Phishing sites impersonating Shopify

PhishDestroy has recorded 67 phishing domains impersonating Shopify since 2025-10-15, 10 of them in the last 30 days. The most used registrars are Aceville and GoDaddy.com; the most common TLDs are .com and .cfd. The official Shopify domain is shopify.com: any other site asking for your login or wallet is not Shopify.

67
Domains, all time
10
Last 30 days
40
Online at last check
13
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 12026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 12026-08-05: 02026-08-06: 12026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 12026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 12026-08-25: 02026-08-26: 12026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 12026-09-04: 02026-09-05: 12026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 22026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 22026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 22026-10-08: 02026-10-09: 22026-10-10: 02026-10-11: 12026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 12026-10-20: 02026-10-21: 02026-10-22: 0
Shopify phishing domains detected per day: 18 from 2026-07-25 to 2026-10-22; peak 2.

How to tell a fake Shopify site

Official domain: shopify.com.

Words most often added to the brand in reported domains: shopifybuy, fbshopbk, pify, dizabchichuia, ubuyshops, intemastico, cvsxzaona, cvsxzaons, cvxsazc, cvxsazx.

  • Type the address yourself or use a bookmark; phishing links for Shopify arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Shopify does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Shopify phishing domains

The 50 most recently detected domains impersonating Shopify
DomainFirst detectedStatus at last checkRegistrar
spf757.com.mx2026-10-19OnlineDynadot
zariyawallet.com2026-10-11OnlineGoDaddy.com
stronger-together.us2026-10-09Online—
babybrezzashopify.shop2026-10-09OnlineDynadot
arkora.shop2026-10-07OnlineDynadot
arkaonline.shop2026-10-07OnlineDynadot
sh0pify32.com2026-10-03OnlineDYNADOT
sh0pify99.com2026-10-03OnlineDYNADOT
chinese-shopify.com2026-09-22OnlineRealtime Register
shopifychinese.com2026-09-22OnlineGoDaddy.com
spif394.com2026-09-05OfflineDynadot
uc0ajq-nk.myshopify.com2026-09-03Offline—
bullverse.de2026-08-26Online—
notjustformal.com2026-08-24OnlineTrustname.com
seveice.h5-whatsapp-zn.hl.cn2026-08-20Online万商云集（成都）科技股份有限公司
stream-yard.xyz2026-08-06OfflineGlobal Domain
xajes1-55.myshopify.com2026-08-04OnlineMarkMonitor
shopify.multisfera.pl2026-07-29Onlinenazwa.pl sp. z o.o
china-shopify.com2026-07-06OnlineGoDaddy.com
serrenon.com2026-07-06OnlineNAMECHEAP
confirm-your-order.com2026-07-03OfflineMAT BAO
revokebutton.com2026-06-15OnlineInterNetX
spify677.com2026-05-28Taken downDYNADOT
lxl.com2026-04-28OnlineGoDaddy Online Services Cayman Islands
restaurant-am-waldstadion.de2026-04-16Online—
pinchukgiveaways.com2026-03-27UnknownNICENIC
wetrackedai.com2026-03-18OfflineUltahost
zoomonline.co2026-03-18OnlineGoDaddy.com
ypcyy.com2026-03-07OfflineGname.com
emitir-online.myshopify.com2026-03-06OfflineMarkMonitor
shockify.st2026-03-06OnlineST Registry
shopify-app.co.com2026-02-26Offline—
shopifybuy003.top2026-02-26Offline—
fbshopbk.shop2026-02-26Offline—
shopifybuy002.top2026-02-26Offline—
shopifyjob.cc2026-02-26Taken downDynadot
shopifybuy.top2026-02-26Offline—
thesportsschool.net2026-02-26OfflineNameCheap
workplatform.app2026-02-12OfflineNiceNIC
maxxgmk.myshopify.com2026-02-04Taken downMarkMonitor
ijgzbn-ux.myshopify.com2026-02-04OnlineMarkMonitor
decentralands.live2026-01-23Taken downPublicDomainRegistry.com
toogreattocancel.dk2025-12-27OnlineDANDOMAIN A/S
lochjewelry.com2025-12-18OnlineTucows Domains
gowithsplitconvert.com2025-12-16Taken downPorkbun
shopify-clone-17.netlify.app2025-12-13Taken downNetlify
wordpress.musiclol.me2025-12-12Taken downGANDI
newsletter.retentionx.com2025-12-09OnlineGoDaddy.com
kefiinsights.info2025-12-09OfflineCloudflare
puntonexus.com2025-11-20OnlineMetaregistrar

All 67 Shopify reports

Where they are registered and hosted

Registrars

  1. Aceville6
  2. GoDaddy.com6
  3. Gname.com3
  4. SHOPIFY-NET (ASN: 13335)3
  5. MarkMonitor3
  6. DYNADOT3
  7. Dynadot3
  8. Dynadot2

Top-level domains

  1. .com32
  2. .cfd6
  3. .top5
  4. .shop4
  5. .info2
  6. .net2
  7. .app2
  8. .de2

Hosting networks

  1. CLOUDFLARENET, US13
  2. Cloudflare, Inc.12
  3. TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 6
  4. CLOUDFLARENET - Cloudflare, Inc., US5
  5. AMAZON-AES, US3
  6. FASTLY, US3
  7. Amazon.com, Inc.2
  8. INTEZIONET-AS Intezio Worldwide Limited, GB2

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Shopify; share of all PhishDestroy reports: 0.03%.