Brand protection proxies that see what counterfeiters show shoppers

Quick answer

Brand protection needs two proxy types. Rotating residential proxies with country and city targeting let you see counterfeit listings, grey-market sellers and cloaked phishing pages the way a local shopper sees them. ISP proxies give investigators a fixed identity for monitoring accounts and evidence capture. Geonode offers 2.5M residential IPs in 195+ countries from $0.27/GB and ISP proxies from $1.25 per IP.

Why brand protection breaks without the right proxies

Infringers design their operations to be invisible to the brand. Counterfeit listings appear only in the marketplaces and countries where enforcement is weakest. Phishing kits cloak: the same domain serves a harmless page to datacenter ranges, security vendors and the brand's own office, and the credential form only to a consumer IP in the targeted country.

Marketplaces add their own friction. Sweeping thousands of listings for a trademark from one IP produces HTTP 429, CAPTCHAs and shadow-limited search results where infringing listings are quietly left out of the page.

Ad fraud is geo-specific by design. Affiliates bidding on your trademark, fake discount sites and cloned stores buy ads that show only in selected regions, devices and hours. Verifying from your own location proves nothing. Brand protection requires consumer IPs in the right place, plus a stable identity for the accounts that file takedowns and document evidence.

Which Geonode proxy type fits

Residential proxies are the primary tool for discovery. With 2.5M IPs online and 30–50M unique IPs rotating monthly across 195+ countries, you can sweep marketplace search results, social commerce, classifieds and ad placements from the exact country and city where the infringement is targeted. Rotating mode keeps per-IP request counts low; sticky sessions up to 24 hours let an investigator walk a cloaked funnel from ad to checkout on one IP.

ISP proxies are the second half. Static IPs from real ISPs, from $1.25 per IP with unlimited bandwidth and unlimited sessions, give monitoring accounts, test-purchase accounts and evidence-capture tooling a fixed identity. Datacenter proxies from $0.14/GB are suitable for WHOIS, certificate transparency and other open sources that do not filter by IP type.

Residential — Best for: Discovering counterfeit listings, cloaked phishing, geo-targeted ads; IP source: Real consumer devices, 195+ countries; Session: Rotating or sticky up to 24h; Price from: $0.27/GB at volume
ISP (static residential) — Best for: Enforcement accounts, test purchases, evidence capture; IP source: Static IPs from real ISPs; Session: Unlimited, persistent; Price from: $1.25/IP
Datacenter — Best for: Open registries, certificate logs, your own domains; IP source: Rotating datacenter pool; Session: Rotating; Price from: $0.14/GB

How to set it up

Create a residential plan for discovery and reserve ISP IPs for each enforcement account. The 3-day residential trial for $5 is enough to validate coverage on your priority marketplaces.
Build usernames per target market, such as USERNAME-country-id for Indonesia, and add -session-<id> for funnel walks where the cloaked page must be loaded on the same IP as the ad click.
Query marketplace search, social commerce and ad placements for your trademarks and common misspellings, and fetch each candidate listing or landing page in full, including images.
Capture evidence on the first fetch: full HTML, screenshots where your tooling supports it, final URL after redirects, timestamp and proxy country. Infringing pages disappear once reported.
Route takedown submissions and test purchases through the ISP IP assigned to that account, and log every request with status, proxy identity and the listing or domain id.

# verify endpoint against docs.geonode.com before publishing
# Discovery: fetch a suspected cloaked landing page as a shopper in Jakarta
curl -sS -L \
  -x "http://USERNAME-country-id-city-jakarta-session-case771:PASSWORD@premium-residential.geonode.com:9000" \
  -H "Accept-Language: id-ID,id;q=0.9" \
  -o evidence/case771.html -w "%{http_code} %{url_effective}\n" \
  "https://suspicious-domain.example/offer"

Get the exact snippet for your language from the API Code Generator in the dashboard.

Brand-protection-specific settings that matter

Rotate for sweeps, hold for funnels

Use rotating residential IPs for broad listing and ad sweeps so no single address paginates deeply on one host. Switch to a sticky session for a cloaked funnel: the ad click, the redirect chain and the landing page should all be observed from one IP, because cloaking logic often checks consistency between those steps.

Target where the infringement is sold

Counterfeiters pick markets. Run sweeps from the countries where your product is popular and enforcement is weak, and use city targeting where social commerce and classifieds rank locally. State and city cannot be combined in one username, so define one targeting level per sweep.

Fixed identity for enforcement accounts

Assign one ISP IP per enforcement, registry or test-purchase account and never share it with discovery traffic. A stable address keeps the account from tripping security re-verification, and keeps your evidence chain clean because the capturing identity never changes between fetch and submission.

Pacing that stays below marketplace limits

Geonode sets no fixed thread limit, so size concurrency per marketplace by observed 429 and CAPTCHA rates. Sweeps for trademarks can be broad but should not be fast; spread them across the day.

Evidence-grade logging

Log proxy country and city, session id, final URL, redirect chain, status, response hash and capture time for every fetch. Store the raw response. Legal and platform takedown teams need to show what was served, to whom, where and when.

What Geonode gives you for brand protection

2.5M residential IPs online, 30–50M unique IPs monthly, in 195+ countries for local-view discovery.
Country, state, city and ASN targeting to observe geo-targeted infringement and ad fraud.
Sticky sessions up to 24 hours for walking cloaked funnels on one IP.
ISP proxies from $1.25/IP with unlimited bandwidth for fixed-identity enforcement accounts.
HTTP, HTTPS and SOCKS5 on both types, no fixed concurrency limit, 24/7 support.

Pricing for brand protection

Residential discovery is pay-as-you-go with no contract: 10 GB for $7.92 per month at entry, 50 GB for $34.65, and from $0.27/GB at volume, with a 3-day trial for $5. ISP proxies for enforcement accounts start at $1.25 per IP with unlimited bandwidth and sessions. Datacenter proxies for open registries start at $0.14/GB. Teams above 500 GB a month qualify for the "1TB on us" program. Full tiers are on the pricing page.

FAQ

Why do brand protection proxies need to be residential?

Counterfeit listings and phishing kits cloak against datacenter ranges, security vendors and the brand's own offices. A residential IP in the targeted country is classified as a consumer, so the infringing page or listing is served to it as it is to a victim.

How do I detect phishing pages that cloak?

Load the suspect URL through a residential IP in the country the campaign targets, inside a sticky session, following the full redirect chain. Compare it with a fetch from a datacenter IP; a page that differs between the two is cloaking.

Can I find unauthorized sellers in a specific country?

Yes. Append the country code and optionally a city to your username, run your trademark queries against that market's marketplace and social commerce search, and record seller id, listing id and proxy country for each hit.

When should I use ISP instead of residential brand protection proxies?

Use ISP proxies for accounts that file takedowns, make test purchases or hold brand registry access. A static IP keeps those accounts stable and makes the evidence chain consistent. Use residential for discovery, where you want many IPs rather than one.

What are the legal and compliance limits?

Collect public data within each platform's terms, robots policies and rate limits, and use accounts only where you own them or have authorisation. Geonode's acceptable use policy prohibits fraud, spam and credential abuse. Takedowns go through the platform's or registrar's process, not through technical means.

Does Geonode offer mobile proxies for app-based counterfeit channels?

No. Geonode does not sell mobile proxies. Residential proxies are the substitute: they are consumer IPs with the same classification, and ASN targeting lets you route through specific carriers where a channel keys on the network.

Start

Set up residential discovery and ISP enforcement IPs in one account and run your first market sweep today. Get started with pay-as-you-go access, or Contact sales if your program covers many brands, markets and enforcement accounts.