# DoppelCart investigation database

> A public evidence record from nebty covering more than 119,000 domains associated with the DoppelCart fake-shop network.

The canonical database page is https://investigations.nebty-id.com/doppelcart.

Primary analysis:
- English: https://nebty-id.com/en/doppelcart-fake-shop-network/
- German: https://nebty-id.com/de/doppelcart-fakeshop-netzwerk/

Machine-readable access:
- OpenAPI description: https://investigations.nebty-id.com/openapi.json
- Search and list rows: https://investigations.nebty-id.com/doppelcart/api/rows
- Current statistics: https://investigations.nebty-id.com/doppelcart/api/stats
- Facet values: https://investigations.nebty-id.com/doppelcart/api/facets
- One domain: https://investigations.nebty-id.com/doppelcart/api/detail/{domain}

The rows endpoint accepts q, page, size, sort, dir, brand, verdict, confidence, live,
registrar, brand_source, named, and has_contact as query parameters. Responses are JSON and
read endpoints permit cross-origin access.

Interpretation cautions:
- "fleet_confirmed" confirms cluster membership from infrastructure and recurring shop-software characteristics; it does not mean that every shop was simultaneously live.
- Brand attribution comes from captured page titles, support addresses, or domain strings and can be wrong. Inspect brand_source, confidence, and the evidence on the individual record.
- Shared technical characteristics do not establish that every shop is controlled by the same person or organisation.
- The database can be expanded or corrected after publication.