15 July, 2026

Protecting the Atacadão Brand from Unauthorized Passive Holding

UDRP Cases

The WIPO panel ordered the transfer of superatacadao.shop to the Complainants, Atacadão S.A. and Carrefour SA. The domain was found to be confusingly similar to the Complainants’ trademarks and used in bad faith, despite the domain being inactive at the time of the decision.

Case Snapshot

Case Number D2026-1756
Complainant Atacadão S.A.Carrefour SA
Respondent Vania luamar
Disputed Domain
superatacadao.shop
Threat Tactic Passive Holding
Decision Date 2026-06-12
Panelist Mario Soerensen Garcia
OutcomeTransfer
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-1756

Operational and Reputational Risks of Passive Domain Holding

The registration of ‘superatacadao.shop’ underscores a recurring business risk wherein bad-faith actors secure look-alike domains to exploit the established goodwill of the ATACADAO and ATACADÃO brands. Although the disputed domain was inactive at the time of the WIPO decision, passive holding remains a significant threat to corporate IP portfolios. By occupying a domain that is confusingly similar to a recognized trademark, a registrant effectively curtails the brand owner’s ability to control their digital presence, creating a latent vector for future unauthorized use, traffic diversion, or potential harm to consumer trust should the domain be activated for deceptive purposes.

Furthermore, the procedural discrepancies noted during the registrar verification phase—where the registrant information provided in the complaint conflicted with records held by NameCheap—illustrate the operational challenges of enforcing brand rights against anonymous or inaccurate domain data. This lack of transparency, coupled with the Respondent’s minimalist behavior, complicates enforcement efforts and necessitates proactive monitoring of similar typosquatting variants. For brand owners, such cases highlight the necessity of robust domain enforcement strategies that address not only active exploitation but also the preemptive threat posed by parked domains that obscure ownership and lack legitimate commercial purpose.

Strategic Breakdown: Addressing Passive Holding and Registrar Discrepancies

The Complainants successfully leveraged a clear, tiered strategy that neutralized the Respondent’s minimalist defense. By proactively establishing their long-standing trademark portfolio—dating back to 1978 for the ATACADÃO mark—the Complainants demonstrated clear, preemptive rights over the disputed domain. Even in the absence of active website content or clear evidence of commercial use, the Complainants effectively argued that the Respondent’s passive holding of the domain was an attempt to capitalize on the established goodwill of the ATACADÃO brand. The Respondent’s failure to provide a substantive defense, offering only a single character response, further supported the Panel’s conclusion regarding the lack of legitimate interests and the bad faith nature of the registration.

The case also highlights the procedural utility of thorough registrar verification. By identifying discrepancies between the registrant information initially provided in the complaint and the data held by NameCheap, the Complainants underscored the potential for obfuscation tactics. This procedural friction did not hinder the case; instead, it helped illustrate the Respondent’s lack of transparent business intent. For brand owners, this case reinforces that passive holding remains a viable target for UDRP intervention when the domain structure mirrors protected marks, regardless of whether the site is currently inactive. The Panel’s focus on the timing of trademark registration relative to domain acquisition remains the primary mechanism for securing a transfer.

Practical Recommendations

  • Monitor for domain registration discrepancies by proactively auditing WHOIS data against the records held by registrars immediately upon identifying a suspicious domain, as these discrepancies can be critical evidence in establishing bad faith.
  • Utilize passive holding as a basis for UDRP filings even when the domain is inactive; the lack of a legitimate business website, combined with brand similarity, is sufficient to establish a lack of rights or legitimate interests under the UDRP.
  • Treat minimal or non-substantive responses from respondents (such as a single character or punctuation) as an admission of lack of legitimate interest, and include these communications as evidence to support a finding of bad faith intent.
  • Implement a proactive defensive registration strategy for common typosquatting variations of core brand assets to reduce the attack surface available to bad-faith actors.
  • Consolidate intellectual property rights across all entities (such as holding companies and subsidiaries) prior to filing to ensure the UDRP complaint reflects the full scope of the brand’s global trademark portfolio and standing.

Frequently Asked Questions (FAQ)

Why was the domain ‘superatacadao.shop’ considered confusingly similar to the complainant’s trademarks?

The panel determined that the disputed domain incorporates the well-known ‘ATACADAO’ trademark in its entirety, coupled with the prefix ‘super’, which creates a high likelihood of consumer confusion regarding an affiliation with the Atacadão S.A. and Carrefour SA retail operations.

How did the respondent attempt to justify their ownership of the domain?

The respondent failed to provide a substantive defense. When contacted during the proceedings, the respondent merely replied with a ‘?’ symbol, offering no evidence of legitimate rights or interests, which contributed to the panel’s finding of bad faith.

Does the fact that ‘superatacadao.shop’ was inactive at the time of the decision prevent a finding of bad faith?

No. Under the principle of ‘passive holding’, the panel concluded that the respondent registered the domain to capitalize on the complainant’s goodwill. The absence of active use did not preclude a finding of bad faith, as the respondent demonstrated no demonstrable preparations for a legitimate business use.

What procedural complications arose regarding the respondent’s contact information?

Registrar verification from NameCheap revealed significant discrepancies between the registrant details provided in the initial complaint and the records held by the registrar, highlighting a broader operational risk regarding inaccurate WHOIS or registration data used to obscure identity.

Is someone blocking a brand domain?

Even inactive domains can pose significant security risks or indicate bad-faith squatting. Learn how to identify and recover assets held in bad faith, as seen in the Atacadão case, before they are weaponized.

Check recovery options

Contact us
We will find the best solution for your business

    Thank you for your request!
    We will contact you within 5 hours!
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.