13 September, 2026

Managing Passive Domain Holdings and Brand-Plus-Keyword Risks

UDRP Cases

Carrefour SA successfully recovered the domain carte-carrefour.com from a respondent who engaged in the passive holding of a trademark-infringing domain. The WIPO panel ordered a transfer, finding that the respondent’s registration was in bad faith despite the lack of an active website.

Case Snapshot

Case Number D2026-3112
Complainant Carrefour SA
Respondent csqddqs, google
Disputed Domain
carte-carrefour.com
Threat Tactic Passive Holding
Decision Date 2026-09-04
Panelist Emmanuelle Ragot
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3112
UDRP Legal Assistance

Facing Unauthorized Domain Registrations or Brand Abuse?

Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.

Request Case Evaluation

Business Risks of Passive Domain Holding and Privacy Service Obstruction

The passive holding of the domain ‘carte-carrefour.com’ represents a strategic threat to brand equity by reserving a high-value, consumer-facing keyword combination without immediate operational use. While the domain remained inactive at the time of the UDRP proceeding, such ‘parked’ assets function as dormant infrastructure that can be weaponized for phishing, credential harvesting, or traffic diversion with minimal lead time. For a globally recognized retailer like Carrefour, these preemptive registrations create an ongoing vulnerability, as the lack of visible web content often delays detection by standard monitoring tools while the domain remains fully under the control of unauthorized parties.

Furthermore, the respondent’s reliance on a privacy service significantly complicated the initial phase of the recovery process by masking the registrant’s identity. This tactic imposes additional operational costs and administrative burdens on brand owners, as it necessitates registrar verification procedures to unmask the underlying actor before the formal UDRP filing can proceed. Relying solely on reactive dispute resolution processes, such as UDRP, exposes the brand to extended periods of digital exposure where legitimate consumer trust may be jeopardized. Strengthening the digital perimeter requires moving beyond post-facto recovery and integrating proactive portfolio management that accounts for common brand-plus-keyword variations before they are captured by third-party squatters.

Strategy Breakdown: Leveraging Trademark Primacy Against Passive Holding

The success of Carrefour SA in recovering the domain carte-carrefour.com hinged on a robust evidentiary alignment of its long-standing global brand reputation against the respondent’s passive holding tactic. By establishing that the CARREFOUR mark has been protected since 1968, the complainant effectively negated the respondent’s reliance on the hyphenated generic term ‘carte’ to create a false impression of legitimacy. The panel found this addition insufficient to distinguish the domain from the complainant’s well-known trademarks, confirming that even in instances where a website remains inactive, the mere registration of a brand-plus-keyword combination constitutes bad faith when targeting a recognized market leader.

From a procedural perspective, the case highlights the persistent hurdle posed by privacy services, which initially masked the registrant’s identity and necessitated a formal verification process. Despite this delay, the complainant’s strategy benefited from the respondent’s failure to mount a defense, allowing the panel to move directly to a finding of bad faith based on the notoriety of the trademark. This outcome underscores that while passive holding is often a precursor to more sophisticated threats like phishing or credential harvesting, aggressive and early-stage UDRP enforcement remains a highly effective mechanism to secure critical brand assets before they can be weaponized against consumers or corporate infrastructure.

Practical Recommendations

  • Implement automated monitoring for ‘Brand + Keyword’ combinations (e.g., [brand]-carte, [brand]-pay) to detect potentially infringing registrations early in the lifecycle.
  • Utilize the UDRP ‘passive holding’ doctrine as a proactive enforcement tool, demonstrating that well-known marks do not require active website content to establish bad faith registration.
  • Prioritize defensive registration of high-value brand-plus-keyword domains in key jurisdictions to preempt bad-faith actors who use privacy services to delay discovery.
  • Incorporate rapid WHOIS data verification into your domain enforcement playbook to mitigate the time-intensive process of piercing privacy service layers during UDRP proceedings.
  • Conduct a gap analysis of your current digital perimeter to identify and secure common service-oriented keyword pairings often targeted for future phishing or credential harvesting.

Frequently Asked Questions (FAQ)

Why was the domain ‘carte-carrefour.com’ considered confusingly similar to the CARREFOUR trademark?

The Panel determined that adding the generic term ‘carte’ (French for ‘card’) and a hyphen to the well-known CARREFOUR trademark does not prevent confusing similarity. These minor additions are considered insufficient to distinguish the domain from the Complainant’s established brand.

How did the Panel establish the Respondent’s lack of rights or legitimate interests despite the domain being inactive?

The Complainant demonstrated that the Respondent was never authorized to use the CARREFOUR mark. As the Respondent failed to file a response, they offered no evidence of a legitimate non-commercial or fair use, failing to meet any criteria under paragraph 4(c) of the Policy.

How was ‘bad faith’ proven for a domain that was not being used for an active website?

Under the doctrine of passive holding, the Panel concluded that because the CARREFOUR mark is globally renowned, the Respondent must have been aware of the trademark at the time of registration. The registration of such a clearly identifiable brand-plus-keyword domain without any active use is indicative of bad faith under the UDRP.

What business risk does this ‘passive holding’ tactic pose to retail brands?

Passive holding serves as a primary staging ground for future malicious activity, such as phishing or credential harvesting. The use of privacy services in this case specifically masked the registrant’s identity, highlighting the necessity for proactive domain monitoring to detect and recover infringements before they are weaponized.

Is someone blocking a brand domain?

Passive holding often precedes more aggressive brand impersonation. If you are seeing dormant domains capturing your trademark, evaluate your portfolio and address gaps before they become active threats.

Check recovery options

Get Expert UDRP & Domain Dispute Assistance
Request a confidential case evaluation from our domain dispute attorneys. We will review your domain situation and reply within 24 hours.

    Thank You for Your Request!
    Our legal team is reviewing your dispute details and will contact you via email shortly.
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.