Observed arrival · 2026-10-20
Am I Hijacked? checks Shopify checkout risk
A read-only checker for Shopify storefronts, plus an in-browser inspector for files such as HAR captures and source code.
- For
- Shopify merchants and developers investigating checkout hijacking
- Worth noticing
- The page separates app matches from proof of compromise and warns that sanitized HAR files can still contain sensitive material.
Field notes
The storefront scan is described as read-only and requires no Shopify access; file inspection accepts HAR, HTML, JS, JSON, TXT, and Liquid, with separate size limits for HAR and source files. The page says supplied files stay on the device, while cautioning that even sanitized HAR exports may retain sensitive URLs or response text. Its coverage notes distinguish documented malicious destinations and campaign indicators from runtime behavior the public scan does not execute.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue