LegalBrandGuard
Scan

CIMALP case: a fake site suspended in under 48 hours

Updated on August 24, 2026 · LegalBrandGuard · 4 min read

Symbolic illustration of a padlock closing over a domain icon, an illustrative image representing the suspension of a fraudulent domain name

Quick answer

The domain cimalp-official.com, registered on July 21, 2026 to imitate the French brand CIMALP, moved to clientHold status on August 3, 2026, less than 48 hours after a notice produced by LegalBrandGuard and sent by the trademark holder from their own address. The domain no longer resolves.

Check it yourself before taking our word for it

A case study the reader cannot verify is worth nothing. This one rests on public data: the status of a domain name, published by the registry for the extension.

Query the .com registry directly — no account, nothing to install:

curl https://rdap.verisign.com/com/v1/domain/cimalp-official.com

The response contains "status" with the value client hold, and a last changed event dated August 3, 2026. These values are not ours: they belong to the registry.

The timeline, domain by domain

CIMALP is a French brand of technical mountain clothing, operated by Manufacture Dromoise de Confection. Four domains imitating it were dealt with, through two different channels — which makes the comparison instructive.

Status of domains imitating the CIMALP brand as of August 24, 2026
DomainRegistered onStatus as of August 24, 2026Channel used
cimalpofficial.comJune 8, 2026clientHold since July 21, 2026Specialized law firm
cimalp-official.comJuly 21, 2026clientHold since August 3, 2026Notice produced by the tool
cimalpofficialfr.comAugust 15, 2026clientHold since August 24, 2026Notice produced by the tool
cimalpoutlet.shop—Still active, behind a reverse proxyIn progress

Three of the four domains were registered with the same registrar, West263 International Limited (Hong Kong) — the fourth, with Dynadot. The second was created the very day the first was frozen, and the third only nine days before its own suspension: the substitution is immediate, and that is exactly what makes continuous monitoring necessary.

What the comparison does not show

It would be dishonest to conclude that the tool performs better than a law firm. Both domains achieved the same result with the same registrar. We do not have the date the first notice was sent, so no comparison of timeframes is possible.

The difference lies in cost. The first step was handled by a law firm, which charges around €350 excl. VAT for this type of case. The second went through LegalBrandGuard, whose case is billed at €99 excl. VAT. We are comparing two public price points, not the amount actually paid for this particular case, which we are not obligated to publish.

What was actually done

Nothing exceptional, and that is the point: the procedure described in the step-by-step guide was followed exactly as written.

StepWhat was produced
DetectionTesting brand-name variants and querying public TLS certificate registries
IdentificationRegistrar West263 and its official abuse address, obtained via RDAP and cross-checked
EvidenceTimestamped capture of the fake site and record of technical data, before any notice was sent
NoticeCease-and-desist letter in English, trademark certificate attached, explicit request for a freeze
SendingBy the trademark holder, from their own business address
VerificationRDAP check of the move to clientHold, then of DNS resolution stopping

The letter contained neither a court order nor any lawyer's involvement. A factual notice, proof of rights, and a precise request.

What this case does and does not establish

A single case is not a statistic. Here is the line we hold ourselves to.

What is establishedWhat is not
A non-judicial notice can get a domain frozenThat it does so systematically
Some registrars actually process their abuse inboxThat all of them do — several never respond
A trademark holder can act without hiring anyoneThat legal counsel is unnecessary in case of a dispute
A frozen domain gets replaced within daysThat monitoring alone is enough to exhaust a network

cimalpoutlet.shop, still active behind a reverse proxy, illustrates the limit: when the real host is hidden, you have to go through the intermediary's abuse form, and the timeframe is nothing like the same.

Check your own brand

Analyze your brand and see which domains are targeting it today.

Scan my site for free

Frequently asked questions

Is the outcome of this case verifiable from the outside?+
Yes, and that's the point. A domain's clientHold status is public data published by the registry. Anyone can query rdap.verisign.com/com/v1/domain/cimalp-official.com and read the status and its last-changed date themselves. We are not asking anyone to take our word for it.
Is CIMALP a LegalBrandGuard customer?+
Yes. CIMALP ordered and paid for this case, and authorized in writing the publication of its name and the case details. This is the case the tool was tested on under real conditions. We do not publish testimonials: the result can be verified at the registry, without having to trust us.
How much time passed between sending the notice and the suspension?+
Less than 48 hours between sending the notification and the registrar's response confirming the suspension. This timeframe is not representative: other registrars take several weeks, and some never respond. West263 is one of the registrars that actually process their abuse inbox.
Was the domain recovered by the brand?+
No. A takedown suspends the domain, it does not transfer it: it remains registered to its holder but stops resolving. Obtaining a transfer requires a UDRP proceeding, which follows a different logic.
Were all the targeted domains suspended?+
No. As of August 24, 2026, three of four domains are in clientHold and no longer resolve; the last one, cimalpoutlet.shop, remains active behind a reverse proxy service. We publish both situations, because a report that only showed successes would be worthless.

Sources

← Getting a fake site taken down