SHOPIFY BOT TRAFFIC — INCIDENT WORKSHEET
WebDecoy | https://webdecoy.com/blog/shopify-bot-traffic-investigation-checklist/

Window and timezone:
Store symptom:
Affected product, form or route:
Report name and Human or bot filter:
Observed session / checkout / order references:
Payment-provider outcome, if relevant:
Detection evidence and collection source:
Recent campaign, theme, app or consent changes:
Response, owner and time applied:
Normal shopper flow to retest:
Result and remaining uncertainty:

Keep references in your own restricted support system. Do not include raw card
numbers, security codes, access tokens or customer addresses in this worksheet.
A traffic spike, IP location or an empty sensor log alone does not prove abuse.