Before I enter my nsec, how can I verify that shopstr.store is legit? 

There is literally no information.

#asknostr