# Phishing sites impersonating Shopify PhishDestroy has recorded 67 phishing domains impersonating Shopify since 2025-10-15, 10 of them in the last 30 days. The most used registrars are Aceville and GoDaddy.com; the most common TLDs are .com and .cfd. The official Shopify domain is shopify.com: any other site asking for your login or wallet is not Shopify. 67Domains, all time 10Last 30 days 40Online at last check 13Confirmed takedowns ## New domains in the last 90 days Shopify phishing domains detected per day: 18 from 2026-07-25 to 2026-10-22; peak 2. ## How to tell a fake Shopify site Official domain: shopify.com. Words most often added to the brand in reported domains: shopifybuy, fbshopbk, pify, dizabchichuia, ubuyshops, intemastico, cvsxzaona, cvsxzaons, cvxsazc, cvxsazx. - Type the address yourself or use a bookmark; phishing links for Shopify arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Shopify does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Shopify phishing domains The 50 most recently detected domains impersonating Shopify Domain | First detected | Status at last check | Registrar | [spf757.com.mx](https://phishdestroy.io/domain/spf757.com.mx/) | 2026-10-19 | Online | Dynadot | [zariyawallet.com](https://phishdestroy.io/domain/zariyawallet.com/) | 2026-10-11 | Online | GoDaddy.com | [stronger-together.us](https://phishdestroy.io/domain/stronger-together.us/) | 2026-10-09 | Online | — | [babybrezzashopify.shop](https://phishdestroy.io/domain/babybrezzashopify.shop/) | 2026-10-09 | Online | Dynadot | [arkora.shop](https://phishdestroy.io/domain/arkora.shop/) | 2026-10-07 | Online | Dynadot | [arkaonline.shop](https://phishdestroy.io/domain/arkaonline.shop/) | 2026-10-07 | Online | Dynadot | [sh0pify32.com](https://phishdestroy.io/domain/sh0pify32.com/) | 2026-10-03 | Online | DYNADOT | [sh0pify99.com](https://phishdestroy.io/domain/sh0pify99.com/) | 2026-10-03 | Online | DYNADOT | [chinese-shopify.com](https://phishdestroy.io/domain/chinese-shopify.com/) | 2026-09-22 | Online | Realtime Register | [shopifychinese.com](https://phishdestroy.io/domain/shopifychinese.com/) | 2026-09-22 | Online | GoDaddy.com | [spif394.com](https://phishdestroy.io/domain/spif394.com/) | 2026-09-05 | Offline | Dynadot | [uc0ajq-nk.myshopify.com](https://phishdestroy.io/domain/uc0ajq-nk.myshopify.com/) | 2026-09-03 | Offline | — | [bullverse.de](https://phishdestroy.io/domain/bullverse.de/) | 2026-08-26 | Online | — | [notjustformal.com](https://phishdestroy.io/domain/notjustformal.com/) | 2026-08-24 | Online | Trustname.com | [seveice.h5-whatsapp-zn.hl.cn](https://phishdestroy.io/domain/seveice.h5-whatsapp-zn.hl.cn/) | 2026-08-20 | Online | 万商云集（成都）科技股份有限公司 | [stream-yard.xyz](https://phishdestroy.io/domain/stream-yard.xyz/) | 2026-08-06 | Offline | Global Domain | [xajes1-55.myshopify.com](https://phishdestroy.io/domain/xajes1-55.myshopify.com/) | 2026-08-04 | Online | MarkMonitor | [shopify.multisfera.pl](https://phishdestroy.io/domain/shopify.multisfera.pl/) | 2026-07-29 | Online | nazwa.pl sp. z o.o | [china-shopify.com](https://phishdestroy.io/domain/china-shopify.com/) | 2026-07-06 | Online | GoDaddy.com | [serrenon.com](https://phishdestroy.io/domain/serrenon.com/) | 2026-07-06 | Online | NAMECHEAP | [confirm-your-order.com](https://phishdestroy.io/domain/confirm-your-order.com/) | 2026-07-03 | Offline | MAT BAO | [revokebutton.com](https://phishdestroy.io/domain/revokebutton.com/) | 2026-06-15 | Online | InterNetX | [spify677.com](https://phishdestroy.io/domain/spify677.com/) | 2026-05-28 | Taken down | DYNADOT | [lxl.com](https://phishdestroy.io/domain/lxl.com/) | 2026-04-28 | Online | GoDaddy Online Services Cayman Islands | [restaurant-am-waldstadion.de](https://phishdestroy.io/domain/restaurant-am-waldstadion.de/) | 2026-04-16 | Online | — | [pinchukgiveaways.com](https://phishdestroy.io/domain/pinchukgiveaways.com/) | 2026-03-27 | Unknown | NICENIC | [wetrackedai.com](https://phishdestroy.io/domain/wetrackedai.com/) | 2026-03-18 | Offline | Ultahost | [zoomonline.co](https://phishdestroy.io/domain/zoomonline.co/) | 2026-03-18 | Online | GoDaddy.com | [ypcyy.com](https://phishdestroy.io/domain/ypcyy.com/) | 2026-03-07 | Offline | Gname.com | [emitir-online.myshopify.com](https://phishdestroy.io/domain/emitir-online.myshopify.com/) | 2026-03-06 | Offline | MarkMonitor | [shockify.st](https://phishdestroy.io/domain/shockify.st/) | 2026-03-06 | Online | ST Registry | [shopify-app.co.com](https://phishdestroy.io/domain/shopify-app.co.com/) | 2026-02-26 | Offline | — | [shopifybuy003.top](https://phishdestroy.io/domain/shopifybuy003.top/) | 2026-02-26 | Offline | — | [fbshopbk.shop](https://phishdestroy.io/domain/fbshopbk.shop/) | 2026-02-26 | Offline | — | [shopifybuy002.top](https://phishdestroy.io/domain/shopifybuy002.top/) | 2026-02-26 | Offline | — | [shopifyjob.cc](https://phishdestroy.io/domain/shopifyjob.cc/) | 2026-02-26 | Taken down | Dynadot | [shopifybuy.top](https://phishdestroy.io/domain/shopifybuy.top/) | 2026-02-26 | Offline | — | [thesportsschool.net](https://phishdestroy.io/domain/thesportsschool.net/) | 2026-02-26 | Offline | NameCheap | [workplatform.app](https://phishdestroy.io/domain/workplatform.app/) | 2026-02-12 | Offline | NiceNIC | [maxxgmk.myshopify.com](https://phishdestroy.io/domain/maxxgmk.myshopify.com/) | 2026-02-04 | Taken down | MarkMonitor | [ijgzbn-ux.myshopify.com](https://phishdestroy.io/domain/ijgzbn-ux.myshopify.com/) | 2026-02-04 | Online | MarkMonitor | [decentralands.live](https://phishdestroy.io/domain/decentralands.live/) | 2026-01-23 | Taken down | PublicDomainRegistry.com | [toogreattocancel.dk](https://phishdestroy.io/domain/toogreattocancel.dk/) | 2025-12-27 | Online | DANDOMAIN A/S | [lochjewelry.com](https://phishdestroy.io/domain/lochjewelry.com/) | 2025-12-18 | Online | Tucows Domains | [gowithsplitconvert.com](https://phishdestroy.io/domain/gowithsplitconvert.com/) | 2025-12-16 | Taken down | Porkbun | [shopify-clone-17.netlify.app](https://phishdestroy.io/domain/shopify-clone-17.netlify.app/) | 2025-12-13 | Taken down | Netlify | [wordpress.musiclol.me](https://phishdestroy.io/domain/wordpress.musiclol.me/) | 2025-12-12 | Taken down | GANDI | [newsletter.retentionx.com](https://phishdestroy.io/domain/newsletter.retentionx.com/) | 2025-12-09 | Online | GoDaddy.com | [kefiinsights.info](https://phishdestroy.io/domain/kefiinsights.info/) | 2025-12-09 | Offline | Cloudflare | [puntonexus.com](https://phishdestroy.io/domain/puntonexus.com/) | 2025-11-20 | Online | Metaregistrar | [All 67 Shopify reports](https://phishdestroy.io/domain/?brand=Shopify) ## Where they are registered and hosted ### Registrars - [Aceville](https://phishdestroy.io/registrar/aceville/)6 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)6 - [Gname.com](https://phishdestroy.io/registrar/name-com/)3 - SHOPIFY-NET (ASN: 13335)3 - [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)3 - [DYNADOT](https://phishdestroy.io/registrar/dynadot/)3 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)3 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)2 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)32 - [.cfd](https://phishdestroy.io/tld/cfd/)6 - [.top](https://phishdestroy.io/tld/top/)5 - [.shop](https://phishdestroy.io/tld/shop/)4 - [.info](https://phishdestroy.io/tld/info/)2 - [.net](https://phishdestroy.io/tld/net/)2 - [.app](https://phishdestroy.io/tld/app/)2 - [.de](https://phishdestroy.io/tld/de/)2 ### Hosting networks - CLOUDFLARENET, US13 - Cloudflare, Inc.12 - TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 6 - CLOUDFLARENET - Cloudflare, Inc., US5 - AMAZON-AES, US3 - FASTLY, US3 - Amazon.com, Inc.2 - INTEZIONET-AS Intezio Worldwide Limited, GB2 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Shopify; share of all PhishDestroy reports: 0.03%. Canonical: https://phishdestroy.io/brand/shopify/