More than 100,000 fake stores are out to steal your card details

**DoppelCart — large-scale fake-shop fraud campaign:** Researchers at Nebty identified a cluster of ~118,787 .shop domains cloning real retailers’ product pages and branding to trick shoppers; many confirmed shops share identical build files and a small set of ecommerce backends. Fraudulent checkout pages capture card numbers, CVVs, billing data, and even one-time bank verification codes transmitted in real time to attacker-controlled servers, enabling immediate payment fraud. Shoppers are advised to verify web addresses, prefer buyer-protected payment methods, and report suspected fraud promptly.