If you already know the software copy is unauthorized, this article is the removal manual.
The job is to dismantle the path people use to reach the crack. That path often looks like:
Search -> warez page -> redirect -> file host -> cracked file
You may also have mirrors, repositories, torrents, and seller pages around the same release. Treat each layer separately.
Step 1: Build the case map
Create one row for every object you can identify.
| Object | Example | Who may control it |
|---|---|---|
| Search result | Google result | |
| Warez page | site.example/release | Site operator / web host |
| Redirect | Shortener or gateway | Redirect service |
| Direct file | filehost.example/abc | File host |
| Repository | GitHub repo | GitHub |
| Mirror | Separate domain | Separate site / host |
| Seller page | Storefront | Marketplace / platform |
Do not put all of these into one "piracy URL" field. They can have different outcomes.
Step 2: Capture the exact URLs
For each object, save:
- exact URL
- screenshot
- filename or release name
- version/build
- date and time
- uploader or account
- where the link came from
If the page contains a public download link, record the destination. Do not execute unknown software.
Step 3: Identify the direct file host first
If a warez page links to a separate file host, that host is often the cleanest source-level target.
Common examples have their own copyright processes:
- Dropbox DMCA
- MediaFire copyright process
- Google products through Google Legal Help
Use the provider's own current form or instructions. The direct file can disappear even if the warez page stays up. That is still valuable.
Step 4: Send a compliant notice to the file host
Use this structure when the provider accepts a free-form notice:
Subject: DMCA Notice of Claimed Infringement - [SOFTWARE NAME]
To: [FILE HOST / DMCA AGENT]
I am [the copyright owner / authorized representative] for the work identified below.
Copyrighted work:
[Software name, version if relevant, and description]
Official product URL:
[URL]
Material claimed to infringe:
[Description]
Direct infringing file URL:
[EXACT FILE URL]
Related page URL, if applicable:
[WAREZ / LINKING PAGE URL]
I request that you remove or disable access to the material identified above.
I have a good-faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law.
The information in this notice is accurate and, under penalty of perjury, I state that I am the copyright owner or am authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
Name:
Company:
Mailing address:
Telephone:
Email:
Electronic signature:
[Full legal name]If the provider has a form, use the form instead.
Step 5: Handle the warez page separately
Now deal with the page that advertises the crack.
First look for:
- Copyright
- DMCA
- Abuse
- Legal
- Terms
- Contact
If the site publishes a copyright process, use it. If it does not, identify the relevant service provider.
Check the domain registration
Use ICANN Lookup for gTLD registration information. That tells you the registrar and available registration data. It does not prove who hosts the site.
Check whether Cloudflare is only the CDN
If Cloudflare appears in DNS or the IP, do not write "Cloudflare hosts this piracy site."
Cloudflare says that in many cases it provides pass-through CDN service. Use Cloudflare's abuse process and give the most specific asset URL you have.
For a specific image, video, iframe, or file exposed by the page, Cloudflare recommends using the browser's Inspect Element tools to find the asset URL. If Cloudflare is not the origin host, it may be able to route or forward the complaint depending on the service involved.
Step 6: If the origin host is identifiable, use its current abuse route
Some infrastructure providers publish direct copyright procedures.
For example, AWS accepts DMCA notices through its Trust & Safety process and tells complainants to put the necessary information in plain text because its abuse team does not open attachments.
Do not assume every IP owner is a hosting provider. Tie the complaint to the specific resource you observed.
Step 7: Handle GitHub and code hosts as a separate branch
If the crack or licensing bypass appears on GitHub:
- Check whether the repository actually copies your copyright-protected code or files.
- Check whether a license authorizes any of the use.
- Identify the exact repository, file, or lines.
- Identify forks separately if you claim they also infringe.
- Use GitHub's copyright form.
For anti-circumvention claims, GitHub asks for detail about the protection measure and how the project bypasses it.
Do not substitute a generic DMCA email for GitHub's software-specific process.
Official guide: https://docs.github.com/en/site-policy/content-removal-policies/guide-to-submitting-a-dmca-takedown-notice
Step 8: Delist Google and Bing
Once you have the exact piracy URLs, file separate search requests.
Use: https://support.google.com/legal-help-center/answer/13887279
Google asks you to select the affected product and provide specific URLs.
Bing
Use: https://www.bing.com/webmaster/contentremovalform/showcontentremovalform
Bing's copyright form asks for the exact source page URL, information about the copyrighted work, and the required ownership and good-faith statements.
Search delisting reduces discovery. It does not remove the underlying file.
Step 9: Follow up once, then change the route
If the provider has not acted and the content remains accessible, send a concise follow-up:
Subject: Follow-up - Copyright Infringement Notice [REFERENCE]
I am following up on the copyright notice submitted on [DATE].
Reported URL(s):
[URLS]
Reference:
[REFERENCE]
The reported material remains accessible as of [DATE / TIME].
Please confirm the current status and whether additional information is required.
Name:
Company:
Email:If the first recipient cannot control the source, do not keep sending the same notice. Move to the next real control point.
Step 10: Do not misuse registrar and DNS escalation
A registrar is not the same thing as a host. A DNS provider is not the same thing as a host.
ICANN's current DNS Abuse categories cover botnets, malware, pharming, phishing, and certain spam. Ordinary copyright infringement is not itself in that definition.
A registrar may still have separate policies or respond to legal orders, fraud, malware, or other abuse. But "host ignored my DMCA, therefore report copyright to the registrar" is not a reliable universal process.
Step 11: Disrupt the payment route when the piracy site is selling access
If the piracy site is charging for access, the payment provider can be another enforcement point. This does not remove the piracy page or underlying file, but it can disrupt the site's ability to monetize the infringement.
PayPal
If the site accepts PayPal, use PayPal's Infringement Report process.
Provide the infringing page, evidence that the product is yours, and evidence that PayPal is actually being used for the transaction.
PayPal's Acceptable Use Policy prohibits transactions involving goods that infringe copyright, trademark, or other proprietary rights. PayPal can review and restrict the associated account or payment services.
Report infringement: PayPal Infringement Report process Policy: PayPal Acceptable Use Policy
Stripe
If the seller uses Stripe, submit the case through Stripe's IP Notice process.
Stripe asks you to identify the protected work, the infringing business or listing, and evidence connecting Stripe to the transaction. Stripe can review the merchant's eligibility to use its services, but it cannot remove the underlying piracy page or file.
Report infringement: Stripe IP Notice process
Crypto
If the site only accepts direct cryptocurrency payments, there is usually no PayPal-style central payment provider that can disable the checkout.
Focus on the control points that still exist: the piracy site, file host, hosting infrastructure where appropriate, search results, platform accounts and mirrors.
Step 12: Verify the entire chain
Check every object again.
| Object | What to verify |
|---|---|
| Warez page | Does it still load? |
| Redirect | Does it now point somewhere else? |
| Direct file | Does the file still resolve? |
| GitHub repo | Is the reported content still available? |
| Is the specific result still visible? | |
| Bing | Is the specific result still visible? |
| Mirror | Is another copy active? |
Record the actual state.
Step 13: Repeat for new releases
A software product that gets cracked repeatedly needs release-level monitoring.
Keep:
- current product aliases
- current versions
- known crack/release names
- known piracy sources
- known mirrors
- resolved and reappeared cases
That is the work WatchMesh automates and manages continuously.
If you want to see the current exposure before committing to ongoing protection, start a Free Evidence Audit.
Official references
- U.S. Copyright Office Section 512: https://www.copyright.gov/512/
- Cloudflare abuse: https://www.cloudflare.com/trust-hub/reporting-abuse/
- ICANN Lookup: https://lookup.icann.org/
- ICANN DNS Abuse: https://www.icann.org/dnsabuse
- AWS DMCA: https://repost.aws/knowledge-center/submit-dmca-notice
- GitHub DMCA guide: https://docs.github.com/en/site-policy/content-removal-policies/guide-to-submitting-a-dmca-takedown-notice