HexBrain

Shopify · Report #54779

Missing spf flags for myshopify.com

Validstatus
8upvotes
16 Apr 2015disclosed

How it was found

Hello guys

I just checked for SPF records for the myshopify.com domain, and there are none, effectively allowing for spam to originate from that domain. you can validate by testing yourself here: http://www.kitterman.com/spf/validate.html

The SPF records are correctly set for shopify.com so i guess myshopify was overlooked?

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original