{
    "case_number": "CAC-UDRP-102687",
    "time_of_filling": "2019-10-16 18:16:01",
    "domain_names": [
        "umgconnect-umusic.com"
    ],
    "case_administrator": "Šárka Glasslová (Case admin)",
    "complainant": [
        "UMG Recordings, Inc.",
        "Universal Music Group Holdings, Inc."
    ],
    "complainant_representative": "RiskIQ, Inc. c\/o Jonathan Matkowsky",
    "respondent": [
        "Ian  "
    ],
    "respondent_representative": null,
    "factual_background": "The Complainant UMG Holdings is the parent company of the Complainant UMG. Both belong to the same common corporate structure, the Universal Music Group, which trades under the \"UMG\" name. Both Complainants have a common interest that is affected by the Respondent's conduct. Furthermore, UMG Holdings and UMG each own the relevant rights, and for many years its respective predecessors-in-interest and licensees have continuously used and are currently using the UMUSIC and UMG marks relied on for purposes of standing in this proceeding. Both Complainants are further referred to as the \"Complainant\".\r\n\r\nThe Complainant is the world leader in music-based entertainment, with a broad array of businesses engaged in recorded music, music publishing, merchandising and audio-visual content in more than 60 countries. Featuring the most comprehensive catalogue of recordings and songs across every musical genre, UMG identifies and develops artists and produces and distributes the most critically acclaimed and commercially successful music in the world. Committed to artistry, innovation and entrepreneurship, UMG fosters the development of services, platforms and business models to broaden artistic and commercial opportunities for its artists and creates new experiences for fans.\r\n\r\nThe Complainant states that there are about one hundred and eighty-three thousand Google search results for \"umusic experience\" and all of the results on the first page relate to the services of Complainant. There are thousands of references to Complainant's UMUSIC EXPERIENCE goods and services on websites other than Complainant's UMUSIC Experience Site. By 2018, the Complainant alleges to have already supported over four hundred artists across the U.S., promoted more than three thousand five-hundred tour dates and reached students on more than three hundred college and university campuses.\r\n\r\nFor many years, Complainant has continuously used, and is currently using UMG and UMUSIC, both standing alone and as the dominant element in composite marks such as UMUSICHD and UMUSIC EXPERIENCE. Complainant's UMG and UMUSIC Marks have become associated exclusively with the Complainant and its goods and services. Consumers have come to rely on these marks to identify Complainant's goods and services and to distinguish them from the goods and services of others.\r\n\r\nComplainant maintains a digital \"sign-in\" page for its authorised users on its <umgconnect.umusic.com> domain name, which was first registered in 1997 (\"SSO Domain\").\r\n\r\nThe disputed domain name was created on 8 January 2019. In February 2019, the Complainant notified an abuse point of contact (POC) responsible for hosting some of the cyber infrastructure connected to the disputed domain name that there were specific indicators that the infrastructure was set up specifically to support harmful cyber activity (i.e., exfiltration of personal data and sensitive credentials). The Complainant requested an investigation. A few days later, the disputed domain name no longer existed in the Domain Name System (DNS), and the abuse POC stated that the customer disconnected the disputed domain name. The Respondent still has control over the disputed domain name to re-connect it to the DNS, and the Complainant has to continuously monitor its status given the harm that may result from the Respondent attempting to spoof the Complainant's SSO Domain to exfiltrate personal data and sensitive credentials of its authorised users. The Complainant further states that the disputed domain name was being used before it was disconnected from the DNS to set up hostnames on a malicious IP (e.g., auth.umgconnect-umusic.com) for harmful cyber operations as part of activity that depends on social engineering and technical subterfuge to spoof single sign-on (SSO) access or a Security Token Service (STS) key component to exfiltrate personal data and sensitive credentials.\r\n\r\nOn 3 October 2019, the Registrar of the disputed domain name (PUBLIDOMAINREGISTRY.COM) confirmed the Respondent as the current holder of the disputed domain name and also confirmed that the language of the registration agreement is English.",
    "other_legal_proceedings": "The Panel is not aware of any other pending or decided legal proceedings that relate to the disputed domain name.",
    "no_response_filed": "NO ADMINISTRATIVELY COMPLIANT RESPONSE HAS BEEN FILED.\r\n\r\nThe Complainant made the following contentions: \r\n\r\nWith respect to identical or similar domain name, the Complainant asserts that the disputed domain name incorporates the entirety or a dominant feature of both Complainant's UMG and UMUSIC Marks. Each is recognizable within the disputed domain name. The Respondent added the descriptive word \"connect\" to the UMG Mark (the \"UMG Component\") and separated the UMG Component from the UMUSIC Mark with a hyphen. The legacy gTLD \"COM\" is immaterial to the analysis as it has no distinguishing capabilities under the first element of the Policy. The disputed domain name is substantially indistinguishable from the Complainant's SSO Domain. Adding a second trademark belonging to Complainant to one of Complainant's marks does not negate the confusing similarity between the disputed domain name and each of the marks standing alone, but only reinforces the association with Complainant.\r\n\r\nRegarding Respondent's rights or legitimate interests, the Complainant argues that not only is the Respondent not commonly known by the disputed domain name (as evidenced by the registrar verification response), but the Complainant has not authorized, licensed, or otherwise permitted the Respondent to use any of its marks. The Respondent has no legitimate interest in creating a domain name that is substantially indistinguishable from the Complainant's sign-in page. It capitalizes on the reputation and goodwill of the UMG and UMUSIC Marks to mislead Internet users. The Respondent also has no legitimate interest in re-connecting the disputed domain name to the DNS or passively holding on to it once it was disconnected. The Respondent has no legitimate interest in having used or in attempting to re-use the disputed domain name for cyber infrastructure, including as hostnames, needed to carry out harmful cyber activity, specifically that relies on such social engineering and technical subterfuge to spoof single sign-on (SSO) access or a Security Token Service (STS) key component to exfiltrate personal data and sensitive credentials.\r\n\r\nTurning to the bad faith argument, the Complainant asserts that the disputed domain name was registered in bad-faith for Web SSO phishing activity on 18 January 2019 — well after the UMG and UMUSIC Marks became associated with the Complainant's goods and services. The disputed domain name was used as part of setting up harmful cyber infrastructure, specifically creating various hostnames on the disputed domain, which was then connected in the DNS to a server along with other maliciously registered domains to be used for Web SSO phishing. By using the disputed domain name as part of its cyber infrastructure to support SSO-phishing activity in this way, the Respondent intentionally attempted to attract, for commercial gain, Internet users to the Respondent's server used for SSO-phishing, by creating a likelihood of mistake as to the source of the Respondent's hostnames created on the disputed domain name and connected to its server. Based on the evidence that the Respondent used the disputed domain name as part of its cyber infrastructure to support SSO-phishing activity, the Respondent has registered and used the disputed domain name in bad faith. The Complainant contends that it is well-established that none-use currently of the disputed domain name does not prevent a finding of bad faith under the doctrine of passive holding. Finally, the fact that the Respondent has not to the Complainant's knowledge attempted to re-connect the disputed domain name to the DNS, and that it is presently inactive, suggests that the Respondent, who was certainly aware of the Complainant's rights as evidenced by the combination of both the UMG and UMUSIC Marks belonging to the Complainant in one domain name that is substantially indistinguishable from the Complainant's SSO Domain, could not think of any use of the disputed domain name that would not be an attempt to profit from the deliberate attempt to confuse the Complainant's authorized users.\r\n",
    "rights": "The Complainant has, to the satisfaction of the Panel, shown the disputed domain name is identical or confusingly similar to a trademark or service mark in which the Complainant has rights (within the meaning of paragraph 4(a)(i) of the Policy).",
    "no_rights_or_legitimate_interests": "The Complainant has, to the satisfaction of the Panel, shown the Respondent to have no rights or legitimate interests in respect of the disputed domain name (within the meaning of paragraph 4(a)(ii) of the Policy).",
    "bad_faith": "The Complainant has, to the satisfaction of the Panel, shown the disputed domain name has been registered and is being used in bad faith (within the meaning of paragraph 4(a)(iii) of the Policy).",
    "procedural_factors": "It has been established that the Rules for Uniform Domain Name Dispute Resolution Policy allow consolidation of multiple domain name disputes and that it is generally possible for multiple complainants to bring a complaint against a single respondent. Circumstances that typically allow for such consolidation are (i) that the multiple complainants have a specific common grievance against the respondent, or the respondent has engaged in common conduct that has affected the complainants in a similar fashion, and (ii) that it would be equitable and procedurally efficient to permit the consolidation (see 4.11.1 of WIPO Overview 3.0). The Panel finds that both the Complainant UMG Holdings and the Complainant UMG have common grievance against the Respondent, that the Respondent engaged in common conduct that has affected both Complainants in a similar fashion, and that it would be equitable and procedurally efficient to permit the consolidation.\r\n\r\nThe Panel is therefore satisfied that all procedural requirements under UDRP were met and there is no other reason why it would be inappropriate to provide a decision.\r\n",
    "decision": "Accepted",
    "panelists": [
        "Mgr. Vojtěch Chloupek"
    ],
    "date_of_panel_decision": "2019-12-10 00:00:00",
    "informal_english_translation": "The Complainant Universal Music Group Holdings, Inc. (\"UMG Holdings\") submitted evidence that it is the registered owner of the following trademark registrations:\r\n\r\n(i) U.S. trademark registration No. 5,165,973 for UMG in standard characters covering a wide range of music-and-entertainment related services in class 41, registered on 21 March 2017 and used as a mark since 1996.\r\n\r\nThe Complainant UMG Recordings, Inc. (\"UMG\") submitted evidence that it is the registered owner of the following trademark registrations:\r\n\r\n(i) U.S. trademark registration No. 2,589,720 for UMG SOUNDTRACKS (illustration drawing) covering a wide range of music-and-entertainment related goods and services in classes 9 and 41, registered on 2 July 2002 and used as a mark since 2001; and\r\n\r\n(ii) U.S. trademark registration No. 4452500 for UMUSICHD (illustration drawing) covering music-and-entertainment related services in class 41, registered on 17 December 2013 and used as a mark since 2012.\r\n\r\nIn addition to the registered trademarks, the Complainant further submits that it owns common law rights in UMUSIC EXPERIENCE covering its goods and services related to bringing today's hottest artists and industry execs to college students.",
    "decision_domains": {
        "UMGCONNECT-UMUSIC.COM": "TRANSFERRED"
    },
    "panelist": null,
    "panellists_text": null
}