Bot and Spy Extension Detection

Bots account for ~42 % of internet traffic in 2026. The dangerous ones for Shopify are spy extensions and scrapers harvesting your product data.

Enable bot detection

1. Open Bot Killer.
2. Toggle these on:

• Auto-block visitors uses Proxy/VPN
• Auto block Tor
• Spy extensions blocker
• Auto-block spam bots

1. Save.

Spy extensions detected

Shieldy identifies the fingerprint of:

• PPSpy — Shopify pricing/sales tracking
• AliHunter — AliExpress reverse-lookup
• Minea — ad spy across platforms
• Koala Inspector — theme/app stack analysis
• SimilarWeb extension — traffic metrics
• Shophunter — bestseller estimation

User-agent blocking

Common bot UAs blocked by default:

• python-requests, Scrapy, node-fetch
• Apache-HttpClient, PostmanRuntime
• Wget, curl (default settings)
• HeadlessChrome (without UI signals)

You can add custom UA patterns under Block rules → User agent.

Search engine safety

Auto-whitelisted by default:

• Googlebot
• Bingbot
• Applebot
• DuckDuckBot
• Slackbot, LinkedInBot, Twitterbot, facebookexternalhit

Never block these — your store will disappear from search.

Decoy mode (Premium+)

Instead of blocking spy extensions, feed them fake data:

1. Open Spy extensions blocker → Decoy mode.
2. Toggle ON.

Competitors see randomized fake bestseller lists, fake inventory counts, and fake ad creatives — wasting their research time.

Rate limiting

Auto-applied to suspicious traffic patterns:

• More than 50 page views in 60 seconds → flagged
• Same IP with 5+ different user agents → flagged
• Failed payment attempts > 3 in 10 minutes → blocked

See also

• VPN / Proxy blocker
• Content protection
• Visitor Analytics