Lookalike Domain Used to Impersonate Company Executive in Phishing Emails: How Brand Owners Can Seek Domain Transfer Through UDRP

Hays plc is a UK recruitment and human resources services provider that has operated since 1968. It holds multiple HAYS registered trademarks, including UK word mark UK00900005637 (registered on 19 10, 1999) and figurative mark UK00001395978 (registered on 16 10, 1992), both for services in Class 35. The disputed domain name <haysrecruiter.com> was registered on 11 8, 2026, with Squarespace Domains II LLC as the registrar.

The complaint was filed on 2 10, 2026; the proceedings commenced on 7 10, with a response deadline of 27 10. The respondent filed no response, and the Center notified the respondent of its default on 28 10, appointed Tobias Malte Müller as sole panelist the same day, and issued the decision.

Unrebutted evidence submitted by the complainant showed that the domain was used to send phishing emails impersonating its Chief Executive Officer for Asia Pacific, using the executive's name and photograph, offering fictitious job opportunities and requesting recipients' résumés and personal data.

First element: the HAYS trademark is reproduced in full in the domain name and remains clearly recognizable; the addition of the descriptive word "recruiter" does not prevent a finding of confusing similarity. The significance for businesses expanding overseas is that where a lookalike domain consists of a "trademark plus industry word," the industry word generally does not automatically sever the connection to the trademark.

The second element concerns the evidentiary structure: the complainant must first establish a prima facie case that the respondent has no rights or legitimate interests, after which the burden shifts to the respondent; the respondent filed no rebuttal and did not show that it was known by the domain name or had made preparations for bona fide use, so this element was established.

On the third element, the panel treated impersonating an executive and using phishing emails to obtain personal information as manifestly improper conduct; combined with factors including the domain's full incorporation of the trademark, the trademark rights long predating the domain registration, the respondent's false entry of "Hays Plc" in the registration information, and its use of the name of one of the complainant's recruitment consultants, the panel found bad faith and ordered the domain transferred to the complainant.

One further point in this case is noteworthy: at registration, the respondent misappropriated the complainant's name and contact details as well as those of one of the complainant's employees. On that basis, the panel redacted the respondent's name, sending only the transfer order bearing that name to the registrar as a confidential attachment, so the decision's title reads "Name Redacted".

In cases of this kind, what truly needs to be assessed first is not whether "the domain name looks similar", but whether the trademark rights basis and the evidence of use can together support the three elements: the trademark must be prior and valid with a demonstrable scope of rights, the domain name's use must be supported by capturable screenshots, emails and time records, and the facts of impersonation and phishing must be capable of showing that they point to the complainant. If the core trademark has not yet been registered in the target market, the room for asserting UDRP based solely on a domestic registration or trade name narrows noticeably—domain name enforcement often has to be assessed by returning to the trademark portfolio itself.

The procedural boundaries must also be clear: UDRP deals only with the transfer or cancellation of domain names; it does not determine infringement damages, nor does it replace trademark infringement litigation, administrative complaints or criminal reports. If the impersonation has already caused leakage of personal information or losses to clients, other remedial paths need to be assessed separately, with evidence secured at the same time.

Source: WIPO Arbitration and Mediation Center case D2026-4483, sole panelist Tobias Malte Müller, 2026 year 10 month 28 day.
Note: The content of this article is compiled from public information and is only general intellectual property popularization and practical observation, for information reference only; it does not constitute legal advice or other professional advice for any specific case, and the relevant determinations and conclusions should be subject to the official published documents and the actual circumstances of the individual case.