OpenBait

Terms of Service

The terms that apply when you use OpenBait.

Last updated: October 2026

This is an English translation of the Japanese original. If the two differ, the Japanese version governs.

Thank you for using OpenBait. Please read these terms before you use the service. By using the service, you agree to them.

1. The service

OpenBait helps brands deal with phishing sites, fake stores and impersonation that use their name. It includes:

  • Report page: a report desk under your brand's name, where your customers paste a suspicious URL and get a verdict on the spot
  • Verdicts and records: fetching and analyzing sites that are reported or detected, and recording confirmed ones as cases
  • Reporting and takedown: reports to browser blocklists, hosting providers, registrars and platforms, and tracking what happens next (reports to hosting providers and registrars are sent only after you confirm them)
  • Monitoring: lookalike domains and impersonating accounts found through CT logs, DNS, search and social networks, and canary tokens

2. Accounts

2.1 Creating an account

You need an account to use the service. You agree to:

  • give accurate and complete registration information
  • keep your account information up to date
  • keep your sign-in credentials secure
  • take responsibility for all activity under your account

2.2 Account security

You are responsible for keeping your account secure. If you find any unauthorized use, contact us immediately.

3. Acceptable use

3.1 Permitted use

You may use the service to:

  • protect brands and domains that you own or have the right to protect
  • detect phishing that targets your company
  • carry out lawful security research and defense
  • use the response features: start and manage reporting, takedown and tracking only for phishing sites and impersonating accounts that OpenBait has confirmed, or for targets you have the right to protect

3.2 Prohibited use

You may not use the service for:

  • anything illegal
  • infringing anyone else's intellectual property
  • cyberattacks or other malicious activity
  • interfering with or disrupting the service
  • unauthorized access to other people's systems
  • filing false reports against, disrupting, or starting response workflows against legitimate websites, official accounts, or unrelated third parties

4. Intellectual property

4.1 Our rights

We own the intellectual property in OpenBait and all of its components, including but not limited to the software, documentation and trademarks.

4.2 Your rights

You keep all rights to the content you upload or create through the service. You grant us a limited license to use it as needed to provide the service.

5. Payment

5.1 Fees

Fees are based on the prices on our website. We may change them, and we will tell you in advance.

The monthly takedown limit is counted per fake-site domain you ask us to take down, from the moment we send the first report about that domain. If, fourteen days after the first report, the takedown has had no effect (the site has not gone offline, and no browser warning has appeared since we started work on it), we credit it back to your monthly limit and keep working on it. Otherwise, what happens to the site afterwards does not change the count. The monthly limit resets on the 1st of each month (UTC), regardless of your billing date. The Free plan includes no takedowns. If you confirm a site after the limit is used up, we send it to the browser blocklists only. On any plan, you can add a takedown for that site for $199, paid once by card, and we start once the payment has gone through. A plan upgrade takes effect once the payment of the difference has gone through, and a new billing period starts that day. The Subscription & Refund Policy sets out the details.

5.2 Payment methods

We accept major credit cards and other electronic payment methods. Payments are processed securely by a third-party payment processor.

5.3 Refunds

You can request a full refund before we send the first report for you, and a refund of your first payment if none of the sites we take on has had any effect 30 days after that report. The Subscription & Refund Policy sets out the full terms.

6. Availability

6.1 Service level

We work to keep the service running, but we do not guarantee uninterrupted service and are not liable for interruptions.

6.2 Maintenance

We may carry out maintenance, during which the service may be temporarily unavailable. We give advance notice of planned maintenance where we can.

7. Disclaimer

7.1 Provided "as is"

To the fullest extent permitted by law, the service is provided "as is" and "as available", without any express or implied warranty.

7.2 No guarantee of results

We work to provide an accurate and effective service, but we do not guarantee that:

  • the service will meet all of your needs
  • the service will be uninterrupted, timely, secure or error-free
  • every phishing threat will be detected or dealt with
  • a site we report will be taken offline or deleted
  • a browser warning will appear, or stay in place

The status shown on a case is what our checks found at the time. Takedown statuses explains each one.

8. Limitation of liability

To the fullest extent permitted by law, we are not liable for indirect, incidental, special, consequential or punitive damages, even if we have been told that such damages were possible.

9. Indemnity

You agree to indemnify and hold us harmless against any claim, loss or cost arising from your breach of these terms or your misuse of the service.

10. Termination

10.1 By you

You can cancel your subscription and stop using the service at any time from your account settings.

10.2 By us

We may suspend or close your account if you breach these terms.

10.3 Effect of termination

After termination you will no longer have access to the service or the related data. We delete your organization's data within 90 days of termination, except information the law requires us to keep.

11. Changes to these terms

We may update these terms from time to time. We will tell you about important changes by email or in the service. By continuing to use the service, you agree to the updated terms.

12. Governing law

These terms are governed by the laws of Japan. The Tokyo District Court has exclusive jurisdiction as the court of first instance for any dispute.

13. Contact

For questions about these terms, contact:

Thank you for choosing OpenBait.