On 24 April 2020, the US Department of Justice seized coronaprevention.org. The seizure warrant tells a textbook story of pandemic profiteering: immediately after the declaration of the national emergency, the domain's holder put it up for sale on a hackers' forum, touting it as an effective way to sell high-markup, in-demand products, payment in bitcoin. He then negotiated with an undercover Homeland Security agent, discussing openly the distribution of fake Covid-19 testing kits, regretting only that he lacked the capital to source counterfeit kits from Asian suppliers, and dispensing advice on hosting the site abroad to evade American law enforcement. The seizure illustrates the authorities' rapid mobilisation against pandemic fraud — and the value, for brand owners and platforms alike, of channelling evidence to law enforcement when monitoring surfaces this kind of scheme.