respondent’s lack of legitimate interests. This comprehensive approach demonstrated that active online fraud or documented phishing attempts are not prerequisites for a transfer when dealing with the passive registration of a highly recognizable global brand.

Practical Recommendations

  • Establish proactive defensive monitoring and domain acquisition strategies targeting character-transposition typosquatting of core global marks (e.g., switching the ‘s’ and ‘c’ as seen in ‘eriscson.com’) before they can be utilized for malicious traffic diversion or corporate impersonation.
  • Formally issue documented cease-and-desist letters prior to launching UDRP filings; even if ignored, the respondent’s failure to reply serves as vital supplemental evidence to demonstrate bad faith registration and use to the panel.
  • Do not delay enforcement against passively held domain names resolving to empty ‘WHOIS pending’ or parked pages, as panels routinely apply the passive holding doctrine to famous marks when the respondent has no logical association with the trademark.
  • Utilize the UDRP filing process strategically to compel registrar unmasking of registrants operating behind privacy and proxy services, ensuring that the actual identity and geographic location of the cybersquatter are formally recorded in the public panel decision.

Frequently Asked Questions (FAQ)

Why did the WIPO panel determine that the domain ‘eriscson.com’ was confusingly similar to Ericsson’s trademark?

The panel concluded that ‘eriscson.com’ is a deliberate typosquatted variation of the famous ‘ERICSSON’ mark. By simply transposing two letters, the respondent created a domain likely to cause confusion among users who mistype the brand name, which is a recognized tactic to exploit the complainant’s established global reputation.

What evidence proved the respondent lacked rights or legitimate interests in the disputed domain?

The respondent had no demonstrable connection to the term ‘eriscson’ and failed to provide any evidence of a bona fide offering of goods or services. Additionally, the respondent initially obscured their identity behind a privacy service, and the domain resolved only to a parking page stating that WhoIs verification was pending, further demonstrating a lack of legitimate use.

How was bad faith established given that the domain was not actively used for a website?

The panel applied the doctrine of ‘passive holding,’ noting that the respondent’s failure to respond to cease-and-desist letters and the use of a privacy service to hide their identity were strong indicators of bad faith. Registering a domain that mimics a world-famous mark, even without active content, constitutes opportunistic bad faith under the UDRP.

What is the primary business risk associated with this type of typosquatting?

Typosquatting risks include the diversion of legitimate customer traffic and potential exposure to future corporate impersonation or social engineering attacks. By reclaiming ‘eriscson.com,’ Ericsson mitigates the risk that the domain could be repurposed for phishing or unauthorized communications that could damage the brand’s integrity.

Need to recover a look-alike domain?

Don’t let typographical variations of your trademark dilute your brand equity or facilitate future impersonation attacks. Our UDRP monitoring and enforcement specialists can help you identify and reclaim high-risk typosquatting domains quickly and effectively.

Start domain recovery

Contact us
We will find the best solution for your business

    Thank you for your request!
    We will contact you within 5 hours!
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.