Is stimulicat.com safe?
http://stimulicat.com/
Coveragestrong3 of 4 applicable core capabilities
Stimulicat: a Shopify storefront with a Delaware address but returns routed to China and reports of unauthorized order additions
Stimulicat is a Shopify-hosted online shop selling physical goods, with a disclosed operator, Serenosole LLC, at a Middletown, Delaware address. The technical layer is clean: a valid encrypted connection and no the browser threat feed warning. The operator layer is not. Three independent customer reports describe a pattern of unauthorized order additions and a return process that requires shipping goods to China at the customer's own expense, contradicting the US-facing identity. That combination places the site in the High Risk band.
Be the first to review stimulicat.com
Lost money to stimulicat.com? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
Stimulicat is a Shopify-hosted online shop selling physical goods, with a disclosed operator, Serenosole LLC, at a Middletown, Delaware address. The technical layer is clean: a valid encrypted connection and no the browser threat feed warning. The operator layer is not. Three independent customer reports describe a pattern of unauthorized order additions and a return process that requires shipping goods to China at the customer's own expense, contradicting the US-facing identity. That combination places the site in the High Risk band.
A US identity with a China return route
The site's own legal page names the operator as Serenosole LLC, with a company address at 651 N Broad St Suite 201, Middletown, Delaware 19709, and a customer service email at info@Stimulicat.com. That is a disclosed identity, not a hidden one, and it is the only operator information the captured pages provide.
Customer reports describe a different reality. One reviewer states that after ordering a single basket, an email arrived two hours later saying the order was updated and a second basket had been added. Another states that a return requires immediately notifying customer service, and only then is the return address in China provided. A third states that the customer pays the return shipping to China. Together these describe unauthorized order additions and a return path that contradicts the Delaware address.
The site lists no phone number on the captured page, so the only contact route shown is email. That is a context point, not proof of wrongdoing on its own, but it narrows the options for a customer trying to resolve a disputed charge.
Clean technical checks do not clear the operator
The saved TLS check found a valid encrypted connection, and the browser threat feed returned no threat warning. Those results mean no detections were recorded at scan time; they do not vouch for how the shop treats customers.
One antivirus result marked the URL as suspicious. That detection comes from a saved observation rather than a fresh submission, so it should be treated as real but with uncertain timing. The registrable domain is 497 days old, which is old enough to be past the brand-new-domain stage but not old enough to establish a long trading history.
The store runs on Shopify, as shown by the platform credit in the page footer. That is a neutral hosting fact: it tells you the checkout and storefront are built on a mainstream platform, not that the merchant behind them is trustworthy.
Why the score is 38
The site's legal page names Serenosole LLC with a Middletown, Delaware address and an info@Stimulicat.com contact email. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsSaved analysis from October 7, 2026 - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
All 93 engine results
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Unrated
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual warning signs were identified
Try your luck Scratch To Reveal Your Offer SCRATCH HERE
What the captured page showed
1 observation- 01
Try your luck Scratch To Reveal Your Offer SCRATCH HERE
03 · Investigation Story
Investigation story
What the site claims
Stimulicat
What we observed
The page content was captured and checked alongside 58 antivirus results.
What independent research found
3 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 012 independent sources carry complaints or warnings about this site, including: "I ordered one instinct basket from Stimulicat. Two hours after placing my order, I received an email stating that my order was updated, and they added a second…"
- 022 independent sources carry complaints or warnings about this site, including: "Also, YOU pay the return shipping to China,"
- 031 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
If this is a scam — what it means for you
What a visitor actually experiences
On arrival, a pop-up invites the visitor to try their luck with a scratch-to-reveal offer. The visual observation records this as a data-capture prompt, so the first interaction is a gamified discount designed to collect contact details before any purchase.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The page also carries a standard email subscribe form, alongside shop, sale, and order-tracking links. These are ordinary e-commerce calls to action; the newsletter form is the one that explicitly collects an email address.
If a visitor orders and later wants to return an item, the reported sequence is: contact customer service first, receive a return address in China, and pay the shipping yourself. One report also describes an order being updated to include a second item two hours after checkout. Those are the concrete outcomes described by customers, and they are the reason the operator risk is rated high despite the clean technical checks.
Do not order from Stimulicat unless you are prepared to dispute a charge. The site discloses a Delaware company but customers report returns must go to China at their own cost, and at least one report describes an extra item being added to an order after checkout. If you have already paid, keep the order confirmation and the updated-order email, and consider raising the issue with your card issuer or PayPal rather than relying on the store's email-only support.
Web research findings
Independent findings for stimulicat.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Trustpilotopen
"I ordered one instinct basket from Stimulicat. Two hours after placing my order, I received an email stating that my order was updated, and they added a second basket."
- Trustpilotopen
"you have to immediately notify customer service of the return, and only then do they give you the return address in China."
- Better Business Bureauopen
"Also, YOU pay the return shipping to China,"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainstimulicat.com
- Redirects tostimulicat.com
- Hosted byShopify, Inc.
- Referencesfonts.shopifycdn.com · cdn-app.sealsubscriptions.com
Domain Timeline
- Jun 10, 2025Domain registered
First appeared in WHOIS records — 1.3 years old when this review was saved.
- Oct 21, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No phone number listed on the captured page.
- Contact email on the site's own domain (info@stimulicat.com).
- Postal address visible on the page.
Domain & Encryption
Redirect Chain
The site refused our redirect check, so the chain below is the one our page reader followed.
- 1301http://stimulicat.com/
- 2200https://stimulicat.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The site's legal page names Serenosole LLC with a Middletown, Delaware address and an info@Stimulicat.com contact email. · 2 independent sources carry complaints or warnings about this site, including: "I ordered one instinct basket from Stimulicat. Two hours after placing my order, I received an email stating that my order was updated, and they added a second…"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 7, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 21, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 21, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | Adverse | this scan · Oct 21, 2026 |
| Independent research | 3 independent findings were saved | Completed | Adverse | this scan · Oct 21, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 7, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 21, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 21, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 21, 2026
- Independent research
- Result3 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 21, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is stimulicat.com a scam or a legit online store?
Is stimulicat.com safe to use?
What should I do if I already gave my details to stimulicat.com?
Can I get my money back from stimulicat.com?
I ordered from stimulicat.com but nothing arrived — is it a fake shop?
How do I report stimulicat.com?
Why does stimulicat.com look legitimate if it's a scam?
Has stimulicat.com been flagged by antivirus engines?
Is stimulicat.com on any phishing or malware blacklists?
How old is the stimulicat.com domain?
Does stimulicat.com have a valid SSL certificate?
How often is the stimulicat.com report updated?
08 · Final Verdict
Final verdict
Stimulicat: a Shopify storefront with a Delaware address but returns routed to China and reports of unauthorized order additions
Stimulicat is a Shopify-hosted online shop selling physical goods, with a disclosed operator, Serenosole LLC, at a Middletown, Delaware address. The technical layer is clean: a valid encrypted connection and no the browser threat feed warning. The operator layer is not. Three independent customer reports describe a pattern of unauthorized order additions and a return process that requires shipping goods to China at the customer's own expense, contradicting the US-facing identity. That combination places the site in the High Risk band.
09 · Community