The problem
- Attackers copy a DTC catalog into a Shopify theme in a day. The hostname is new. The checkout looks real.
- A generic “cyber threat” feed will not say Shopify. Counsel needs the platform fingerprint to show it is not your store.
- Taking down one host does not end the kit. The next .shop is usually already registered.