Bulgari S.p.A successfully recovered the domain bvulgari.xyz from respondent Samurai Hinato through a WIPO UDRP filing. The panel ordered the transfer after finding that the registrant engaged in typosquatting and corporate impersonation to deceptively mimic the Complainant’s hotel services.
Case Snapshot
| Case Number | D2026-3472 |
|---|---|
| Complainant | Bulgari S.p.A |
| Respondent | Samurai Hinato |
| Disputed Domain | bvulgari.xyz |
| Threat Tactic | Typo Domains |
| Decision Date | 2026-09-16 |
| Panelist | Yuri Chumak |
| Outcome | Transfer |
| Official Source | https://www.wipo.int/amc/en/domains/search/text.jsp?case=D2026-3472 |
Facing Unauthorized Domain Registrations or Brand Abuse?
Our domain dispute attorneys represent trademark owners and businesses worldwide before WIPO, Forum (NAF), and CAC. Explore our Domain Name Disputes and Enforcement & Takedowns services, or request a free case evaluation.
Request Case EvaluationBusiness and Reputation Risks in Typosquatting and Impersonation
The registration of ‘bvulgari.xyz’ exemplifies a high-risk typosquatting tactic designed to erode customer trust and divert traffic from the Complainant’s legitimate digital properties. By deliberately incorporating a misspelled variation of the established BVLGARI and BULGARI trademarks, the Respondent created a deceptive gateway aimed at consumers seeking genuine resort and accommodation services. This alignment with the Complainant’s known brand architecture, specifically mimicking the identity of its Dubai resort, poses a significant threat of brand dilution and consumer confusion. Such unauthorized use forces the Complainant to expend resources monitoring and litigating against bad-faith actors who leverage brand prestige to potentially harvest sensitive user information or divert commercial revenue.
The tactical deactivation of the domain prior to the filing of the UDRP complaint reflects a common but ineffective attempt to evade accountability. While the domain ceased resolving to an active website during the legal proceedings, this defensive maneuver failed to mask the initial malicious intent or prevent the panel from ordering a transfer. For brand owners, this case underscores that the mere removal of content does not absolve a registrant of prior bad-faith usage. Furthermore, the Respondent’s total lack of response throughout the WIPO proceedings serves as a tacit admission that they possessed no legitimate interests in the domain. Relying on passive holding or temporary site deactivation remains an inadequate strategy for registrants, while for brand owners, it serves as a reminder that proactive enforcement via UDRP remains a vital mechanism for securing brand integrity against transient, fraudulent infrastructure.
Panel Reasoning: The Intersection of Typosquatting and Bad Faith Tactics
The panel determined that the disputed domain name ‘bvulgari.xyz’ is confusingly similar to the Complainant’s established BULGARI and BVLGARI trademarks. By simply inserting an additional letter into the mark, the respondent engaged in a clear pattern of typosquatting. Under UDRP jurisprudence, such minor alterations do not mitigate the inherent risk of consumer confusion but instead reinforce the finding that the domain is designed to mimic a legitimate brand asset.
Regarding rights or legitimate interests, the record confirms the respondent lacked any authorization or license to utilize the Complainant’s marks. Furthermore, the respondent failed to provide any evidence that they were commonly known by the domain name or engaged in a bona fide offering of goods and services. The previous use of the domain to masquerade as the Complainant’s Dubai resort serves as definitive proof that the registration was intended to deceive users rather than pursue a legitimate noncommercial or fair use.
The panel concluded that the domain was both registered and used in bad faith, noting that the Complainant’s trademark rights significantly predate the 2026 registration of the domain. The respondent’s deliberate selection of a misspelled version of the mark to promote hotel services confirms an intent to target the Complainant for commercial gain. Crucially, the panel held that the subsequent deactivation of the domain does not negate the finding of bad faith, as the initial use of the site to impersonate the brand constitutes sufficient grounds for a transfer order.
Finally, the respondent’s failure to submit a response to the complaint facilitated a default decision. By choosing not to contest the allegations, the respondent left the Complainant’s evidence of brand impersonation and typosquatting unchallenged. This outcome serves as a reminder to IP professionals that passive holding or the deactivation of a malicious site post-complaint remains an ineffective strategy for preventing the transfer of domain names found to be in violation of the UDRP policy.
Strategic Efficacy in UDRP Typosquatting Claims
The Complainant’s strategy succeeded by leveraging clear, well-documented trademark history against the Respondent’s overt pattern of typosquatting. By establishing that the mark ‘BVLGARI’ had been registered since 1980, the Complainant created a strong chronological anchor that predated the disputed domain’s creation in 2026. The persuasive core of the argument relied on the simple technical fact that the disputed domain ‘bvulgari.xyz’ added only a single letter to the protected mark, a hallmark of consumer deception. This evidence allowed the panel to easily establish confusing similarity and confirm that the domain was explicitly designed to mimic the brand’s existing digital infrastructure, such as ‘bulgarihotels.com’, to facilitate impersonation of the Complainant’s Dubai resort services.
Furthermore, the Complainant effectively neutralized the potential defense of ‘deactivation’ by framing the status of the domain at the time of filing not as a cessation of bad faith, but as a tactical withdrawal following the threat of legal action. By providing evidence of the Respondent’s previous use of the domain to host a site masquerading as a legitimate business, the Complainant demonstrated that bad faith registration and use were already firmly established. The Respondent’s failure to participate in the proceedings resulted in a default, which the panel accepted as a tacit admission of the Complainant’s allegations. This outcome highlights that attempting to obscure infringement through site deactivation is an ineffective strategy that fails to provide a shield against UDRP transfer orders.
Practical Recommendations
- Archive all evidence of a domain’s past content via screenshots and third-party tools immediately upon detection, as panels acknowledge bad faith even if the site is deactivated after a complaint is filed.
- Proactively monitor domain registration databases for misspellings of primary brand marks, specifically targeting high-risk TLDs where impersonation of luxury or service-based offerings is prevalent.
- Draft UDRP complaints to explicitly highlight that typosquatting serves no purpose other than to deceive consumers, undermining any potential claims of ‘legitimate interest’ by the respondent.
- Standardize the inclusion of your official primary domains (e.g., brand.com, brandhotels.com) in every UDRP submission to clearly establish the baseline for ‘confusing similarity’ and brand-consistent digital presence.
Frequently Asked Questions (FAQ)
Why was ‘bvulgari.xyz’ considered confusingly similar to the Complainant’s trademarks?
The panel determined the domain name is confusingly similar because it uses a clear typosquatting tactic—inserting an extra letter into the established ‘BULGARI’ and ‘BVLGARI’ marks, which does not diminish the likelihood of consumer confusion.
How did the Respondent fail to establish rights or legitimate interests in the domain?
The Respondent failed to provide any response to the allegations. Evidence showed they were not authorized to use the Complainant’s marks and used the site to impersonate the Complainant’s hotel services, which does not constitute a bona fide or legitimate use.
Was the deactivation of the domain effective in preventing a transfer of ownership?
No. The panel rejected the idea that deactivating the site absolves the registrant of liability. Because the domain was initially registered and used to impersonate Bulgari’s resort services for commercial gain, the subsequent deactivation did not negate the finding of bad faith.
What is the primary risk for respondents who do not reply to UDRP proceedings?
In this case, the Respondent’s silence functioned as an admission of the Complainant’s claims. By failing to offer a defense, the Respondent essentially guaranteed a default transfer of the domain to Bulgari S.p.A.
Recover Look-Alike Domains Before They Impact Your Brand
As demonstrated in the Bulgari case, typosquatting is a clear violation of UDRP policy. Don’t wait for a malicious actor to impersonate your services—identify and recover deceptive domains early to protect your customer trust.
This case note is for informational purposes only and is not legal advice.
