claudestore[.]store

The domain claudestore.store was observed on August 06, 2026 as active. VirusTotal reports one of ninety‑one security vendors flagging the domain, indicating a detection signal. It appears on a single public blocklist and is actively blocked by the PhishDestroy service. The authoritative nameservers are emerson.ns.cloudflare.com and wanda.ns.cloudflare.com, both belonging to Cloudflare's DNS infrastructure.

DNS resolution returns the IPv4 address 188.114.96.10, which is part of Cloudflare's Anycast network. No additional evidence such as SSL certificate details, HTTP response codes, page title, or brand targeting has been published, so the exact phishing lure remains unverified. The limited detection footprint suggests the campaign may be in early deployment or using evasive techniques to avoid broader scanner coverage.

Defenders should add claudestore.store to endpoint and DNS blocklists, monitor traffic to 188.114.96.10, and enforce TLS inspection for outbound connections to Cloudflare edge nodes. Security teams are advised to correlate any credential submissions or login attempts originating from this domain with internal logs, and to update intrusion‑prevention signatures to include the observed nameserver pattern. Continuous re‑scanning with multi‑vendor services is recommended to capture any escalation in detection counts.