Byoma Limited successfully recovered 25 domains registered by a third party that were used to impersonate the brand, harvest sensitive customer data, and divert traffic. The WIPO panel ordered the transfer of all domains, citing bad faith and lack of legitimate interests.
Case Snapshot
| Case Number | D2026-2895 |
|---|---|
| Complainant | Byoma Limited |
| Respondent | 陈 晓A Lou JhnnyAustin ConroyBrian ThompsonBrooklyn AlexanderCourt lightDamon PrescottGene RishiMa YueNatalie BennettRichard MitchellSan Domingotg swff, gtggswwTODD LEONARD |
| Disputed Domain | buybyoma.shopbyama.shopbyomaan.shopbyomaashop.combyomaashop.onlinebyomaau.shopbyomacare.shopbyomaca.shopbyomadirect.shopbyomadiscount.shopbyomaen.shopbyomae.shopbyomalips.shopbyoman.shopbyomaskincares.shopbyomaskin.shopbyomastore.shopbyomauk.shopbyommasell.combyuma.shopgetbyoma.shoplovebyoma.shopmybyoma.shopthebyoma.shopukbyoma.shop |
| Threat Tactic | Fake Stores |
| Decision Date | 2026-09-14 |
| Panelist | Mathias Lilleengen |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-2895 |
Facing Unauthorized Domain Registrations or Brand Abuse?
Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.
Request Case EvaluationOperational and Reputational Risks of Large-Scale Domain Impersonation
The registration of 25 domain names by the respondent between March and June 2026 demonstrates a coordinated effort to capitalize on the BYOMA brand through a hybrid strategy of fake storefronts and typosquatting. By mimicking the complainant’s branding and soliciting sensitive user data, these sites posed a direct threat to customer trust and brand equity. The unauthorized use of the BYOMA trademark, coupled with the activation of mail exchange (MX) records, indicates that the respondent’s activities extended beyond simple traffic diversion into potential phishing or data harvesting operations. This creates significant liability exposure for the brand owner, as consumers may be inadvertently directed to fraudulent platforms under the impression that they are engaging with an official retail channel.
The evolution of these domains from active, consumer-facing shops to passive holding pages underscores a persistent challenge in digital enforcement. While the transition to error or blocking pages may appear to mitigate immediate harm, such status shifts are often tactical maneuvers designed to evade detection or complicate legal proceedings. The panel’s decision highlights that the respondent’s pattern of conduct—moving between active impersonation and passive holding—constitutes bad faith under UDRP standards. For brand holders, this necessitates an aggressive, multi-domain monitoring approach to address both overt fraud and the lingering risk of future domain weaponization, particularly when bad actors employ high-volume registrations to dilute trademark presence and exhaust security resources.
Panel Analysis: Assessing Confusion, Legitimate Interests, and Bad Faith
The Panel determined that the 25 disputed domains exhibit clear confusing similarity with the BYOMA trademark. By integrating the mark in its entirety with geographic indicators, industry-specific terms, or deliberate misspellings—such as ‘byommasell.com’ and ‘byama.shop’—the Respondents failed to establish any distinct identity. The Panel noted that the inclusion of these descriptive terms serves only to reinforce the intended association with the Complainant’s skincare services, thereby confirming the likelihood of consumer confusion.
Regarding rights or legitimate interests, the Respondents provided no evidence of authorization, trademark ownership, or any bona fide offering of goods or services. The Complainant’s extensive market presence and established trademark rights further underscore the Respondents’ inability to demonstrate a legitimate basis for using the BYOMA mark. The lack of any license or connection between the parties confirms that the domains were not intended for any use that would qualify for protection under UDRP policy.
The evidence of bad faith was solidified by the Respondents’ active efforts to mimic the Complainant’s branding and solicit sensitive user data through the websites. The activation of mail exchange (MX) records provided additional proof of malicious intent. Furthermore, the Panel affirmed that the current state of the domains, whether serving as error pages or residing in passive holding, does not shield the Respondents from liability. Under the doctrine of passive holding, the initial patterns of abusive registration and impersonation remain fully actionable as evidence of bad faith.
This case illustrates the critical importance of addressing high-volume domain infringements as a unified strategy. By establishing a pattern of abusive registration, the Complainant successfully demonstrated that the Respondent group sought to capitalize on the brand’s USD 500 million in cumulative sales. The outcome emphasizes that even as fraudulent actors rotate domains from active ‘fake shops’ to inactive status, complainants can successfully leverage WIPO proceedings to reclaim multiple assets and mitigate risks associated with data harvesting and brand dilution.
Strategic Enforcement Against High-Volume Impersonation Tactics
Byoma Limited’s strategy effectively leveraged the comprehensive nature of its intellectual property portfolio to secure a swift transfer of 25 infringing domains. By establishing its market dominance—highlighting USD 500 million in sales and a robust international retail presence at major outlets like Sephora and Target—the brand demonstrated that the respondent’s registrations were not coincidental, but rather a coordinated effort to capitalize on established consumer recognition. The evidence presented, particularly the respondent’s use of brand-plus-keyword configurations and deliberate typosquatting, underscored a clear pattern of abusive registrations intended to create deceptive associations with the complainant’s legitimate goods.
The persuasiveness of the case rested on the complainant’s ability to document the respondent’s shift from active impersonation to passive holding. By showing that the websites had previously solicited sensitive user data, the complainant successfully framed the domains as high-risk assets, effectively neutralizing any respondent claims to legitimate interests. The inclusion of technical evidence, such as the activation of mail exchange (MX) records on the disputed sites, further bolstered the claim of bad faith. This multifaceted approach provided the panel with sufficient evidence to apply the doctrine of passive holding, confirming that the cessation of active use did not absolve the respondent of liability for the underlying malicious intent.
Practical Recommendations
- Implement proactive brand monitoring for high-frequency domain registrations using ‘BYOMA’ combined with common geographic or descriptive modifiers (e.g., ‘shop’, ‘direct’, ‘discount’).
- Preserve time-stamped evidence of ‘fake shop’ active usage, including screenshots of branding mimicry and requests for sensitive user data, to strengthen bad faith arguments even if sites transition to passive holding.
- Utilize consolidated UDRP filings for batch recovery to achieve cost-efficiency when addressing patterns of abusive registrations linked to the same or related respondents.
- Monitor MX (mail exchange) records as a key indicator of intent to commit fraud or phishing, and include this technical evidence in future UDRP complaints to solidify findings of bad faith use.
- Integrate automated threat intelligence to identify and report domains transitioning from active shops to passive holding, preventing potential re-purposing for future brand impersonation campaigns.
Frequently Asked Questions (FAQ)
Why did the panel consider domains like ‘buybyoma.shop’ and ‘byomastore.shop’ confusingly similar to the BYOMA trademark?
The panel ruled that the addition of descriptive terms such as ‘buy’, ‘store’, or geographical indicators to the BYOMA trademark does not mitigate confusion. Instead, these additions were found to be deliberate attempts to create a false association with the Complainant’s established skincare brand.
How did the panel conclude that the respondent lacked legitimate rights or interests in these 25 domain names?
The Complainant provided evidence that the Respondent held no trademark rights to the term ‘BYOMA’ and had never received authorization or a license to use the brand. Furthermore, there was no indication that the Respondent was making a bona fide or legitimate noncommercial use of the domains.
Was the respondent’s practice of ‘passive holding’ sufficient to avoid a finding of bad faith?
No. Although many of the domains were in a state of ‘passive holding’ or resolving to error pages at the time of the decision, the panel applied the UDRP doctrine of passive holding. This, combined with evidence of prior active use for fraudulent impersonation and sensitive data harvesting, clearly supported a finding of bad faith.
What evidence was most critical in proving the respondent’s bad faith in this case?
The most critical evidence was the active impersonation of the BYOMA brand, including the use of logos and the solicitation of sensitive customer data on the websites. Additionally, the panel noted a clear pattern of abusive registration targeting the BYOMA trademark across all 25 domains.
Found a fake shop using your brand?
Large-scale impersonation campaigns can harvest sensitive customer data and damage your reputation. Our team specializes in UDRP strategy to help you neutralize fraudulent storefronts and recover infringing domains efficiently.
This case note is for informational purposes only and is not legal advice.
