Website Cease and Desist Letter
Website Cease and Desist Letter
< BLOG
Legal Jeopardy: Website Cease and Desist Letter
You’d never expect a legal letter instructing you to stop using your website. Well this is precisely what happened and it’s the catalyst to the development of The TLD Project, all from a website cease and desist letter.
Defensive domain registration
Sounds simple enough. Register the same domain under multiple top level domain extensions – for example yourdomain.com is the core web address but you also registered .co.uk, .us and more. A very simple and effective way to block others from impersonating your website while also removing customer confusion.
It’s not a financially viable approach and there is never a guarantee that you will be able to secure all domains. As a rough guide there are about 40,000-60,000 net new domain registrations per day worldwide, roughly 15-22 million additional active registrations per year. The chances of someone having registered your domain extension variation is high.
Prefix and suffix or hyphenation can also be used for good and bad. No one can protect their domain entirely through a defensive domain registration strategy.
Top-level domain impersonation
The bad actors seek top-level domain variations, they are the very best tool for deceiving people. Our story came from a .de domain registration – one that the business had not registered. Why would they, the .de domain suggests the business is German, where in fact is was French.
This simple gap wasn’t exploited immediately, in fact the business had been successfully trading without issue for over 15 years. Then one day a cease and desist letter came through the post from a German law firm and that is not something that can be ignored.
Germany generally requires prior explicit consent before sending marketing emails, texts, or automated calls, even to businesses. Publicly listed email addresses do not automatically permit cold outreach. GDPR also governs use of personal data; a limited exception exists for similar products to existing customers with a clear opt-out.
Data protection laws vary across the world, but in general the same key principals are the same. What had happened in this case was a clear website mimic with phishing and it had just come out of the blue.
Stop immediately, stop using your website, stop sending email
A website cease and desist letter is a formal legal notice requiring the registrant and any responsible parties to immediately stop using a domain to send phishing emails or direct recipients to a fraudulent website. In Germany, phishing and identity-related online fraud are treated seriously; failure to comply may lead to court proceedings, injunctions, damages claims, and recovery of legal costs.
So, you can imagine the shock the business owner got when opening the letter. This was not them, it was not their business and this was the first indication that something was happeing.
The following explains how The TLD Project moved the business from panic and reaction to evidence-led action. It identified the impersonating domain, documented the active abuse and gave the owner the information needed to demonstrate that they were the victim, not the sender.
The investigation
The immediate problem was not simply that a fraudulent .de domain existed. It was that it was using the company’s identity: its website design, brand signals and email activity were convincing enough to trigger a legal complaint.
The TLD Project was used to investigate the domain landscape around the legitimate brand and establish what had happened:
- It identified the unregistered top-level domain variation that had been weaponised.
- It exposed the impersonating website and its relationship to the real business identity.
- It created a clear record of the domain, the evidence of mimicry and the point at which the business became aware of it.
- It gave the owner a defensible distinction between their genuine website and the fraudulent operation.
That distinction mattered. A cease and desist notice requires fast, credible engagement—not a vague assurance that “it isn’t us”.
Turning evidence into action
Armed with evidence, the business could respond to the German law firm promptly, explain that it had not registered or operated the .de domain, and begin the process of challenging the impersonation with the relevant parties.
The objective was to contain the incident before it became a larger commercial and legal problem:
- Prevent further phishing emails being attributed to the legitimate business.
- Reduce the risk of customers, suppliers and prospects being deceived.
- Support abuse, hosting and registrar reports with specific evidence rather than suspicion.
- Avoid the appearance that the business had ignored a serious allegation.
- Protect the genuine domain, email reputation and brand credibility.
German rules around unsolicited email are strict, including for business communications, with only narrow existing-customer exceptions. That made it especially important to establish quickly that the unlawful messages did not originate from the legitimate company.
What The TLD Project changed
The disaster was not averted by buying every possible domain extension. That is neither practical nor complete. It was averted by finding the threat early enough, understanding the evidence and responding before the impersonation could cause deeper reputational damage, customer harm or mounting legal expense.
The TLD Project exists for exactly this moment. It helps businesses discover domain impersonation risks before someone else, whether a customer, a regulator, a lawyer or a victim of phishing, discovers them first.
Because when a fraudulent domain is already impersonating your business, the cost is no longer the price of a domain name. It is the cost of lost trust, disrupted trading, incident response, legal advice and a reputation you may have spent years building.
