Read article
Someone copied your website or store? What you can do
Who can take down which part of a copied website or store, and what happened when we reported five copies of one US retailer's store.
September 23, 2026
OpenBait Blog
Guides to cloned stores and phishing sites: incident response, detection, registrar reports, browser blocklists and takedown services.
Five clones of one store: what each abuse team did
A US retailer's online store was cloned five times in September 2026. Here is what the registrar, the hosts and the blocklists each did, hour by hour.
September 20, 2026
A .cn phishing site: Tencent took it down in a day
One phishing site on a .cn domain, reported the same day to Google Safe Browsing and to Tencent. Tencent removed it within 24 hours; Google never replied.
May 4, 2026
The first 48 hours of a phishing incident: 7 steps
The first 48 hours after a phishing site goes live in your brand's name: who moves inside the company, what to protect, and which outside companies can act.
May 4, 2026
Phishing takedown services: in-house, agency, or SaaS?
Phishing takedown in 2026: enterprise platforms, agency retainers or self-serve SaaS. Where each wins, what they cost, and what to buy under $50K/year.
May 4, 2026
Typosquat detection: 5 methods and their trade-offs
Five ways to detect typosquat and lookalike domains (dnstwist, CT logs, NRD feeds, zone files, search monitoring): what each is good at and where it fails.
April 22, 2026
What browser blocklists can and can't do about a phishing site
What Safe Browsing, SmartScreen and DNS blocklists do about a phishing site, why they're slow and unpredictable, and what we measured in one timed case.
April 21, 2026
What registrars did with our phishing domain reports
Which company controls which layer of a phishing site, why takedowns are slow and hard, and what happened in two of our own cases, mistakes included.
April 20, 2026