Cyber Attack

WIPO CASE N. D2018-2286 “GIARDINIBLOG.COM” AND “GIARDINIBLOG.NET”. A CASE OF DOMAIN NAME THEFT

On December 20th, 2018 the sole Panelist Willem J. H. Leppnick, appointed by WIPO Arbitration and Mediation Center, ruled in favor of a domain name owner Stark S.r.l.s. (the Complainant) represented by WebLegal Studio Legale Associato, victim of a domain name theft in respect of “giardiniblog.com” and “giardiniblog.net”. The Respondent’s conduct can be assimilated to racketeering due to the extortion of a considerable amount of money (in this case to be paid in Bitcoins) made to the legitimate owner of the domain name.

While the first domain name “giardiniblog.com” was registered and actively used by the Complainant since 2009 to provide enriched hi-tech articles on IT (software and devices), the latter one was created by the Respondent on 2018, immediately after hacking of the first domain name, therefore – according to art. 4 (b) (i) UDRP –  “primarily for the purpose of selling, renting, or otherwise transferring the domain name registration to the Complainant.”.

The domain names, once registered, become private property of the registrant. As private property, they can be stolen or misappropriated just like any other kind of property. The attempt to steel or misappropriate domain names is defined “domain hijacking” or “domain spoofing”, which according to Wikipedia can be defined as an attempt to transfer ownership or control of a domain from its rightful owner. Domain hijacking often involves a fraudulent registrar transfer request or otherwise false change the registration of a domain. The “victim” of this sort of activity is the legitimate domain name owner.

Cases of domain names spoof are unfortunately common nowadays, whether UDRP – designed to resolve disputes on abusive domain names registrations – may be an effective remedy against these conducts has always been an open question. ICANN, as well as many authors, warned on the possibility to rely on UDRP, provided the Complainant is subject to a particularly heavy burden of proof in order to satisfy each and any of UDRP prongs, namely if the disputed domain name is not accompanied by strong trademark rights, which could negatively impact on the standing requirement.

On the basis of recent developments of UDRP case-law¹, Complainant asked WIPO Panels the transfer of the domain name, relying on unregistered trademark rights over the long-established and intense usage of the “giardiniblog” domain name. The Complainant provided, upon request of the same Panel, evidence of the acquired distinctive character of the service mark which consumers associate with the complainant’s goods and services, according to WIPO Jurisprudential Overview 3.0 at paragraph 1.3.

For what it concerns the second UDRP prong, the Respondent failed in offering any kind of evidence proving its right or legitimate interest in the Domain Names as requested by the Policy². None of these cases were proven and therefore the Panelist founded his decision on the fact, as previously stated by other two UDRP panels (i.e. “Pomellato S.p.A. v. Richard Tonetti, WIPO Case No. D2000-0493” and “GA Modefine S.A. and Giorgio Armani S.p.A. v. Yoon-Min Yang, WIPO Case No. D2005-0090)³ that “non-response is indicative of a lack of interests inconsistent with an attitude of ownership and a belief in the lawfulness of one’s own rights”.

For what it concerns the third element and, in particular, the “registration in bad faith”, the Panelist found that the registration date concerning the domain “giardinblog.com” has been fulfilled the same day the domain name in object was stolen, as demonstrated by the Complainant. The registration of the second disputed domain name “giardiniblog.net” (a completely new domain name) made by the Respondent has taken place in the same day as well.

In both cases, reminding the characteristics of a case of domain name hijacking, the registration has been realized without the knowledge or consent of the Complainant. As a consequence of Respondent’s conduct, the Panelist ruled in favor of the Complainant by finding that the Domain Names were registered in bad faith.

With respect to “bad faith use”, the Panelist, basing on the evidences filed by the Complainant in its Complaint, found that the Respondent has used false information in acquiring the Domain Names. Moreover the Respondent attempted to sell the same Domain Names, for an exorbitant amount of money to the Complainant. The Respondent’s conduct clearly is part of the hypothesis provided by article 4 (b) (i) ⁴.

Having satisfied all UDRP requirements, the Panel ordered both domain names to be transferred to Complainant. The present decision consolidates WebLegal’s practice in UDRP and domain names disputes, also with regards to Complainants and trademark owners.

by Domenico Piero Muscillo.

READ THE DECISION

 

¹ See UDRP cases D2016-2354 “Bayer AG v. Whois Agent, Whois Privacy Protection Service, Inc. / Syed Hussain, IBN7 Media Group”, D2016-2130 “Mou Limited v. IT Manager, Jack Zhang”and D2016-2000 “Autodesk, Inc. v. Bayram Fatih Aksoy

² “the use or preparation to use the Domain Names or a name corresponding to the Domain Names in connection with a bona fide offering of goods or services prior to notice of the dispute;  or by proving the fact that is  commonly known by the Domain Names (as an individual, business or other organization) even in the case any trademark or service mark rights has been acquired;  or demonstrating the making of legitimate noncommercial or fair use of the Domain Names, without intent for commercial gain to misleadingly divert consumers or to tarnish the trademark or service mark at issue.”.

³ In particular in GA Modefine S.A. and Giorgio Armani S.p.A. v. Yoon-Min Yang, WIPO Case No. D2005-0090 the Panelist referred to a previous decision “Pomellato S.p.A. v. Richard Tonetti, WIPO Case No. D2000-0493” where it was stated that “According to earlier decisions (see Pomellato S.p.A. v. Richard Tonetti, WIPO Case No. D2000-0493) “non-response is indicative of a lack of interests inconsistent with an attitude of ownership and a belief in the lawfulness of one’s own rights.

⁴ circumstances indicating that you have registered or you have acquired the domain name primarily for the purpose of selling, renting, or otherwise transferring the domain name registration to the complainant who is the owner of the trademark or service mark or to a competitor of that complainant, for valuable consideration in excess of your documented out-of-pocket costs directly related to the domain name.”.

 

WordPress Video Lightbox
Cerca