When a domain mirrors your brand: what it costs to be wrong
The answer, in short
A domain that copies your name, logo, or product line is rarely a coincidence. Left unanswered, it collects your traffic, your customer complaints, and sometimes your customers' payment details. The registrar will not act on your say-so alone. You need a documented trade mark right, a fixed timeline, and — where goods are physically moving — a customs filing that stops shipments at the border before the case is even decided.
Basis
Where the brand at stake is registered as an EU trade mark, the relevant framework is Regulation (EU) 2017/1001 (EUTMR). It sets out what counts as an infringing sign and gives the proprietor standing to act across the Union on a single registration, rather than country by country.
Where the mirrored domain is used to move counterfeit or diverted goods rather than merely to imitate a website, a second instrument becomes relevant: Regulation (EU) No 608/2013. It lets a rights holder lodge an application with customs authorities, so that suspect consignments are held at the border rather than reaching the market first and being disputed later.
Practical consequence
Two clocks start the moment the mirror site is discovered, and they do not run on the same track. The first is evidentiary: screenshots, WHOIS records, and traffic patterns degrade in value the longer they sit unpreserved. The second is commercial: every day the domain stays live, it is indexed by search engines, linked by affiliates, and possibly used to harvest payment data under your brand name.
A delay of a few weeks rarely closes the door to a remedy outright. It does change what is available. Interim measures depend on urgency, and a registrar or hosting provider asked to act six months after discovery will ask, reasonably, why nobody raised it sooner.
What to do
- Preserve the evidence first. Capture the domain's content, WHOIS or RDAP data, and any linked storefronts before the operator has a chance to alter or take them down.
- Confirm the registration base. Your counsel checks whether the mark is registered, in what classes, and in which territory — an EU trade mark, a national mark, or both.
- Send a formal notice. A cease-and-desist letter to the domain holder, host, and registrar, referencing the registered mark, sets the clock running on a documented response.
- Consider the goods question separately. If the mirror site sells physical goods under your mark, a customs application under Regulation (EU) No 608/2013 can be filed in parallel, independent of the domain dispute.
- Escalate through the correct forum. Depending on the registry involved, this may mean a UDRP-style administrative complaint, a national court filing, or both, chosen with your counsel based on where the harm is concentrated.
- Monitor for repeat behaviour. A single takedown rarely ends a pattern; keep a record for any repeat filing, since prior conduct is itself evidence.
Who decides
| Forum | What it hears | Typical timeframe |
|---|---|---|
| Domain registry dispute panel | Bad-faith registration and use of the disputed domain name | Weeks, once the complaint is filed and answered |
| National court | Trade mark infringement, damages, and injunctive relief | Months, longer if contested on the merits |
| Customs authority | Applications to intercept suspect goods at the border | Border action can begin once the application is granted; each shipment is then a separate, fast-moving event |
Which forum applies first depends on what the mirror site is actually doing: imitating your presence, or moving goods under your name. The two are not mutually exclusive, and often run at the same time.
Forks
If the mirror site is operated by someone you already have a commercial relationship with — a reseller, distributor, or supplier who has overstepped their licence — the dispute is not a stranger's cybersquatting; it is a contract problem wearing a domain-name mask. When a supplier is accused of infringing a third party's rights, the remedy usually starts in the contract, not in a domain complaint.
If the mirrored pages republish your product copy through automated rewriting tools, the question of who is liable for the output — the operator, the tool provider, or nobody — is not settled by the domain dispute at all. When the contract is silent on AI output: what follows depends on agreements the mirror operator may or may not have signed with their own suppliers.
If the site is not selling counterfeit goods at all, but instead distributing a branded token to users who never asked for it, the framework shifts again. When a token is airdropped to existing users: what matters then is issuance and disclosure obligations, not trade mark enforcement alone.
Predel — what this page does not decide
This page does not tell you whether your specific mark is registered strongly enough to win a given proceeding, nor how a particular registrar's dispute policy will treat borderline bad faith. Those depend on the registration record and the registry rules in force, and they are assessed case by case, not by category.
Sources and limit
Checked: current version of the acts referenced below, as published on the official EU legislation portal. Applicable national implementing measures are not addressed on this page and should be confirmed separately.
- Regulation (EU) 2017/1001 (EUTMR)
- Regulation (EU) No 608/2013
Where the dispute also touches an asset located in a specific member state, the underlying registry data is a separate question from the trade mark claim itself; see Asset in Slovakia and the deadline for what a registry search there can and cannot establish.
FAQ
What is the first step when a domain mirrors your brand?
Preserve the evidence before anything else. Capture the site's content, ownership records, and any linked payment or storefront pages while they are still live, then confirm your own registration position before sending a notice.
Which deadline is already running?
The evidentiary clock starts the day the mirror is discovered, since content and ownership records can change or disappear. Any interim relief also becomes harder to obtain the longer the operator is left undisturbed, so early action preserves both.
Who decides, and on what evidence?
A domain dispute panel decides bad-faith registration and use, based on the registered mark and the timeline of the domain's conduct. A national court decides infringement and damages. A customs authority decides border interception, based on the application and the goods actually moving.
Related publications
When the mark has not been used for years covers a related risk: a registration weakened by disuse is harder to enforce against any mirror, however clear the copying looks.
Closing note
A mirrored domain rarely resolves itself, and the options narrow the longer it is left alone. Confirm your registration, preserve what the site shows today, and choose the forum that matches what the domain is actually doing — imitation, sales, or both.