Enumerate ShopStack subdomains (merchant storefronts, API endpoints, development environments). - Check for CNAME records pointing to deprovisioned cloud services (Heroku, GitHub Pages, S3, Azure) that could be claimed by an attacker.