Our automated security review found no threat indicators on shop.app. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is shop.app safe to use?

shop.app passed our automated security checks with a trust score of 70/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does shop.app have a valid SSL certificate?

Yes. shop.app presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 65 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has shop.app been flagged by antivirus engines?

1 out of 92 antivirus engines in our malware network flagged shop.app as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.

Is shop.app on any phishing or malware blacklists?

No. shop.app is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is shop.app hosted?

shop.app resolves to an IP operated by Shopify, Inc. in CA (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the shop.app report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is shop.app legit or a scam?

Name: Is shop.app legit or a scam?
Item: shop.app
Rating: 4
Author: MalwareTips

Our verdict:Safe· 70/100

SafeSuspiciousDangerous

Official Shopify Shop app domain with legitimate Canadian company registration but thousands of user complaints about fraudulent orders.

Why we trust it

Confirmed ownership by Shopify Inc., a legitimate Canadian public company.Clean results from major browser blocklist feeds.Valid SSL certificate and low IP abuse score.

shop.appScanned 4d ago

Post Facebook

Trust score

SAFE

Heuristics 40·AI 65

Category tags

e-commerce85% AI confidence

Technical red flags (1)

1 of 92 engines flagged

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

Engines flagged this URL

Domain Age

—

Registration date unknown

AI Rating

Safe

Low likelihood · 85% confidence

AI Security Analysis

Advanced threat intelligence

AI Security Analyst

Low scam likelihoodengineMT · Guardiantrust65/100

AI AgentLive web researchVisual inspection

Confidence

The domain shop.app is the official site for Shopify's Shop app used for tracking orders and Shop Pay. Our antivirus network showed only a single flag from one engine while browser blocklists remained clean. Business records confirm ownership by Shopify Inc., a publicly traded Canadian company founded in 2004. The evidence package shows 2,174 complaints on independent review aggregator plus Reddit reports of fake purchase notifications, indicating real user issues with the platform rather than a fake site. No clone indicators or typosquatting were detected, supporting that this is the genuine service.

Full dossier

Analysis complete

Page Content

shop.app serves as the landing and support domain for Shopify's official Shop mobile app on iOS and Android, focused on shopping, order tracking, and payments.

Infrastructure

Valid SSL certificate issued by Google Trust Services with 65 days remaining.
Hosting IP shows low abuse score despite 14 reports.
Single redirect hop with no homoglyph or IDN tricks.

Domain History

Directly tied to Shopify Inc. with confirmed Canadian business registration since 2004 and active status; no evidence of recent creation or suspicious changes.

Web Reputation

Official App Store listings and help resources exist, though independent review aggregator shows a 1.1/5 rating from over 2,000 reviews citing order and fraud-reporting problems.

Risk Factors

Over 2,000 complaints on independent review aggregator about fraudulent orders and difficulty reporting issues.
Reddit users report receiving notifications for purchases they did not make.
One antivirus engine flagged the page as malicious.

Positive Signals

Confirmed ownership by Shopify Inc., a legitimate Canadian public company.
Clean results from major browser blocklist feeds.
Valid SSL certificate and low IP abuse score.
No clone indicators or impersonation of other brands.

AI Recommendation

The site is the genuine Shopify service, but monitor your orders closely and use official support channels if you receive unexpected purchase alerts.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

shop.app

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for shop.app, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · Canada

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

2 scam reports · 2174 complaints · 1 positive

Key findings

7 headline facts from open-web research

shop.app is the official website and domain for Shopify's Shop mobile app (iOS/Android) for shopping, tracking orders, and Shop Pay.
Developed and owned by Shopify Inc., a Canadian multinational e-commerce company founded in 2006 (incorporated 2004), headquartered in Ottawa, Ontario.
App listed on Apple App Store (ID 1223471316) and Google Play by Shopify Inc.; support email help@shop.app; help center at help.shop.app.
Trustpilot page for shop.app shows 2,174 reviews with overall low rating (1.1/5) and multiple complaints about order issues and fraud reporting.
Reddit threads discuss user experiences with the app, including reports of fraudulent orders/notifications and questions about legitimacy of sellers on the platform.
Shopify provides official help articles on identifying/reporting suspected fraud on Shop and content policies.
No evidence of typosquatting or cloning; domain directly associated with legitimate Shopify services.

Scam reports (2)

Direct quotes from public scam databases, forums, and news.

Trustpilotopen
"Unable to report fraud. Ridiculous app . I was sort of ok with them until I got a fraudulent order. No way to report it if it is less than 30 days old."
Redditopen
"Today I got a notification directly (and only) from the Shop app that I had purchased a $700 iphone. I definately did not make this purchase ..."

Positive reviews (1)

Quotes indicating the site is legitimate.

Google Play Storeopen
"Shop the latest trends and stay connected to your favorite brands , all in one place. Turn on push-notifications so you never miss a sale, restock, or order ..."

Business registration

Status: active · Canada

Shopify Inc. incorporated under Canada Business Corporations Act on September 28, 2004; name changed to Shopify Inc. in 2011; public company headquartered in Ottawa, Ontario.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research found 2 scam-related mentions on independent review aggregator and Reddit describing fraudulent orders and fake purchase notifications through the Shop app. independent review aggregator lists 2,174 total complaints with a very low 1.1/5 rating focused on order problems and fraud reporting difficulties. One positive review appears on the Google Play Store from the official developer. Business records confirm Shopify Inc. as the legitimate owner.

Antivirus Engines

Detection matrix · live

1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious0Suspicious60Harmless92Engines

of 92

Chong Lua Dao

Malicious· malicious

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresAug 4, 2026 (65d)

Self-signedNo

Hosting & Technology

HostingShopify, Inc.

Server locationCA

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://shop.app/
2200https://shop.app/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file14

ISPShopify, Inc.

Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on shop.app and not a lookalike like s-hop.app.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

Our automated security review found no threat indicators on shop.app. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Final Verdict

Trust / 100

Final Verdict·shop.app

SAFE

shop.app is the official domain for Shopify's Shop mobile app. Our verdict is safe because it belongs to the verified Canadian company Shopify Inc. with clean blocklist results. Users should still review orders carefully due to widespread complaints.

The site is the genuine Shopify service, but monitor your orders closely and use official support channels if you receive unexpected purchase alerts.

AV engines

AI passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.