Continuous monitoring · Evidence-led takedown · Sector-specific SLAs

A brand worth building deserves a brand worth defending.

Brand Protection is the umbrella programme of 78 OVER 37 LIMITED. We monitor every channel where your brand can be impersonated — domains, search, social, marketplaces, mobile apps — and we remove the abuse with the same evidence discipline our specialist takedown brands apply to one-off cases. Continuous defence, executive-level reporting, predictable cost.

5monitored channels
<24hmedian first outage
96%closure on confirmed abuse
24/7incident response
Receipt · hosting takedown Email from a hosting provider's abuse desk confirming that the abusive account has been suspended after a brand-protection takedown request.
An actual outcome: a hosting provider's abuse desk confirming that the abusive account targeting our client's brand has been suspended. We measure ourselves on closures like this — not on dashboards.
The five pillars

Brand abuse does not live in one place. Neither does our defence.

I

Domain & web

Continuous monitoring of new domain registrations matching your brand patterns across major gTLDs, ccTLDs and certificate-transparency feeds. Phishing portals, lookalike domains, fake support sites, fake refund pages and impersonating microsites — detected, evidenced and submitted to the registrar abuse desk before they reach the customer's inbox.

II

Search & SEO

Daily SERP snapshots for your brand, executive names and high-value product queries across Google, Bing, DuckDuckGo and YouTube. Removal of parasite-SEO pages, fake review farms, brand-keyword ad redirection and structured-data spoofing in SERPs. Search-engine spam and impersonation reports filed with the same forensic pack we send registrars.

III

Social & messaging

Fake brand profiles, executive impersonation accounts, Telegram-channel scams, customer-support impersonator accounts and coordinated review-bombing networks. We work with platform-trust teams under their authenticity, harassment and intellectual-property frameworks.

IV

Marketplaces & counterfeits

Counterfeit and unauthorised listings on Amazon, eBay, AliExpress, Etsy, regional marketplaces and unauthorised-distributor networks. Test-purchase coordination where required, listing removal under the relevant marketplace IP-protection programme, and seller-account suspension follow-through.

V

Mobile apps & advertising

Fake mobile-app clones in Google Play, Apple App Store and third-party Android stores, and brand-impersonating ads on search and social ad networks. App-store policy reports, ad-network safety escalations and (where applicable) certificate-revocation requests for repackaged apps.

VI

Threat intelligence & reporting

Monthly executive reporting with the metrics that actually matter: campaign volume, dwell time, time to first outage, time to last outage, jurisdictional patterns, attacker fingerprints. The board sees a defensible posture; the SOC sees actionable feeds.

The programme

How a brand-protection engagement runs

i

Onboarding & threat surface mapping

We document your brand assets, executive names, product lines, regulated-industry constraints and known threat patterns. From there, we define monitoring scope, escalation contacts, abuse-handling SLAs and (where applicable) regulatory notification flows.

ii

Continuous detection

Multi-channel monitoring runs continuously across the five pillars. The detection layer is automation-heavy; the judgement layer is human. Signals that don't reach an action threshold sit in the intelligence pile rather than burning your cycles with noise.

iii

Evidence capture

Every confirmed signal is captured to forensic standard: hashed, time-anchored screenshots, source HTML, redirection chains, WHOIS, DNS, certificate transparency, marketplace-listing snapshots, ad-network metadata. Stored in immutable archives, indexed by case.

iv

Coordinated removal

Parallel outreach to host, registrar, registry, platform trust-and-safety, marketplace IP-protection, ad-network safety, app-store review and (where relevant) payment processor. We don't wait for sequential responses; the campaign experiences pressure on every channel at once.

v

Re-emergence monitoring & campaign exit

Most operators have backup infrastructure. We track new domains, new accounts, new listings, new ad creatives and re-engage abuse channels until the operator's cost of running the campaign exceeds its return.

vi

Reporting & review

Monthly executive briefing with metrics, top campaigns, dwell-time trends and recommended posture changes. Quarterly programme review to retune scope, SLAs and detection thresholds.

Browser warning marking a brand-impersonating domain as 'Suspected Malware', shown across browser tabs in a working investigator's environment.
What downstream visitors see while a brand-impersonating domain is on the block list. Browser-level intervention is usually our fastest channel — measured in minutes, not days.
Threat detection systems table for a brand-impersonating broker domain, with Cloudflare DNS, Quad9 and DNS4EU all sinkholing it as malicious.
Resolver-level outcome: Cloudflare DNS, Quad9 and DNS4EU sinkholing a brand-impersonating broker domain after our coordinated outreach.
Sectors we serve

Brand-protection economics differ by industry. So does the programme.

Financial services & payments

Phishing economics scale with conversion-to-cash speed; banking and payments brands need browser-blocking SLAs measured in minutes and forensic-grade evidence ready for AML and regulator referrals from day one.

E-commerce & marketplaces

Counterfeit listings, refund-page impersonation, fake support hotlines, shipping-tracker scams. Test-purchase coordination, marketplace IP-programme work and bulk listing removal scaled to product-line breadth.

Crypto, fintech & trading

Wallet drainers, fake exchange withdrawal portals, cloned trading dashboards, romance-investment funnels, fake airdrops. We work with browser safe-browsing partners, wallet-blocklist operators and chain-analytics partners to disrupt the cash-out side of the kill chain.

Pharma, healthcare & consumer goods

Counterfeit medication, fake clinical-trial recruitment portals, impersonating regulatory-claim websites. Chain-of-custody discipline that lets you escalate to MHRA, FDA and equivalent authorities with admissible evidence.

Software, SaaS & gaming

Cracked-software bundles weaponised as malware loaders, fake sign-up portals collecting credentials, fake customer-support hotlines, account-recovery scams. Coordinated removal across host, app store, ad network and (for repackaged apps) certificate authority.

Public sector & regulated industries

Fake government-rebate portals, fake tax pages, fake utility-bill scams, fake driving-licence and visa-application sites. Parallel coordination with the relevant national CERT and regulatory authority alongside the standard takedown chain.

Why this programme

Detection without disruption is theatre. We do both.

One programme, every channel

Most vendors are strong in one or two pillars and outsource the rest, often without telling you. Brand Protection is built so that the same case manager owns a case from a fake mobile app to a phishing typosquat to a counterfeit marketplace listing.

Forensic chain of custody

Every artefact hashed, time-anchored and immutably stored. When a case escalates to UDRP, defamation litigation, regulator referral or law-enforcement engagement, the dossier is admissible the day you ask for it.

Outcomes-aligned reporting

Median time-to-first-outage. Median time-to-last-outage across rehosts. Closure rate. Dwell time experienced by victims. We report the metrics that correlate with brand-and-customer harm, not the vanity metrics that look good in a slide.

Specialist depth, single contract

Behind the umbrella programme sit our specialist takedown brands — takedown.su, domain-takedown.su, seo-fraud.su and the public abuse intake at sitereport.su. You retain one contract and gain depth across all of them.

FAQ

Frequently asked questions about brand protection

What does a brand-protection service actually do?

It continuously monitors the internet for unauthorised use of your brand — phishing domains, fake social profiles, counterfeit listings on marketplaces, fake mobile apps, brand-keyword scam ads — and removes that abuse via the responsible host, registrar, platform, app store or marketplace. Detection plus removal, run as an ongoing programme rather than one-off cases.

Which channels do you monitor?

Domains and certificate-transparency feeds, web search results, social media (Facebook, Instagram, X/Twitter, TikTok, LinkedIn, YouTube, Telegram), marketplaces (Amazon, eBay, AliExpress, Etsy and regional equivalents), mobile app stores (Google Play, Apple App Store, third-party Android stores), search and social ad networks and major SMS-lure intelligence feeds.

How is this different from a one-off takedown?

One-off takedowns address a single live incident — typically commissioned through takedown.su or domain-takedown.su. A Brand Protection programme is continuous: detection, evidence capture and removal run automatically against an agreed scope, with named human contacts for the cases that require judgement. The output is a steady-state defence rather than firefighting.

What is the typical onboarding timeline?

Two weeks for monitoring of a single primary brand across the standard pillars; up to six weeks where the scope includes regional marketplaces, regulated-industry handoffs (CERT, regulator referrals) or large defensive-domain portfolios. We can begin urgent takedowns within 24 hours of contract signature even while broader onboarding is still in flight.

Do you defend our search reputation?

Yes — included in the programme. SERP monitoring for brand and executive queries; removal of parasite-SEO and fake-review networks; coordination with search-engine spam and impersonation reporting channels. The dedicated SEO-fraud workflow is also available as a stand-alone service at seo-fraud.su.

How is the service priced?

Programmes are priced as monthly retainers scaled to scope (brands in scope, channels, expected case volume) with stricter SLAs available for regulated industries. Single-incident takedowns commissioned outside the programme are quoted per case under takedown.su or domain-takedown.su.

Are you a law firm?

No. Brand Protection is an operations and engineering practice. For litigation, UDRP, contentious trademark work and regulator engagement we work alongside your retained counsel. Our evidence packages are prepared so counsel can drop them into a filing without re-doing operational work.

Where are you based?

Brand Protection is operated by 78 OVER 37 LIMITED, a private limited company. See About for company details.