A registrar sells and administers domain registrations under accreditation from the relevant registry. Because they control the registration itself rather than the content, a registrar suspension removes the whole domain, not one page, which makes them the most decisive layer to reach when a case justifies it.
That decisiveness cuts both ways. Suspending a domain is disproportionate for a single infringing page on an otherwise legitimate site, and registrars know it, so they apply a higher evidentiary bar than a hosting provider would. Reports that ask for suspension without demonstrating that the domain exists for the abuse tend to be declined.
Registration data is often shielded. Privacy and proxy services replace the registrant's details in public records, so identifying who is behind a domain usually goes through the registrar's own abuse process rather than a public lookup.
When a registrar does not respond, the escalation path runs upward: the registry operating the top-level domain, and above that the accreditation body. Both are slower, and both are more effective as leverage than as a first stop.
How Fraudox handles it
Scam domain takedown