Fake Shopify store detector

Fake Shopify store detector for cloned checkouts and .shop hosts

Most live brand clones we see are Shopify-theme shops on buy[brand].shop or official[brand].shop. This detector looks for that kit: cart, checkout, theme.

Run a free scanRequest demo
Live lookalikesScanning
brand-us.shopLive cart
brandco.shopWoo clone
brand-uk.shopShopify
brands.comLogin phish

Illustrative pattern — run your real domain on the free lookalike scanner.

The problem

  • Attackers copy a DTC catalog into a Shopify theme in a day. The hostname is new. The checkout looks real.
  • A generic “cyber threat” feed will not say Shopify. Counsel needs the platform fingerprint to show it is not your store.
  • Taking down one host does not end the kit. The next .shop is usually already registered.

How Obscuryn detects it

  • Lookalike generation focused on commerce TLDs attackers actually use: .shop, .store, .online.
  • Live probes for Shopify CDN, cart, checkout, and payment markup.
  • Keeps clone shops. Deprioritizes parked and unrelated businesses that share a word.

Evidence we collect

  • The live shop URL, screenshot, and why it scored as a storefront.
  • Platform fingerprint (Shopify vs Woo) so the notice is specific.

How takedowns work

  • Draft registrar, host, and Shopify abuse language from the alert. You review and send.
  • Re-scan after the first host drops so the replacement shop does not sit unnoticed.
FAQ

Questions before you scan.

Free lookalike scanner

Enter your domain. See if a clone shop is live.