Every term in a Recon finding, explained.
DMARC, typosquatting, subdomain takeover, DNSSEC — what each one actually means, why it turned up in your scan, and what to do about it.
Brand Security
13 articles
Brand Impersonation on Shopify: How It Works
How to verify a copied storefront, preserve evidence, and choose the right reporting path without overstating what a lookalike proves.
Brand Monitoring for Shopify Brands
What brand monitoring can check, what it cannot, and how Shopify teams should prioritize domain impersonation risks.
Combosquatting and Shopify Brands
Understand combosquatting attacks where criminals combine your Shopify brand with words like 'shop', 'sale', or 'official'.
Cybersquatting: The Law, the Remedies, and What They Cost
What cybersquatting is, how it differs from domain and typosquatting, what the UDRP and ACPA each require, and what recovering a domain actually costs.
Defensive Domain Registration for Shopify Brands
How to choose a small, maintainable set of defensive domains and when monitoring is a better answer than registering another variation.
Domain Hijacking and Shopify Store Protection
How unauthorized control of a domain can affect a Shopify store, which controls reduce the risk, and what to do when something looks wrong.
Domain Locking for Shopify Stores
What registrar and registry locks can protect, what they cannot, and how to use them in a broader domain-security process.
Domain Monitoring for Shopify Brands
How to monitor lookalike domains, distinguish registrations from active abuse, and prioritize the customer routes that need review.
Homograph Attacks on Shopify Domains
Understand how attackers use lookalike characters to create fake Shopify domains that are nearly impossible to detect.
Lookalike Domains: Detection and Response
How to evaluate close domain names, separate a registration from active abuse, and prepare an evidence-based response.
Suspicious Redirects: Detecting Malicious URL Chains
Learn how redirect chains can compromise your Shopify store and how to detect malicious redirects targeting your brand.
UDRP: When a Domain Dispute May Fit
A practical explanation of the UDRP test, what it can change, and when a Shopify brand should speak with domain-dispute counsel.
Typosquatting: How It Works and How to Respond
What typosquatting is, the patterns it follows, how often it happens to Shopify stores, and how to respond with evidence.
Email Security
12 articles
BIMI for Shopify Email
What BIMI does, what it does not prove, and how to evaluate an implementation alongside SPF, DKIM, and DMARC.
Business Email Compromise for Shopify Teams
How business email compromise works, which requests require a second check, and where sender authentication helps.
DKIM Records for Shopify Stores
Understand how DKIM adds digital signatures to prove your Shopify emails are authentic and haven't been tampered with.
DMARC Policy Levels Explained
How to move a Shopify sending domain toward DMARC enforcement without breaking legitimate mail.
DMARC for Shopify Stores
How DMARC uses aligned SPF or DKIM results, how to move from monitoring to enforcement, and what to verify before tightening policy.
Email Authentication for Shopify Stores
How SPF, DKIM, and DMARC work together, how to inventory senders, and how to strengthen policy without breaking legitimate mail.
Email Spoofing on Shopify Stores
Discover how scammers send fake emails from your domain and the steps to stop email spoofing attacks.
Email Deliverability for Shopify
Ensure your Shopify order confirmations and marketing emails reach customers by understanding email deliverability.
MTA-STS: Enforcing Encrypted Email Transport
Learn how MTA-STS ensures your Shopify store's emails are transmitted securely over encrypted connections.
Phishing Protection for Shopify Stores
Learn how to protect your Shopify customers from phishing attacks that use your brand to steal their information.
SPF Lookup Limits: Solving the 10-Lookup Problem
Fix SPF authentication failures caused by too many DNS lookups in your Shopify store's email configuration.
SPF Records for Shopify Email Authentication
Learn how SPF records tell email servers which services can send email on behalf of your Shopify store.
DNS & Infrastructure
13 articles
A Records and CNAME for Shopify
Learn the difference between A records and CNAME records and how to properly configure them for your Shopify store.
CAA Records for Shopify Domains
Learn how CAA records restrict which certificate authorities can issue SSL certificates for your Shopify domain.
DNS Propagation: Why Domain Changes Take Time
Understand why DNS changes don't happen instantly and what to expect when updating your Shopify domain settings.
DNS Security for Shopify Stores
The DNS records and account controls that keep a Shopify domain, email setup, and customer route understandable and maintainable.
DNSSEC for Shopify Domains
Learn how DNSSEC adds cryptographic security to prevent DNS spoofing and protect your Shopify customers.
Mixed Content: Why Shopify Shows 'Not Secure'
Fix mixed content warnings that make your Shopify store appear insecure to customers and hurt your conversion rate.
MX Records: Email Routing for Your Shopify Domain
Understand MX records and how they ensure your Shopify store can receive email from customers and partners.
Shopify Domain Security: A Practical Baseline
A practical checklist for protecting the accounts, DNS records, and customer paths connected to a Shopify domain.
Security Headers for Shopify Stores
Understand HTTP security headers and how they protect your Shopify customers from clickjacking, XSS, and other attacks.
Nameservers: The Foundation of Your Shopify Domain
Understand what nameservers are and how they direct traffic to your Shopify store and email services.
Subdomain Takeover on Shopify
Discover how abandoned subdomains become security vulnerabilities and how attackers exploit them to damage your Shopify brand.
TLS Certificates and HTTPS for Shopify Stores
What the browser security indicator means, how Shopify-managed certificates work, and how to troubleshoot a secure-connection issue.
WHOIS Privacy and Domain Ownership
Protect your personal information by understanding WHOIS privacy and why every Shopify merchant should enable it.
Shopify Operations
3 articles
Custom Domain Setup for Shopify: Complete Guide
Step-by-step guide to connecting your custom domain to Shopify and ensuring it's configured securely.
Domain Expiration for Shopify Stores
Learn the risks of domain expiration and how to protect your Shopify store from going offline unexpectedly.
Third-Party App Security for Shopify Stores
Evaluate the security of Shopify apps and protect your store from data breaches through third-party integrations.
Incident Response
5 articles
Reporting Brand Abuse Against a Shopify Store
How to document a copied store, match the evidence to the right reporting channel, and communicate clearly with affected customers.
Responding to a Suspected Compromised Domain
A practical incident-response sequence for unexpected DNS changes, registrar access loss, and suspicious redirects on a Shopify domain.
DMCA Notices for Copied Shopify Content
When a DMCA notice fits, what evidence to collect, and how to report copied content without overstating what copyright law covers.
Phishing Takedowns for Shopify Stores
How to preserve evidence, identify the relevant provider, and report an observed phishing page without promising a takedown timeline.
Threat Intelligence for Shopify Stores
How to interpret a threat-list finding, investigate the affected customer path, and request review through the relevant provider.
The guides explain the threats. The scan shows which ones are yours.
Every article here describes something Recon checks. Run the free scan to see which apply to your own domain today — no account, no card.