Get fake websites, phishing sites and pages misusing your brand taken down.

No one can promise that, because the hosting provider and the registrar make the final call. On a monthly plan, if none of the sites we took on has gone offline, been suspended or received a browser warning within 30 days of our first report, we refund your first payment. A $199 takedown is refunded in full if it's canceled before its first report goes out. The first-payment refund applies once and must be requested within 30 days; see the Subscription & Refund Policy for details.

Sign up and enter your website's address. When AI finds a likely fake, we email you, and you tell us with one click whether it's a fake. On a monthly plan, or once you add a $199 takedown, we handle the reports from there; for some types of reports, we may ask for documents showing the brand is yours. On the Free plan, open your dashboard at least once every 14 days, or the scan and the checks on your cases pause until you do; a $199 takedown carries on as usual.

It depends on the hosting provider and the registrar, so there's no fixed timeline. Our fastest so far was under an hour from a follow-up report to the registrar, with fresh evidence, to the site being suspended. We check reported sites every hour, and the time a site goes offline is recorded on your case page.

Checking a link, the daily check of newly registered domains and the lookalike domain checker are free. The Free plan reports up to 3 confirmed fakes a month to browser warning lists, but doesn't ask for the site itself to be taken down. A takedown is $199 per site, paid once, or comes with a monthly plan: up to 3 sites a month for $299, or up to 10 for $499. Either way, we keep checking a site after we take it down, and if it comes back at the same address, we report it again at no extra charge once you confirm.

Online stores that get cloned, whether they run on Shopify, WooCommerce or any other platform, brands whose login or payment pages get faked, and small companies with no security team. With a monthly plan or a $199 takedown, OpenBait figures out where to report, writes the reports and handles the back-and-forth, while you follow progress on one screen.

Reports go out under OpenBait's name, never from your email address. Each one states only what the evidence shows and comes with the evidence we've preserved. We ask a hosting provider or registrar to take a site down only after you confirm it's fake.

Paste the link on this page or in your dashboard, or let the daily scan find it. Once you confirm it's a copy, and you're on a monthly plan or have added a $199 takedown, we take it from there. If it steals passwords or card numbers, we report it with evidence to the companies that can take it offline and follow it until it's down. If it's a plain copy, we have it removed from Google's search results. You don't need to contact anyone yourself.

Yes, when it copies your site. With the letter of authorization you sign in your dashboard (valid for a year), we ask Google to remove the copy's pages from its search results. Once Google approves the request, those pages stop showing up in Google search. For a fake site that steals passwords or card numbers, we work to get the site itself taken offline instead.

Yes. Copies of your login or checkout page that collect passwords or card numbers are exactly what OpenBait is built for. Once you confirm one, we report it with evidence, follow it until it's offline and keep checking in case it comes back.

Yes. Once you confirm the copy and add a $199 takedown or use a monthly plan, we handle the reports under our own name: if the copy takes card numbers, we report it with evidence to the companies that can take it offline and keep checking until it stops loading; if it only copies your pages, we ask Google to remove them from search results. If it moves to a new domain, that's a new takedown; if it comes back on the same one, we report it again at no extra charge once you confirm. Someone copied your Shopify store? Here's how we get the copy taken down