Some counterfeit operations skip marketplaces entirely and sell from standalone websites: convincing storefronts on lookalike domains, running their own checkout, keeping all the margin. Marketplace takedown tools cannot touch these sites. But domains have their own enforcement chain, registrars, registries, and hosting providers, each with abuse processes that work when you bring the right evidence. This is the playbook.
Before filing anything, identify every layer. A WHOIS lookup, using a history service if the current record is privacy-protected, reveals the registrar and the registration date. DNS records reveal the hosting provider and any CDN in front of it. The site itself reveals the payment processor at checkout. Each of these is a separate pressure point, and the strongest cases press several at once.
Document the infringement thoroughly before you start. Archive the full site, since counterfeit storefronts change quickly once they sense scrutiny. Capture the domain name itself if it is typosquatting your brand, the copied product photos and descriptions, the checkout flow, and ideally a test purchase proving counterfeit goods are actually sold. Different recipients need different slices of this evidence, so collect it all upfront.
Registrars are required to maintain abuse contact points and to act on clear evidence of illegal activity, though their responsiveness varies enormously. Your complaint should identify the domain, describe the infringement precisely, include your trademark registration details, and attach the evidence. Reference the registrar's own terms of service and acceptable use policy; registrars act fastest when the violation is framed as a breach of their own contract with the registrant.
Set expectations honestly. Some registrars suspend domains within days on solid evidence. Others, particularly budget registrars in permissive jurisdictions, stall or ignore complaints. Track response times by registrar across your cases, because that data tells you where to escalate and where to skip straight to the registry.
When the registrar will not act, the registry, the operator of the top-level domain, is the next level up. Registries intervene less often but carry more weight when they do, particularly for clear-cut counterfeiting operations. The complaint needs to be tighter: demonstrate the pattern, show the registrar's non-response, and make the case that the domain itself is an instrument of fraud.
Hosting providers are often the fastest path of all. A well-documented abuse complaint to the host, showing counterfeit sales from the hosted site, frequently gets the site suspended within days, because hosts have strong incentives to avoid liability for illegal activity on their infrastructure. Identify the actual host rather than the CDN: abuse reports sent to a CDN often get forwarded or ignored, while the origin host acts.
Taking down one domain from a professional operation usually triggers the next: operators keep backup domains registered and switch DNS within hours. Counter this by monitoring for the pattern, same site template, same product catalog, same payment details, on new domains, and filing linked complaints that reference the previous case. Ask the registrar about the registrant's other domains where policy allows; some will reveal or act on clearly linked portfolios.
The endgame is raising the operation's costs past the point of profitability. Every suspended domain, terminated hosting account, and frozen payment processor forces reinvestment. Individual takedowns are battles; the portfolio-level campaign, documented and persistent, is what wins the war.
The registrar is the company that sold the domain registration. The registry operates the top-level domain itself, like .com. The host provides the servers the website runs on. Each has separate abuse processes, and effective enforcement often involves more than one of them.
It varies widely. Responsive registrars and hosting providers can act within days on well-documented complaints. Uncooperative registrars may stall indefinitely, which is why you should pursue the registry and hosting paths in parallel rather than waiting.
Your trademark registration, a precise description of the infringement, and documentation: archived site captures, the infringing domain name itself, and ideally test purchase evidence proving counterfeit sales. Frame it as a violation of the registrar's own terms of service for the fastest response.
Monitor for the operation's fingerprints, same site template, product catalog, and payment details, on new domains and file linked complaints referencing the previous case. Ask about the registrant's other domains, and keep pressing the hosting and payment layers, which are harder to rebuild than a domain name.