Possible DoppelCart-style fake-shop domain churn - repeated .shop DNS responses

Arnold Chan@slaz

•updated Sep 10, 2026•0•0•0

Detects high-frequency DNS query responses for domains ending in '.shop' from external sources within a 10-minute window. This behavior is indicative of domain churn often associated with 'DoppelCart'-style fake e-commerce shop infrastructure.