# https-stashpatrick.gl — SUSPICIOUS

> PhishDestroy warns: https-stashpatrick.gl is a crypto drainer impersonating Stash. This domain was flagged by 2 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies https-stashpatrick.gl as an active crypto drainer posing as a Stash impersonation, currently in elevated status.

This domain was registered on February 04, 2025, through NETIM SAS and resolves to IP address 172.67.210.89. Security intelligence shows it has been flagged by 2 of 95 VirusTotal vendors and holds a Google Trust Services SSL certificate. The domain’s recent creation date and low blocklist count suggest a newly deployed threat infrastructure designed for short-term exploitation.

Given its elevated risk status and confirmed malicious activity, users should avoid interacting with https-stashpatrick.gl and verify any Stash-related communications via official channels. PhishDestroy recommends blocking the domain at the network level and reporting suspicious activity to enhance collective defense. Immediate action is advised to prevent potential cryptocurrency loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-02-04 00:43:57
- Registrar: NETIM SAS
- IP: 172.67.210.89

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c7774426-cb73-439f-91a9-88279ac97e5f
- PhishDestroy: https://phishdestroy.io/domain/https-stashpatrick.gl/
- LLM endpoint: https://phishdestroy.io/domain/https-stashpatrick.gl/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/https-stashpatrick.gl/
Last updated: 2026-03-24