5 May, 2026

Kyndryl Secures kandryl.com Following Malicious Redirection to Gambling Sites

UDRP Cases

Kyndryl, Inc. successfully recovered the domain <kandryl.com> from an individual respondent who used the typosquatted name to redirect traffic to gambling websites. The panel found the single-letter variation was a clear attempt to exploit the KYNDRYL trademark for commercial gain, ordering a full transfer of the domain.

Case Snapshot

Case Number D2026-0439
Complainant Kyndryl, Inc.
Respondent qiao xue
Disputed Domain
kandryl.com
Threat Tactic Typo Domains
Decision Date 2026-04-07
Panelist James Wang
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-0439

Commercial and Reputational Risks of Typosquatting

The registration of <kandryl.com> creates an immediate risk to the brand integrity of Kyndryl, Inc. by associating its professional IT infrastructure services with unauthorized gambling and third-party applications. As a provider of mission-critical cloud and AI solutions, the Complainant relies on a reputation for security and professional trust. The redirection of potential clients to high-risk digital environments through a single-letter typo—substituting ‘a’ for ‘y’—directly contradicts the brand’s market positioning. This tactic exploits phonetic and keyboard-entry errors to capture users who intended to reach the official ‘kyndryl.com’ domain, exposing enterprise clients to content that diminishes the perceived trustworthiness of the corporate identity.

Beyond immediate reputational harm, this case illustrates a persistent commercial threat where bad-faith actors monetize diverted traffic for third-party gain. The Panel found that the Respondent’s use of the domain to host gambling links constituted a clear intent to profit from the KYNDRYL trademark’s established goodwill under Policy paragraph 4(b)(iv). The business implication is twofold: a loss of legitimate web traffic for the Complainant and the creation of a digital risk for its customer base. Furthermore, the record indicates that Kyndryl and its affiliates have initiated multiple UDRP proceedings for the KYNDRYL mark, suggesting the brand is a recurring target for typosquatting operations that necessitate continuous enforcement.

The Respondent’s failure to reply to communication from the Complainant’s agent in January 2026, followed by their default in the formal UDRP proceeding, highlights the difficulty in resolving these threats through informal channels. For IP professionals, this underscores the necessity of formal dispute resolution when dealing with respondents who utilize trademark exploitation for unrelated revenue streams. The commercial exploitation through third-party app promotion demonstrates how typosquatted domains function as parasitic conduits, capturing the value of a brand’s marketing spend and digital presence without offering any legitimate service.

Procedural Efficiency and Bad Faith Exploitation Evidence

Kyndryl’s successful recovery of the <kandryl.com> domain was underpinned by a decisive procedural strategy that addressed language barriers and respondent silence. Although the registration agreement was in Chinese, the Complainant successfully requested that English be the language of the proceeding, citing fairness and the Respondent’s failure to comment on the request. By documenting an unanswered communication sent by their agent in January 2026, the Complainant effectively demonstrated the Respondent’s lack of interest in defending the registration. This proactive record of attempted contact, followed by the Respondent’s default in the formal UDRP process, allowed the Panel to draw adverse inferences regarding the Respondent’s lack of rights or legitimate interests in the KYNDRYL mark.

The persuasive weight of the case rested on the clear evidence of typosquatting and subsequent monetization through high-risk digital content. The Complainant demonstrated that <kandryl.com> was a visually similar variation of the KYNDRYL mark, utilizing a single-letter substitution designed to capture users making common typographical errors. The business risk was quantified by the Respondent’s use of the domain to host links for third-party applications and gambling services. This specific use case enabled the Panel to find bad faith under Policy paragraph 4(b)(iv), as it proved an intent to attract Internet users for commercial gain by creating a likelihood of confusion. The association of a B2B IT infrastructure brand with unauthorized gambling platforms provided the necessary evidence of trademark exploitation to justify an immediate transfer.

Practical Recommendations

  • Conduct proactive monitoring for ‘vowel-swap’ typosquatting variants (e.g., substituting ‘a’ for ‘y’) and common keyboard adjacencies to prevent traffic diversion to high-risk gambling sites.
  • Document and submit evidence of the specific nature of redirected content—such as gambling or third-party app stores—to satisfy Policy paragraph 4(b)(iv) regarding commercial gain through trademark exploitation.
  • Maintain a record of non-responsive pre-complaint communications; even if the respondent defaults, the attempt to reach out strengthens the case for bad faith during the UDRP process.
  • Request English as the language of the proceeding when the respondent is silent and the site uses international scripts or redirects, which can save significant time and translation costs regardless of the registration agreement language.
  • Leverage prior UDRP successes in the complaint to establish the trademark’s reputation and demonstrate a pattern of third-party exploitation of the specific brand name.

Frequently Asked Questions (FAQ)

Why was the domain <kandryl.com> considered confusingly similar to the Kyndryl brand?

The WIPO panel determined that <kandryl.com> is confusingly similar to the KYNDRYL mark because it employs a subtle single-letter substitution, replacing the ‘y’ with an ‘a’, which is a classic typosquatting tactic designed to deceive users who make minor typographical errors.

What evidence proved the respondent acted in bad faith?

Bad faith was established by the fact that the disputed domain redirected traffic to third-party applications and gambling websites. The panel concluded this was a deliberate attempt to exploit the Kyndryl trademark for commercial gain, meeting the criteria under UDRP paragraph 4(b)(iv).

How did the respondent’s silence impact the outcome of this case?

The respondent failed to file a response to the complaint or comment on the language of the proceeding. This total lack of engagement allowed the panel to rule based solely on the evidence provided by Kyndryl, Inc., and enabled the proceeding to be conducted in English despite the initial Chinese registration agreement.

What business risks were associated with the respondent’s use of this domain?

Beyond traffic diversion, the primary risk was the unauthorized association of the Kyndryl professional IT infrastructure brand with high-risk gambling platforms, which threatened to damage the company’s reputation and expose potential B2B clients to unsafe digital environments.

Recovering from Typosquatted Domains

Similar to the Kyndryl case, attackers often rely on subtle, single-letter typos to divert traffic to malicious content like gambling sites. If you have identified look-alike domains targeting your brand, we can help you assess your UDRP eligibility to secure a transfer.

Start domain recovery

Contact us
We will find the best solution for your business

    Thank you for your request!
    We will contact you within 5 hours!
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.