Skip to main content

Keep your Shopify domain working.

Recon keeps checking security blocklists, HTTPS certificates and your domain settings, so you can spot problems that put shoppers off.

Illustrative Recon Trust interface with fictional Northfell data

The same product page, before and after a listing

Nothing changed on your store. Something changed in a list your customer's browser checks first.

Chrome · your product page Loads normally

Yourbrand | Best Sellers

https://yourbrand.com/collections/best-sellers

Safe Browsing
Clear
Certificate
Valid · 61 days left
Security headers
Present
Chrome · the same URL, later Warning screen · customer stops here

Deceptive site ahead

https://yourbrand.com/collections/best-sellers

Safe Browsing
Listed
Certificate
Valid · irrelevant now
Security blocklists
Listed

A browser warning can stop a shopper before they reach your store.

Recon checks security blocklists and certificates daily on Paid and weekly on Free. Findings appear in your Shopify admin.

Illustrative example · synthetic data · demonstration domains are fictional

What Recon reads outside your Shopify admin

Safe Browsing
Whether Google, and the browsers that use its list, currently consider your domain deceptive. This is the signal that produces the red screen.
Clear
Public blocklists
Threat-intelligence feeds and reputation providers that ad platforms and mailbox providers consult before they let you spend or send.
Clear
Certificate
Certificate validity and expiry. An invalid certificate can put a browser warning between your shoppers and your store.
61 days left
Security headers
HSTS, content-type and frame protections. Missing ones rarely break a page, and they are what a scanner grades you on.
Two missing
DNS infrastructure
DNSSEC, nameservers and registrar. A change here is often the first visible sign that somebody else has access.
Unchanged

Keep your store reachable

A customer can have the correct address and still be stopped before reaching your products. A browser warning, an invalid HTTPS certificate or an expired domain can interrupt that visit. Domain health checks help you review those problems alongside the copied stores and suspicious addresses Recon finds.

The checks describe specific signals, not an overall promise that your business is safe. A valid certificate means the checked connection can use HTTPS. It does not prove that a site is legitimate. A clear blocklist result means the checked lists did not flag the domain at that time. It does not rule out every threat.

Security blocklists and HTTPS checks

Recon checks your domain against the security lists supported by the app, including Google Web Risk, SURBL and URLhaus. When a domain is listed, review the recorded result and the provider’s explanation. A listing can lead to warnings or filtering in systems that use that source, but different services may use different data.

The app also checks HTTPS certificate validity and expiry. An invalid or expired certificate can cause browsers to warn visitors. On a Shopify-hosted store, Shopify manages much of the certificate setup, so the right next step may be to inspect domain connection status in Shopify rather than trying to replace a certificate yourself.

Know when domain renewal needs attention

Your domain registration is separate from your Shopify subscription. Recon reads available registration details and highlights an approaching expiry date. Use the finding as a prompt to check your registrar account, renewal settings, payment method and contact email. The registrar is the source of truth for the renewal transaction.

An approaching date does not automatically mean your store will go offline. You might have auto-renew enabled, and public registry details can lag behind a change. Confirm renewal with the provider, then let a later check confirm the public record. Keep access to the registrar account with the people responsible for the store.

Review the finding before taking action

Open the domain health page to see the check, its result and any next step. Expand the technical details when you need the certificate issuer, dates, security-list results or registrar information. Your team can use those details to investigate with Shopify, your domain provider or the service that published a warning.

If your address appears on a security list, check the store for the reported issue before requesting a review. Record the affected URL and the provider’s response. A removal request is not a completed removal, and different lists can update at different times. Recon keeps later findings in the same place for follow-up.

A regular check as your store grows

Domain problems can appear after a new connection, a renewal issue or a reported security incident. Recon repeats these checks on scheduled sweeps, with weekly checks on Free and daily checks on Paid. You can review results in the app and use the plan’s digest to keep your team informed.

These checks complement lookalike and email monitoring. A working domain can still have a clone elsewhere, and an unflagged storefront can still have email records that need attention. Recon keeps the findings separate so a green result in one area does not hide a problem in another.

Questions before you install

Does Recon prevent my domain from expiring?

No. Recon shows available expiry information so you can check renewal with your registrar. You remain responsible for the registration, payment method and renewal settings.

Does a valid HTTPS certificate prove my store is safe?

No. It is one connection check. A copied or malicious site can also have a valid certificate. Review certificate results alongside the other evidence.

Can Recon check a myshopify.com domain’s renewal?

No. Shopify controls that domain. Use a custom domain you own for the domain health checks and manage its renewal at your registrar.

Recon keeps watch. You run your store.