Skip to content

Guide

Sneaker Sites Explained: Shopify, Footsites, Nike, Adidas

What Shopify, Footsites, Nike, Adidas, Supreme and big-box sites on a bot's supported list are, plus queues, anti-bot vendors and why support isn't success.

By OOSClub · Last reviewed

Researched from public information

A sneaker bot's "supported sites" list is really a list of store families, each with its own checkout, account system and protection. This guide explains what each family on a typical list is, why bots need a separate module for each one, what queues and anti-bot vendors do, and why "supported" never means you'll check out.

Why sites come in families#

Most stores don't build checkout from scratch. Many run on the same commerce platform or share a parent company, so their pages and checkout steps look alike, and a bot can handle them with one module. An AIO ("all in one") bot is one tool that covers many of these; Netacea, a bot-defense company, describes AIO bots as buying from several websites rather than one. Our guide to AIO bots goes deeper.

Each family still needs its own work, because release formats, account systems and protection differ. Bot makers' own docs show this: Refract's monitor setup, for example, takes a different product ID for each store, such as an Amazon ASIN, a Target TCIN or a Best Buy SKU. When a store changes its checkout, the module for that family can stop working until the bot maker updates it.

The main site families#

Shopify boutiques#

Shopify powers many independent stores, and bot makers usually list Shopify sites as one group. But two Shopify stores can behave very differently, because each merchant chooses its own settings and apps. Shopify Plus stores can turn on Shopify's bot protection, which adds a reCAPTCHA or hCaptcha challenge at checkout, blocks bots from auto-completing checkout by default, and can be scheduled for a drop of up to 60 minutes on up to 500 products.

Footsites#

"Footsites" is the community's name for the Foot Locker family. DICK'S Sporting Goods completed its acquisition of Foot Locker on September 8, 2025, and said it would keep operating Foot Locker, Kids Foot Locker, Champs Sports, WSS and atmos. For hyped launches, Foot Locker uses reservations open only to FLX Rewards members, selected by a weighted algorithm. It says people using bots aren't eligible.

Nike and SNKRS#

Nike runs many hyped launches as draws in its SNKRS app, with first-come releases and invite-only offers around them. Nike says bots make up about 10% to 50% of entries on some launches and that it removes most of them. Its Terms of Sale let it cancel orders placed with automated ordering software. Our guide to Nike SNKRS covers each release type.

Adidas Confirmed#

Adidas releases hyped products through its CONFIRMED app. An adidas post names three mechanics: Draw, Queue and Invite, with some products sold first come, first served instead. Accounts must be verified, and adidas says it checks payment info, phone numbers, addresses and location data to stop people gaming the system.

Supreme#

Supreme sells new items on its own webstore first come, first served, and its FAQ says it sells only one style per product. Bots have targeted it for years: Glossy reported in 2019 that a $20 Supreme bot app ranked third among trending paid apps on Apple's App Store. Our guide to how Supreme drops work covers the schedule.

Salesforce Commerce Cloud sites#

Some large brands run their stores on Salesforce Commerce Cloud; Salesforce's own case study says PUMA uses it. Sites on the same platform can share checkout structure, which is why a bot may list them under one module.

Big-box retail#

Target, Walmart and Best Buy matter more for Pokémon, collectibles and electronics than for sneakers, but bots aimed at retail reselling often list them, each as its own module. Refract, for example, uses a different product ID for each of them. Kasada, which sells bot defense to retailers, lists sneakers, collectibles, trading cards and cameras among the products bots target.

Queues and waiting rooms#

On big drops, many sites hold shoppers in a queue or waiting room and let a set number through at a time, which spreads out the load on the site. Adidas lists Queue as one of its release mechanics, and in 2017 Sneaker Freaker reported it trying a questionnaire that set queue positions by response speed. How a site assigns places varies and often isn't published. OOSClub doesn't cover ways to skip or game a queue; doing so breaks store terms.

Anti-bot protection vendors#

Behind many sites is a bot-management product that tries to tell real shoppers from automated traffic. The names you'll see in bot docs and Discord channels:

  • Akamai: Bot Manager, which Akamai says detects bots at the edge using AI models for behavior analysis and browser fingerprinting. It names inventory hoarding as a problem sneaker companies face.
  • Kasada: bot defense that lists ecommerce and retail among its industries and says it stops bots without CAPTCHAs.
  • HUMAN: HUMAN Security merged with PerimeterX in 2022, and the combined company uses the HUMAN name, so "PerimeterX" in older docs means HUMAN today.
  • DataDome: AI-based, real-time bot protection for websites, mobile apps and APIs, with scalping and inventory hoarding among the uses it lists.
  • Cloudflare: Bot Management uses machine learning across Cloudflare's network and includes defense against inventory hoarding bots.

Sites can change vendors and settings at any time. OOSClub explains what these systems are, never how to get around them.

Protection also looks at connections, which is why proxies matter for bots; our guide to proxy types explains the differences.

Why "supported" doesn't mean success#

A supported site means the bot has a module for it. It says nothing about whether you'll check out:

  • Stock is small. Thousands of real shoppers and other bots chase the same pairs.
  • Protection changes. A module that worked last week can fail on drop day.
  • Some releases aren't races. Draws and reservations pick from entries, and Foot Locker says bot users aren't eligible at all.
  • Orders can be cancelled after checkout. Nike's terms let it cancel bot-placed orders, and other stores have similar rules.
  • Success claims are the seller's. When a bot maker posts checkouts or success rates, that's its marketing, not a measure of what you'll get.

Our guide to how sneaker bots work covers tasks, accounts and proxies in more detail.

Sites on OOSClub#

OOSClub bot listings show the sites each bot says it supports, as the bot maker states them, alongside price and refund terms. Compare them on the bots hub, where you can also narrow the list to Shopify bots.

Frequently asked questions

What are Footsites?

Footsites is the community's name for the Foot Locker family of stores. Since DICK'S Sporting Goods completed its acquisition of Foot Locker in September 2025, that portfolio has included Foot Locker, Kids Foot Locker, Champs Sports, WSS and atmos. Bots group them because the sites share a parent company.

Why do sneaker bots have different modules for each site?

Each store family runs its own checkout, account system, release format and protection. A module is the part of a bot written for one of those families, so a bot that works on Shopify stores still needs separate work for Nike, Footsites or Adidas.

If a bot supports a site, will it check out there?

Not necessarily. Support means the bot has a module for that site, not that it will succeed. Stock is limited, protection changes, some releases are draws that weigh other factors, and stores can cancel orders after checkout when their terms are broken.

What anti-bot systems do sneaker sites use?

Retailers use bot-management products from vendors such as Akamai, Kasada, HUMAN (which merged with PerimeterX in 2022), DataDome and Cloudflare, plus their own checks. Which vendor a site uses can change, and OOSClub doesn't cover how to get around any of them.

Sources

  1. Refract's monitor setup takes a different product ID per store (Amazon ASIN, Walmart PID, Target TCIN, Best Buy SKU, Apple product URL), with an optional whole-dollar max price, and recommends at least one monitor proxy per input. help.refractbot.com, accessed
  2. Netacea describes an AIO bot as a sneaker bot that buys from several websites rather than one, making fast requests to multiple sites through a range of proxies. netacea.com, accessed
  3. Salesforce's PUMA customer story lists Commerce Cloud among the products PUMA uses and says PUMA used Salesforce to relaunch its mobile sites. www.salesforce.com, accessed
  4. Shopify's bot protection, for Shopify Plus stores, adds a reCAPTCHA or hCaptcha challenge at checkout, blocks bots from auto-completing checkout by default, and can be scheduled for up to 60 minutes on up to 500 products. help.shopify.com, accessed
  5. DICK'S Sporting Goods completed its acquisition of Foot Locker on September 8, 2025, and said it will continue to operate Foot Locker, Kids Foot Locker, Champs Sports, WSS and atmos. www.streetinsider.com, accessed
  6. Foot Locker Canada says launch reservations use a weighted algorithm, are open only to FLX members in good standing, and that people using bots aren't eligible for selection. help.footlocker.ca, accessed
  7. Nike's US Terms of Sale (December 2025) let Nike cancel orders placed with automated ordering software, and Nike's Terms of Use (October 2025) bar automated technology not approved by Nike. agreementservice.svs.nike.com, accessed
  8. Nike says bot attacks can make up about 10% to 50% of launch entries and that it removes the majority of them. www.nike.com, accessed
  9. An adidas blog post (May 2022) names Draw, Queue and Invite as CONFIRMED release mechanics, says accounts must be verified, and says adidas checks payment info, phone numbers, addresses and location data to stop people gaming the system. www.adidas.ca, accessed
  10. Sneaker Freaker reported in June 2017 that adidas was weaving a questionnaire into the CONFIRMED buying process alongside its captcha, with queue positions based on how quickly people responded. www.sneakerfreaker.com, accessed
  11. Glossy reported in 2019 that a $20 Supreme bot app called Supbot ranked third among trending paid apps on Apple's App Store. www.glossy.co, accessed
  12. Kasada offers bot defense for ecommerce and retail, and in November 2025 listed sneakers, Labubu and other collectibles, trading cards and cameras among products targeted by bots. www.kasada.io, accessed
  13. Cloudflare describes Bot Management as machine-learning bot detection at its network edge, including e-commerce defense against inventory hoarding bots, and offers Turnstile as a CAPTCHA alternative. www.cloudflare.com, accessed
  14. HUMAN Security and PerimeterX announced a merger on July 27, 2022, with the combined company operating under the HUMAN name. www.businesswire.com, accessed
  15. Akamai says Bot Manager detects and mitigates bots at the edge, using AI models for behavior analysis and browser fingerprinting, and describes inventory hoarding as a problem sneaker companies face. www.akamai.com, accessed
  16. DataDome says its AI models give real-time bot protection for websites, mobile apps and APIs, and lists scalping and inventory hoarding among its use cases. datadome.co, accessed
  17. Kasada says it stops sophisticated bots without CAPTCHAs and lists eCommerce and retail among the industries it serves. www.kasada.io, accessed
  18. Supreme's US FAQ says products on its site are sold first come, first served and that it can sell only one style per product. us.supreme.com, accessed