5 May, 2026

How a Double-Brand Domain Exploited Defensive Portfolio Gaps at Sanofi

UDRP Cases

The multinational pharmaceutical company Sanofi successfully secured the cancellation of the disputed domain name sanofisupport-sanofi.com. A WIPO panel ruled that the Respondent’s registration of the domain—which duplicated the SANOFI mark alongside the word ‘support’—was executed in bad faith. Despite the domain resolving to an inactive page, the panel ordered its cancellation due to the distinctive nature of the trademark and lack of legitimate respondent rights.

Case Snapshot

Case Number D2025-5151
Complainant Sanofi
Respondent Yogatraining 2025, sanofiind
Disputed Domain
sanofisupport-sanofi.com
Threat Tactic Brand Plus Keyword
Decision Date 2026-02-03
Panelist Dilek Zeybel
OutcomeCancellation
Official Source https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2025-5151

Exploitation of Defensive Portfolio Gaps and Impersonation Risks via Brand-Plus-Keyword Tactics

Even organizations with extensive domain portfolios remain vulnerable to specialized registration tactics that target adjacent operational terms. Sanofi maintained a defensive registry across major global and country-code top-level domains, including sanofi.com, sanofi.eu, sanofi.fr, and sanofi.us. Despite these safeguards, the registration of sanofisupport-sanofi.com exposes a critical gap where bad-faith actors combine a highly distinctive trademark with service-oriented keywords. While the disputed domain remained inactive and there was no documented evidence of active phishing, fraudulent emails, or direct extortion attempts, the passive holding of a double-brand permutation creates a latent corporate threat that can be weaponized at any moment.

The inclusion of operational keywords like ‘support’ alongside a repeated trademark directly threatens consumer trust and brand integrity. In the pharmaceutical sector, where Sanofi operates across more than 180 countries, terms associated with customer assistance or helpdesks carry high trust equity. A domain containing ‘support’ is highly susceptible to being used in corporate impersonation schemes or unauthorized customer service channels. Even in the absence of documented customer complaints or actual confusion, the structural design of such a domain poses an immediate threat to user security, as it mimics an official repository for sensitive communication, patient interaction, or technical inquiries.

Additionally, the use of registrar privacy services to mask the identities of bad-faith registrants imposes an ongoing administrative and financial burden on brand owners. In this case, the true registrant behind the privacy shield was only unmasked as Yogatraining 2025, sanofiind, after a formal verification request was sent to Tucows Domains Inc. during the WIPO proceeding. This tactical deployment of proxy services means that corporate legal teams must continuously monitor domain registration databases. Relying solely on standard brand-name registrations is insufficient, necessitating proactive enforcement to discover, unmask, and neutralize deceptive brand-plus-keyword permutations before they transition from passive holding to active fraud.

Strategic Application of WIPO Overview 3.0 on Mark Repetition and Passive Holding

The Complainant’s strategy succeeded by directly addressing the structural complexity of the disputed domain name, sanofisupport-sanofi.com, which incorporates the SANOFI trademark twice alongside the hyphenated descriptive term ‘support’. Rather than allowing the complex structure to dilute the brand’s identity, the Complainant successfully invoked WIPO Overview 3.0 sections 1.7 and 1.8. The Panel accepted the argument that duplicating a highly distinctive trademark and surrounding it with operational keywords does not prevent a finding of confusing similarity. This framework provides IP professionals with a clear precedent for overcoming complex brand-plus-keyword variations that bad-faith actors use to bypass standard automated detection systems.

Furthermore, the Complainant effectively navigated the challenge of passive holding. Because the disputed domain resolved to an inactive webpage, proving active bad faith use required demonstrating that the Respondent could not have registered the domain for any legitimate purpose. The Complainant established its extensive global footprint, citing operations in over 180 countries and consolidated net sales of EUR 43 billion in 2022, to prove that the SANOFI mark is highly distinctive and internationally famous. The Panel ruled that the passive holding of such a well-known mark, combined with the unmasking of a privacy service to reveal a respondent named ‘Yogatraining 2025, sanofiind’ who lacked authorization or business relationships with Sanofi, established bad faith registration and use under the Policy.

Practical Recommendations

  • Conduct a targeted domain portfolio gap analysis that goes beyond standard TLD and ccTLD defensive registrations to proactively secure high-risk operational keyword combinations (e.g., ‘[brand]support’ or ‘support-[brand]’) which are prime targets for customer-facing corporate impersonation.
  • Deploy advanced domain-monitoring algorithms designed to detect double-brand structures and hyphenated permutations (such as ‘[brand]keyword-[brand].com’) rather than relying purely on exact-match or single-term typographic sweeps.
  • Initiate UDRP actions promptly against passively held domains containing famous or highly distinctive trademarks, leveraging the consensus view under WIPO Overview 3.0 that passive holding of such marks constitutes bad faith use even in the absence of an active website, operational email servers, or public phishing evidence.
  • Establish standardized procedural workflows with registrar verification systems to rapidly unmask registrants hiding behind privacy proxy services (such as those used at Tucows) immediately upon detecting high-risk, brand-plus-keyword domain registrations.

Frequently Asked Questions (FAQ)

Why was the domain name ‘sanofisupport-sanofi.com’ found to be confusingly similar to Sanofi’s trademark?

The WIPO panel determined that the domain is confusingly similar because it incorporates the highly distinctive SANOFI trademark twice. The inclusion of the descriptive term ‘support’ does not mitigate the risk of confusion, as the overall composition remains tied directly to the complainant’s brand identity.

How did the panel establish that the respondent lacked rights or legitimate interests?

The panel concluded that the respondent had no authorization to use the SANOFI mark and held no business relationship with the complainant. Furthermore, the respondent failed to present any evidence of legitimate use, leading to the finding that the registration was unauthorized and illegitimate.

If the disputed domain was inactive, how did the panel prove bad faith registration?

Under the UDRP, the ‘passive holding’ of a highly distinctive and famous trademark constitutes bad faith. Even though the domain resolved to an inactive webpage, the panel found that the registration of such a recognizable trademark, combined with the lack of any legitimate purpose, satisfied the requirement for bad faith registration and use.

What does this case highlight regarding brand protection and domain portfolio gaps?

This case underscores that even organizations with extensive domain portfolios can remain vulnerable to ‘brand-plus-keyword’ tactics. Bad-faith actors often target combinations like ‘support’ to impersonate official channels, making it essential for brands to monitor for and secure secondary variations to prevent exploitation.

Found a brand-plus-keyword impersonation domain?

Keywords like ‘support’ attached to your brand name are often used to create deceptive infrastructure. Don’t wait for these domains to be weaponized; protect your digital perimeter with a proactive UDRP assessment.

Assess brand threat

Contact us
We will find the best solution for your business

    Thank you for your request!
    We will contact you within 5 hours!
    Image
    This site uses cookies to improve your experience. By continuing, you agree to our Privacy Policy.

    Privacy settings

    When you visit websites, they may store or retrieve data in your browser. This storage is often required for basic website functionality. Storage may be used for marketing, analytics and site personalization purposes, such as storing your preferences. Privacy is important to us, so you can disable certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may affect the performance of the website.

    Manage settings


    Necessary

    Always active

    These cookies are necessary for the website to function and cannot be disabled in our systems. They are usually only set in response to actions you take that constitute a request for services, such as adjusting your privacy settings, logging in, or filling out forms. You can set your browser to block these cookies or notify you about them, but some parts of the site will not work. These cookies do not store any personal information.

    Marketing

    These elements are used to show you advertising that is more relevant to you and your interests. They can also be used to limit the number of ad views and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the permission of the site operator.

    Personalization

    These elements allow the website to remember your choices (such as your username, language or region you are in) and provide enhanced, more personalized features. For example, a website may provide you with local weather forecasts or traffic news by storing data about your current location.

    Analytics

    These elements help the website operator understand how their website works, how visitors interact with the site and whether there may be technical problems. This type of storage usually does not collect information that identifies the visitor.