Domain suspension

How it works

When an abuse report is upheld, the registrar can place the domain on hold, a status like clientHold or serverHold, instead of deleting it. The domain still exists in the registry, but it no longer resolves anywhere, which takes the site and any email offline immediately.

Suspension is often the fastest outcome of a takedown, because it does not require the host to act, only the registrar.

How it relates to brand impersonation

For an impersonating domain, suspension cuts off the whole operation at the name level, not just one page. It is one of the cleanest ways to end a phishing or fraud campaign quickly.

How nebty helps

nebty pursues suspension as part of its takedowns, presenting registrars with the evidence and policy basis they need to act. You pay only when the domain is taken down.

Suspension versus deletion

A suspended domain is not deleted. The registrar or registry sets a status like clientHold or serverHold, which pulls the domain out of DNS so nothing resolves, but the registration record stays in place. That distinction matters for two reasons. First, suspension is reversible: if the hold was a mistake it can be lifted quickly, and a legitimate owner who was hijacked can recover. Second, because the name is not released back to the pool, an attacker cannot simply re-register the same string the moment it drops. For an impersonating domain, a hold is often the cleanest outcome you can ask a registrar for, since it stops the site and any spoofed email in one action without waiting on the separate hosting provider.