Nebty Links 119,000 Domains to DoppelCart Scam, With 105,000 Fake Shops Still Active
Updated
Updated · Fox News · Sep 18
Nebty Links 119,000 Domains to DoppelCart Scam, With 105,000 Fake Shops Still Active
1 articles · Updated · Fox News · Sep 18
Summary
About 119,000 domains have been tied to DoppelCart, a fake-store network Nebty says is the largest publicly documented cluster of its kind; more than 105,000 shops were still active in the latest scans.
Nebty found 96% of confirmed shops shared identical build files and pointed to 27 commerce backends, while checkout code captured card numbers, addresses and even one-time bank verification codes in real time.
The operation impersonates 44,182 brands and often copies real product catalogs and assets, using discounts of up to 65% to lure shoppers into entering payment details.
Most linked domains used .shop addresses—118,787 in Nebty's September snapshot, or 2.72% of the sampled .shop zone—while the majority of the cluster remained online despite outreach to a key hosting provider.
The findings add to warnings that AI-powered phishing and cloned storefronts are making scam sites harder to spot, exposing shoppers and legitimate brands to fraud, charge disputes and customer-service fallout.
With 105,000 fake shops active, what hidden vulnerabilities in our internet infrastructure allow these massive AI scams to thrive undetected?
How are AI syndicates bypassing real-time bank security, and could your favorite online store secretly be a DoppelCart clone?
If scammers share identical backends, why haven't global authorities exploited this centralized weakness to destroy the entire DoppelCart network?
Inside DoppelCart: How a 119,000-Domain Fake Shop Network Is Redefining E-Commerce Fraud and Overwhelming Defenses
Overview
The DoppelCart network marks a new era of industrial-scale e-commerce fraud, operating over 119,000 fake online shops—mainly on the .SHOP domain—and impersonating more than 44,000 brands. Its highly automated infrastructure lets criminals manage thousands of convincing storefronts with minimal effort, using real-time data theft and aggressive discounts to lure victims. Hosting providers’ refusal to act enables DoppelCart to quickly replace taken-down domains, overwhelming both consumers and brands. The profits from these scams not only harm shoppers and businesses but also help fund serious global crimes, highlighting the urgent need for stronger, coordinated action across the digital economy.