Three addresses, one shop

Why everyone writes shinyflakes.com

Because it is the tidier string, and because the brand as most people met it - through the Netflix documentary, titled Shiny_Flakes with an underscore - has no hyphen in it. The unhyphenated .com reads like the obvious address and it never was one.

The archive settles it. The first capture of shinyflakes.com, on 12 March 2015 - the day after the police takeover, when the world was suddenly searching for the name - is a parking page with a black chevron background and the line Inquire about this domain. Somebody was already trying to sell it. The captures around it are stuffed with the query-string junk of advertising redirect networks. It has been a monetised parking asset for eleven years.

The hyphenated .com is the one with the WordPress install, the twenty-eight products, the star ratings, the FAQ that told customers there was no reason to communicate, and the performance dashboard. If you want the address that actually sold the drugs, the hyphen is not optional.

For completeness, because search engines see it constantly: the name is very often misspelled Shiney Flakes, with an extra e, and searched as shiney-flakes. There was never a domain spelled that way. The shop wrote itself Shiny-Flakes throughout, and that is the spelling used everywhere on this archive.

The .to holds no shop at all

This is worth stating clearly, because contemporary German reporting attached the case to the .to and the association has stuck. Tonga’s registry was popular with operators who preferred not to deal with a European registrar, and Vice reported that the Shiny Flakes domains were registered through Tonga, with the servers in the Netherlands.

But go through every capture of that domain in the Internet Archive and there is no shop on it. Not a product page, not a cart, not an FAQ. There is one substantive capture - the police page of 11 March 2015 - and on either side of it a long run of Cloudflare origin errors, week after week, which is what a dead host looks like. It resurfaces with unrelated content in 2019 and 2021 and is serving a suspended-account page by 2025.

So every surviving fragment of the actual shop - the catalogue, the ratings, the two FAQs, the shipping terms, the performance dashboard - exists on the hyphenated .com and nowhere else. That is the whole reason this archive is possible.

shiny-flakes.to is not held by this archive, has never been held by it, and nothing here is served from it. It is discussed only because the police page is a matter of public record.

Did the police create that domain themselves?

It is a fair question and the anomaly that prompts it is real: shiny-flakes.to has no captures at all before 27 February 2015, the day after the raid. If a domain had been the shop’s main clearnet address through 2014, you would expect the Internet Archive to hold something. You might reasonably wonder whether the police stood up an address of their own to publish on, leaving the evidential one alone.

The evidence points the other way, on three grounds.

• The .com was still live days before the raid. Crawlers were pulling theme assets, WooCommerce scripts and product images from it on 23 January, 2 February and 23 February 2015. It was not a dormant address that had been migrated away from.
• Vice reported the registration jurisdictions before the dust settled - Tonga, which is precisely the .to registry. Domains were held there.
• Contemporary German reporting names it as the shop's. Motherboard Germany and DeepDotWeb both describe shiny-flakes.to as the shop’s clearnet address at the point of the bust, and Motherboard published a screenshot of the takeover on it.

The likeliest explanation for the archival gap is dull: the Internet Archive crawls what is linked to, press coverage and search results pointed at the hyphenated .com, and the .to was never fed to a crawler until the case made it newsworthy. Absence from an archive is evidence of what crawlers saw, not of what existed.

Recorded here because it is a reasonable question with a checkable answer, and because this archive would rather show the reasoning than assert the conclusion. If a source establishes otherwise, say so and this section changes.

What happened in between

The domain did not sit still after 2015. It lapsed, was registered by others, and changed hands more than once before arriving here, which is the ordinary fate of any address with a recognisable name. None of those occupants had any connection to Maximilian Schmidt, who was in custody and then on licence throughout, and none had any connection to this archive.

It is worth knowing only because it explains something about this site’s design: a share of the traffic arriving at this address still comes looking for a shop. That is why the notice at the top of every page is prominent and repeated rather than tucked into a footer.

This domain, from 15 August 2026

This domain was acquired on 15 August 2026. This site has no connection to the events described on it, to anyone involved in them, or to any previous owner or operator of the domain.

The unhyphenated shinyflakes.com is held alongside it and redirects here, on the reasoning that the documentary spelling is the one most people will type and it should lead somewhere accurate rather than to a parking page.

The .to is not held by this archive and never has been. Nothing on this site is served from it and no representation is made about what appears there.

Every claim on this page can be checked against the Internet Archive’s CDX index for the domain concerned. Where this archive has drawn an inference - that the March 2015 parking page indicates opportunistic registration, for instance - it is flagged as an inference rather than presented as fact.