# OpenBait

> OpenBait takes down fake websites, phishing sites and unapproved coupon-site pages that use a company's name. Its AI scans newly registered domains every day for names like the brand's and reads each page to judge whether it is posing as the brand; paid plans also search Google results every day and third-party pages every week. Once the brand confirms a site is fake, OpenBait files the takedown requests under its own name, with evidence (screenshots and a third-party archive of the page), to whoever can take it down: the hosting provider, the domain registrar, the browser blocklists, or the site's own removal form. It keeps checking until the site is offline, and every filing is recorded on a case. The Free plan is $0: the scans, the AI verdicts, a report page and reports to the browser blocklists. A takedown is $199 per site on any plan; Pro ($299/month) includes 3 a month and Business ($499/month) 10, with no annual contract. Brands can replace a phishing@ mailbox with a report page under their own name, https://openbait.com/report/<brand>, and anyone can check a link at https://openbait.com without an account.

## If your store was copied

- [Check the copy and open a case](https://openbait.com/): paste the link to the copy. If it copies your company, sign up from the answer and the case opens with that link.
- Or email contact@openbait.com with the link to the copy and your own site's address.
- [Someone copied your Shopify store? Get the fake site taken down.](https://openbait.com/someone-copied-my-shopify-store): OpenBait is a takedown service for fake Shopify stores and other copies of a business's website. When a copy of your site takes your customers' card numbers, we report it with evidence to the companies that can take it offline and follow it until it stops loading. When it only copies your pages, we have it removed from Google search. Takedowns come with Pro: $299 a month for up to 3 fake sites.

## Takedown services

- [All takedown services](https://openbait.com/takedown-services): what OpenBait takes down, what it costs, and what to ask before hiring a takedown service, with OpenBait's answers.
- [Phishing site takedown](https://openbait.com/phishing-site-takedown): fake login and checkout pages that take passwords or card numbers.
- [Scam domain takedown](https://openbait.com/scam-domain-takedown): look-alike domains that use a company's name to run a fake site.
- [Fake listing takedown](https://openbait.com/fake-listing-takedown): fake products and fake shops on eBay, Etsy, Temu and Amazon that use a company's photos, text or trademark.
- [Copied content removal](https://openbait.com/copied-content-takedown): copies of a company's pages, text and photos, removed from Google search results.

## Check a link

- [Check any link](https://openbait.com/): paste a URL and get an answer. No account, no signup.
- [How fake website takedown works](https://openbait.com/how-it-works): what the scan looks for, the one thing you decide, what we do, how we confirm a site is offline and watch for it to come back, and what's free.
- [Lookalike domain check](https://openbait.com/tools/typosquat-check): see which names built from your domain are live and show your brand name — your brand with common words such as login or pay, and, for longer brand names, .shop names of the kind copied stores use. For each name set up in DNS it opens the front page and reads only the title; it takes no screenshots, stores no page content, and does not try misspellings or look-alike letters.

## For brands

- [Pricing](https://openbait.com/pricing): priced per brand and counted in takedowns: each fake-site domain we take down is one, and one seller's fake listings on eBay, Etsy, Temu or Amazon are one. Free ($0): the daily scans, AI verdicts, a report page, and confirmed phishing reported to the browser blocklists (Google Safe Browsing; VirusTotal and Spamhaus where the evidence supports it); no takedowns included, but one can be added for $199. Pro ($299/month): 3 takedowns a month, 1 brand, plus Google search and third-party page scans. Business ($499/month): 10 a month, 2 brands. Enterprise ($899/month): 20 a month, 3 brands, SAML single sign-on and invoicing; it starts with an email. On any plan, one more takedown is $199, paid by card when you add it.
- [Comparisons](https://openbait.com/compare): how OpenBait lines up against the brand-protection platforms people evaluate alongside it.
- [Security](https://openbait.com/security): where report data and scan results are stored, sub-processors, and what a vendor review gets.
- [About](https://openbait.com/about): what OpenBait is, who runs it, and under whose name reports are filed.

## Docs (Japanese)

- [Quickstart](https://openbait.com/ja/docs/quickstart): create an organisation, get the report page link, and put it where customers see it. No DNS change, no script tag.
- [Alert configuration](https://openbait.com/ja/docs/alerts): email and webhook recipients, the event names and payloads a webhook receives, and how to verify the signature.
- [Takedown statuses](https://openbait.com/ja/docs/takedown-status): what each status on a case means (reporting, warned by browsers, offline, closed), how it is decided, and how the monthly limit is counted.
- [Domain whitelist](https://openbait.com/ja/docs/best-practices/whitelist): excluding your own and your partners' domains, and how far a listed name reaches.

## Authors

- [OpenBait Team](https://openbait.com/authors/openbait)

## Recent posts

- [Counterfeit listing on eBay? What eBay's own records show](https://openbait.com/blog/counterfeit-listing-on-ebay) — eBay's 2025 numbers, its letter to regulators and what sellers say: who catches a counterfeit listing on eBay, and why it often falls to the brand.
- [Someone copied your website or store? What you can do](https://openbait.com/blog/report-cloned-website) — Who can take down which part of a copied website or store, and what happened when we reported five copies of one US retailer's store.
- [Five clones of one store: what each abuse team did](https://openbait.com/blog/clone-shops-case-study) — A US retailer's online store was cloned five times in September 2026. Here is what the registrar, the hosts and the blocklists each did, hour by hour.
- [「偽サイトにご注意ください」注意喚起の例文集](https://openbait.com/ja/blog/fake-site-customer-notice-examples) — 自社をかたる偽サイトを見つけたときに、お客様へ出す注意喚起の例文です。自社サイトのお知らせ、メール、X・SNS の 3 種類をそのままコピーでき、必ず入れる 5 項目と、載せてはいけないものも整理しています。
- [A .cn phishing site: Tencent took it down in a day](https://openbait.com/blog/cn-phishing-takedown-case-study) — One phishing site on a .cn domain, reported the same day to Google Safe Browsing and to Tencent. Tencent removed it within 24 hours; Google never replied.
- [The first 48 hours of a phishing incident: 7 steps](https://openbait.com/blog/phishing-incident-response-playbook-48h) — The first 48 hours after a phishing site goes live in your brand's name: who moves inside the company, what to protect, and which outside companies can act.
- [Phishing takedown services: in-house, agency, or SaaS?](https://openbait.com/blog/phishing-takedown-service-comparison) — Phishing takedown in 2026: enterprise platforms, agency retainers or self-serve SaaS. Where each wins, what they cost, and what to buy under $50K/year.
- [フィッシングサイト削除：内製・代行・SaaS の比較](https://openbait.com/ja/blog/phishing-takedown-service-comparison-jp) — フィッシングサイトの削除依頼を、内製・代行サービス・SaaS のどれで進めるか。それぞれが向く条件、公開されている価格、ベンダーに確認すべき項目。「フィッシング対策協議会に報告すれば閉鎖されるのか」にも一次情報で答えます。
- [Typosquat detection: 5 methods and their trade-offs](https://openbait.com/blog/typosquat-detection-practitioner-guide) — Five ways to detect typosquat and lookalike domains (dnstwist, CT logs, NRD feeds, zone files, search monitoring): what each is good at and where it fails.
- [What browser blocklists can and can't do about a phishing site](https://openbait.com/blog/browser-blocklist-phishing-report) — What Safe Browsing, SmartScreen and DNS blocklists do about a phishing site, why they're slow and unpredictable, and what we measured in one timed case.
- [What registrars did with our phishing domain reports](https://openbait.com/blog/registrar-abuse-report-that-works) — Which company controls which layer of a phishing site, why takedowns are slow and hard, and what happened in two of our own cases, mistakes included.

## Policies

- [Privacy](https://openbait.com/privacy)
- [Terms](https://openbait.com/terms)

## Optional

- [Sitemap (XML)](https://openbait.com/sitemap.xml)
- [Blog RSS](https://openbait.com/blog/rss.xml)