Webshare Guides

Webshare Proxies for Brand Protection: Finding Counterfeits and Abuse

How brand protection teams use Webshare proxies to find counterfeit listings, trademark abuse, unauthorised sellers and phishing pages, with residential IPs, geo-targeting, evidence capture and safe practices.

By Team of Monkeys Editorial Updated 3 min read Affiliate disclosure

This guide contains affiliate links to Geonode and Webshare. If you buy through them we may earn a commission, at no extra cost to you.

Webshare for Brand Protection illustration showing Brand team connecting through Shopper IP to Marketplaces, covering counterfeits, phishing 3jdej38j4

What brand protection monitors

Brand protection teams look for:

  • Counterfeit products on marketplaces, social shops and standalone sites.
  • Unauthorised sellers and grey-market listings.
  • Trademark misuse in domains, ads and listings.
  • Phishing and impersonation pages using the brand's name and design.
  • MAP violations (minimum advertised price) by resellers.

Background in brand protection proxies.

Why proxies are needed

  • Bad actors hide from brands. Counterfeit and phishing sites often show harmless pages to visitors from known corporate or datacenter IPs and the real content to ordinary users.
  • Content varies by country. Listings, ads and shops may only appear in certain markets.
  • Volume. Monitoring many marketplaces regularly triggers rate limits.

Which Webshare product

TaskWebshare product
Marketplace and social shop searchesRotating residential, country-targeted
Checking suspected phishing or counterfeit sitesRotating residential, sessions for full page flows
Monitoring reseller sites for MAPDatacenter list, residential for protected sites
Logged-in marketplace reporting toolsDedicated static residential IP

Webshare's rotating residential network with country to ZIP and ASN targeting lets you appear as an ordinary shopper in each market.

Capturing evidence

Enforcement needs evidence that holds up:

  • Screenshots of listings and pages, with timestamps.
  • Full URLs and redirect chains.
  • The IP location used for each capture.
  • Archived HTML for later review.

Use a headless browser for captures; see Webshare with Playwright.

Safety

Suspicious sites can host malware. Run checks in isolated environments (containers or VMs), never from a corporate workstation, and don't log into anything on suspicious sites. See Webshare for cybersecurity research.

Budget tip: Before scaling, run a short pilot with Webshare on your real targets and record success rate, latency and bandwidth per result. Our our complete Webshare guide explains which Webshare product fits which job.

Workflow

  1. Define search terms, brand names, product names and common misspellings.
  2. Run searches by market on a schedule.
  3. Score results (price far below retail, unofficial images, new seller accounts).
  4. Capture evidence for high-scoring results.
  5. Report through each platform's brand protection program.

Comparing providers

Geonode also supports country to ASN targeting and non-expiring bandwidth, which suits periodic sweeps. See Webshare vs Geonode for brand protection.

Scoring suspicious listings

Not every cheap listing is counterfeit. A simple scoring model helps prioritise:

SignalPoints
Price more than 50% below retail3
New seller account2
Official product images reused1
Misspelled brand name2
Shipping from unusual origin1
Many identical listings2

Review listings above a threshold manually, and capture evidence for those you report.

Sweep cadence

  • Daily for top products and high-risk marketplaces.
  • Weekly for the long tail.
  • Ad hoc around launches and peak seasons, when counterfeiters are most active.

Phishing and impersonation sites

For lookalike domains and phishing pages, monitor new domain registrations with brand terms, then check them from residential IPs in isolated environments. Capture screenshots and hosting details for takedown requests.

Proxy tip: For a second opinion on hard targets, run the same test through Geonode residential proxies, which support sticky sessions up to 24 hours and ASN targeting. We compare the two in Geonode for brand protection.

Measuring results

Track listings found, reported, removed and time to removal. Those numbers show whether the program works and help justify its budget.

A real-world example

A fashion brand runs weekly sweeps for counterfeit versions of its five bestselling products across four marketplaces and social shops in eight countries. Searches run through Webshare residential sessions in each country, results are scored automatically, and listings above the threshold are captured with screenshots and URLs in an isolated browser environment. In the first quarter, the team files over 300 reports, with removal rates and times tracked per platform.

For the bigger picture beyond these two providers, read our best proxies buyer's guide, and see cheap proxies for ways to cut cost per successful request.

Key takeaways

  • Bad actors often cloak content from corporate and datacenter IPs, so check from residential IPs in each market.
  • Score suspicious listings to prioritise manual review.
  • Capture evidence in isolated environments with screenshots, URLs and timestamps.
  • Report through each platform's brand protection program.
  • Track found, reported and removed listings to measure the program.

FAQ

Why do counterfeit sites look normal when I check them?

Many cloak content from corporate and datacenter IPs. Check from residential IPs in the target market.

Can I use datacenter proxies for brand protection?

For reseller price checks, often yes. For finding cloaked or hidden content, residential is better.

Do marketplaces allow brand monitoring?

Most have brand protection programs and reporting tools. Check their rules for automated monitoring.

How do I prove a listing is counterfeit?

Platforms usually rely on rights holder declarations backed by evidence such as test purchases, images and listing details.

Can I automate takedown requests?

Many platforms offer bulk reporting tools for registered rights holders; check each program.

Should brand protection use residential or datacenter IPs?

Residential for finding cloaked or region-specific content; datacenter for lenient reseller sites.

Affiliate disclosure: Team of Monkeys is an affiliate of Geonode and Webshare. Links and banners marked as sponsored, and links to Geonode and Webshare in the text, use our referral links, and we may earn a commission if you buy through them, at no extra cost to you. Our explanations and comparisons are written to be useful whichever provider you choose.

Editorial note: Proxy providers change their pools, features and prices often, so treat any figures here as typical ranges at the time of writing and confirm current terms with the provider before you buy.