# accntshop.xyz — SUSPICIOUS

> PhishDestroy identifies accntshop.xyz as an active credential theft domain mimicking account services, with 2 out of 95 security vendors flagging it.

## Summary
PhishDestroy identifies accntshop.xyz as a credential theft domain actively masquerading as a legitimate account service platform. This domain was registered on June 20, 2025, through Porkbun, LLC, and resolves to IP address 188.114.96.3. Security vendor analysis shows that 2 out of 95 providers have flagged this domain, while its SSL certificate was issued by Google Trust Services, a tactic commonly abused to lend false legitimacy to fraudulent sites.  Credential theft remains a primary objective observed in domains of this nature. Attackers frequently deploy fake login portals to harvest user credentials, which are then exploited for unauthorized account access, identity theft, or further malicious activity. The domain’s recent creation date and low detection rate indicate opportunistic deployment, targeting users seeking convenience in account recovery or service access.  Evidence supporting the elevated risk includes the domain’s registration through an ICANN-accredited registrar known for permissive domain policies, the hosting infrastructure linked to a broader IP range historically associated with malicious campaigns, and the minimal detection footprint despite its active status. Users who visited accntshop.xyz are advised to immediately change passwords for any account potentially accessed during the visit. Enable multi-factor authentication where available, monitor accounts for unauthorized activity, and consider revoking any saved sessions or API keys linked to compromised credentials. Report the domain to your security team or via abuse channels to aid in blocking efforts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-06-20 16:26:29
- Registrar: Porkbun, LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c85e9b02-67c0-46ea-8fc9-2c351c65684e
- PhishDestroy: https://phishdestroy.io/domain/accntshop.xyz/
- LLM endpoint: https://phishdestroy.io/domain/accntshop.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/accntshop.xyz/
Last updated: 2026-03-23