Navigating Domain Takedowns with Non-cooperative Registrars

### Executive Summary This report explains how 'bulletproof' or non-cooperative domain registrars facilitate DNS abuse (phishing, botnets/C2, spam, brand impersonation), details why registrars become noncompliant (jurisdictional gaps, workforce limits, slow takedown processes), and recommends operational and AI-enabled best practices (standardized reporting, sinkholing, vendor coordination, and threat intelligence sharing) to improve takedown effectiveness and reduce malicious domain impact.