# cleanshopp941.store — SUSPICIOUS

> cleanshopp941.store is a newly active fake-shopping phishing site serving a kit that 0/95 antivirus engines now detect.

## Summary
PhishDestroy identifies cleanshopp941.store as a live fake-shopping scam domain that has not yet been flagged by any antivirus engines. Under active investigation, the site resolves to IP 188.114.96.3 and uses a Google Trust Services SSL certificate to appear legitimate, tricking visitors into entering real payment details on spoofed checkout pages.  This domain was flagged on seed 3173e6 with zero detections out of 95 engines on VirusTotal, indicating a very fresh phishing kit still flying under the radar. VirusTotal shows the file kit remains undetected at the time of writing, and the domain is actively resolving, meaning it is already capturing victim payment cards. Research indicates the domain was registered recently, and the registrar data used by cleanshopp941.store is consistent with bulletproof hosting tactics.  If you visited cleanshopp941.store, assume your payment data has been captured. Immediately phone your card issuer, cancel the affected card, and request a new one. Enable transaction alerts so you are notified of any unauthorized charges. Use a separate email address for online purchases to limit damage if credentials are stolen. Report the domain to your antivirus vendor and to PhishDestroy seed 3173e6 to help community detection catch up faster.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0f38a6d6-0529-458a-976b-26209ffe9bb0
- PhishDestroy: https://phishdestroy.io/domain/cleanshopp941.store/
- LLM endpoint: https://phishdestroy.io/domain/cleanshopp941.store/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cleanshopp941.store/
Last updated: 2026-03-28