Shift4Shop, formerly known as 3Dcart, is an ecommerce software provider for online businesses.
Detection looks at response headers, cookies, script sources, javascript globals across 4 fingerprint rules among the site's public responses.
01
Websites using Shift4Shop
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying Shift4Shop. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- Cookies
- Script sources
- JavaScript globals
03
Example public indicators for Shift4Shop
Illustrative indicators derived from public catalog metadata for Shift4Shop. A live scan may match additional proprietary rules beyond these examples.
- x-powered-by: 3DCART
- 3dvisit
- twlhtrack?.asp3d_upsell.js
- _3d_cart.subtotal
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known Shift4Shop signature (4 rules) at the time of the scan.
- Does not establish
- A sitewide install of Shift4Shop, an active vendor contract, exclusive use, or that Shift4Shop is still in place today.
05
How to check a site for Shift4Shop
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Shift4Shop signals.
- 2. PluginView reads only public responses (response headers, cookies, script sources) and scores them against the Shift4Shop signature set (4 rules).
- 3. Review the confidence score and text explanation for Shift4Shop on the results page.
06
FAQ: detecting Shift4Shop
- Can PluginView detect Shift4Shop without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for Shift4Shop — typically response headers, cookies, script sources, javascript globals. It does not bypass authentication or paywalls.
- What category is Shift4Shop?
- Shift4Shop is classified under CMS, Ecommerce in the PluginView directory.
- How many fingerprint rules cover Shift4Shop?
- This reference currently tracks 4 fingerprint rules across response headers, cookies, script sources, javascript globals. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses Shift4Shop?
- Illustrative public indicators for Shift4Shop include x-powered-by: 3DCART; 3dvisit; twlhtrack?.asp3d_upsell.js. A live scan may match additional proprietary rules beyond these examples.
