01 The challenge
Five cloned storefronts appeared on domains similar to the brand's own, using its site content to take customer orders. After the first reports, the sites began restricting access by country, so a site could look removed from one location while still live elsewhere.
02 The approach
Verify each clone
Each storefront was compared with the genuine site, and the visible abuse was captured before anything was filed.
Map the infrastructure together
For all five domains we mapped the registrar, DNS, host and CDN, the country restrictions and the paths still reachable, and treated them as one campaign rather than five separate reports.
File once, with the full picture
One consolidated case went to each abuse desk able to act, with the brand's authorisation letter, company registration, VAT proof, trademark material and a police complaint.
Confirm from several locations
Removal was re-tested from multiple locations to see past the geo-restriction before the case was closed.
03 The outcome
All five cloned storefront domains were confirmed offline after the consolidated registrar and abuse filing. No duration is stated: each provider sets its own removal time.
Service used
Fake page & counterfeit removal