Shopify brand protection,
explained simply.
Learn about copied stores, suspicious addresses and email settings. Understand the risks and what you can do about them.
Brand Security
16 articles
Brand Impersonation: Types, Examples and How to Spot It
What brand impersonation is, the five forms it takes against online stores, real examples from 2,000 Shopify brands, and how to check if someone is posing as you.
Brand Monitoring for Shopify Brands
What brand monitoring can check, what it cannot, and how Shopify teams should prioritize domain impersonation risks.
Website Cloned or Copied? What It Means and What to Do
What a cloned website is, how scammers copy online stores, how to tell if yours was copied, and what to do next. Written for Shopify merchants.
Combosquatting and Shopify Brands
Understand combosquatting attacks where criminals combine your Shopify brand with words like 'shop', 'sale', or 'official'.
Cybersquatting and Domain Squatting: Law, Remedies and Costs
What cybersquatting is, how it differs from domain and typosquatting, what the UDRP and ACPA each require, and what recovering a domain actually costs.
Defensive Domain Registration for Shopify Brands
How to choose a small, maintainable set of defensive domains and when monitoring is a better answer than registering another variation.
Domain Hijacking and Shopify Store Protection
How unauthorized control of a domain can affect a Shopify store, which controls reduce the risk, and what to do when something looks wrong.
Domain Locking for Shopify Stores
What registrar and registry locks can protect, what they cannot, and how to use them in a broader domain-security process.
Homograph Attacks on Shopify Domains
Understand how attackers use lookalike characters to create fake Shopify domains that are nearly impossible to detect.
Lookalike Domains: Detection and Response
How to evaluate close domain names, separate a registration from active abuse, and prepare an evidence-based response.
Domain Monitoring for Shopify Brands
How to monitor lookalike domains, distinguish registrations from active abuse, and prioritize the customer routes that need review.
Suspicious Redirects: Detecting Malicious URL Chains
Learn how redirect chains can compromise your Shopify store and how to detect malicious redirects targeting your brand.
UDRP: When a Domain Dispute May Fit
A practical explanation of the UDRP test, what it can change, and when a Shopify brand should speak with domain-dispute counsel.
Typosquatting: Examples, Patterns and How to Respond
What typosquatting is, real examples from 2,000 Shopify stores, the patterns it follows, and how to find and respond to a typosquatted domain.
Google Alerts vs Clone Monitoring for Shopify Stores
What a Google Alert on your brand name can catch, what it misses, and how clone monitoring fills the gap. Keep the free alert as one layer.
Reverse Proxy Clones: When a Fake Store Mirrors Yours Live
What a reverse proxy clone is, how it differs from a saved copy of your store, the warning signs, and what to do when one mirrors your Shopify store.
Email Security
12 articles
BIMI for Shopify Email
What BIMI does, what it does not prove, and how to evaluate an implementation alongside SPF, DKIM, and DMARC.
Business Email Compromise for Shopify Teams
How business email compromise works, which requests require a second check, and where sender authentication helps.
Shopify DKIM Setup: Records, Verification and Troubleshooting
Authenticate Shopify and your other email senders with DKIM. Publish the right records, verify signed messages and troubleshoot missing keys.
DMARC Policy Levels Explained
How to move a Shopify sending domain toward DMARC enforcement without breaking legitimate mail.
DMARC for Shopify: Setup, Alignment and Enforcement
Set up DMARC for your Shopify domain, check SPF and DKIM alignment, review reports, and move from monitoring to enforcement without losing legitimate mail.
Email Authentication for Shopify Stores
How SPF, DKIM, and DMARC work together, how to inventory senders, and how to strengthen policy without breaking legitimate mail.
Email Spoofing on Shopify Stores
Discover how scammers send fake emails from your domain and the steps to stop email spoofing attacks.
Email Deliverability for Shopify
Ensure your Shopify order confirmations and marketing emails reach customers by understanding email deliverability.
MTA-STS: Enforcing Encrypted Email Transport
Learn how MTA-STS ensures your Shopify store's emails are transmitted securely over encrypted connections.
Phishing Protection for Shopify Stores
Learn how to protect your Shopify customers from phishing attacks that use your brand to steal their information.
SPF Lookup Limits: Solving the 10-Lookup Problem
Fix SPF authentication failures caused by too many DNS lookups in your Shopify store's email configuration.
Shopify SPF Records: Setup, Verification and Troubleshooting
Set up SPF for your Shopify store, check the senders you use, avoid duplicate records and lookup limits, and verify the published result.
DNS & Infrastructure
13 articles
A Records and CNAME for Shopify
Learn the difference between A records and CNAME records and how to properly configure them for your Shopify store.
CAA Records for Shopify Domains
Learn how CAA records restrict which certificate authorities can issue SSL certificates for your Shopify domain.
DNS Propagation: Why Domain Changes Take Time
Understand why DNS changes don't happen instantly and what to expect when updating your Shopify domain settings.
DNS Security for Shopify Stores
The DNS records and account controls that keep a Shopify domain, email setup, and customer route understandable and maintainable.
DNSSEC for Shopify Domains
Learn how DNSSEC adds cryptographic security to prevent DNS spoofing and protect your Shopify customers.
Mixed Content: Why Shopify Shows 'Not Secure'
Fix mixed content warnings that make your Shopify store appear insecure to customers and hurt your conversion rate.
Nameservers: The Foundation of Your Shopify Domain
Understand what nameservers are and how they direct traffic to your Shopify store and email services.
MX Records: Email Routing for Your Shopify Domain
Understand MX records and how they ensure your Shopify store can receive email from customers and partners.
Security Headers for Shopify Stores
Understand HTTP security headers and how they protect your Shopify customers from clickjacking, XSS, and other attacks.
Shopify Domain Security: A Practical Baseline
A practical checklist for protecting the accounts, DNS records, and customer paths connected to a Shopify domain.
TLS Certificates and HTTPS for Shopify Stores
What the browser security indicator means, how Shopify-managed certificates work, and how to troubleshoot a secure-connection issue.
Subdomain Takeover on Shopify
Discover how abandoned subdomains become security vulnerabilities and how attackers exploit them to damage your Shopify brand.
WHOIS Privacy and Domain Ownership
Protect your personal information by understanding WHOIS privacy and why every Shopify merchant should enable it.
Shopify Operations
3 articles
Custom Domain Setup for Shopify: Complete Guide
Step-by-step guide to connecting your custom domain to Shopify and ensuring it's configured securely.
Domain Expiration for Shopify Stores
Learn the risks of domain expiration and how to protect your Shopify store from going offline unexpectedly.
Third-Party App Security for Shopify Stores
Evaluate the security of Shopify apps and protect your store from data breaches through third-party integrations.
Incident Response
15 articles
Reporting Brand Abuse Against a Shopify Store
How to document a copied store, match the evidence to the right reporting channel, and communicate clearly with affected customers.
Responding to a Suspected Compromised Domain
A practical incident-response sequence for unexpected DNS changes, registrar access loss, and suspicious redirects on a Shopify domain.
Phishing Takedowns for Shopify Stores
How to preserve evidence, identify the relevant provider, and report an observed phishing page without promising a takedown timeline.
How to report a fake store to Cloudflare
Cloudflare often sits in front of a fake store but does not host it. When a Cloudflare abuse report helps, which type to pick, and a copy-paste report.
How to report a fake store to Cosmotown
Report a fake store on a Cosmotown domain. Which report type to pick on Cosmotown's portal, what each asks for, and a copy-paste phishing report.
How to report a fake store to Dynadot
Report a fake store on a Dynadot domain. Use the phishing and fraud route, not DMCA, and include the right evidence. A copy-paste report is included.
How to report a fake store to GoDaddy
Which GoDaddy abuse form fits a fake store, what each form asks for, and a copy-paste report. GoDaddy says it will not send you updates.
How to Report a Fake Shopify Store (and Which Form to Use)
How to check if a fake store runs on Shopify, which Shopify report form fits your case, what each form asks for, and what to report elsewhere.
How to report a fake store to Google Safe Browsing
Report a fake store to Google Safe Browsing so Chrome can warn shoppers. When it fits, what to write, and what Google does and does not say happens next.
How to report a fake store to Hostinger
Report a fake store hosted at Hostinger. The form and email to use, the evidence Hostinger asks for, and copy-paste fraud and copyright reports.
How to report a fake store to Microsoft
Report a fake store to Microsoft as an unsafe site. Which form to use, how to send up to 100 addresses at once, and a copy-paste list.
How to report a fake store to Namecheap
Send a Namecheap abuse report about a fake store. Which address to use, what evidence Namecheap asks for, and a copy-paste phishing report.
How to report a fake .shop domain to the .shop registry
Every .shop domain sits under one registry, GMO Registry. How to report a fake store on a .shop domain, what to include, and a copy-paste report.
How to report a fake store to Spaceship
Report a fake store on a Spaceship domain. The abuse address, the evidence Spaceship asks for, its limits as a registrar, and a copy-paste phishing report.
Threat Intelligence for Shopify Stores
How to interpret a threat-list finding, investigate the affected customer path, and request review through the relevant provider.
Understand the threats. Let Recon keep watch.
Install Recon for ongoing Shopify brand protection: store clones, lookalike addresses and the settings behind your brand.