# stabplastchemo.com — SUSPICIOUS

> Investigation reveals stabplastchemo.com as an active chemo scam phishing site. Flagged by 4/95 security vendors, users should avoid clicking any links or.

## Summary
PhishDestroy identifies stabplastchemo.com as an elevated-risk phishing domain impersonating legitimate medical services, specifically targeting chemotherapy-related scams. The domain leverages a spoofed brand identity to deceive users into divulging sensitive personal and financial information under the guise of medical services. While no specific drainer kit has been linked to this domain, its structure and content suggest it follows common phishing tactics, including urgency-driven impersonation to manipulate victims. The site's SSL certificate, issued by Let's Encrypt, may lend it an air of legitimacy, but this is a common tactic among malicious actors to appear trustworthy.  

 This domain was flagged by 4 out of 95 security vendors on VirusTotal, indicating a moderate detection rate but not universal awareness among security tools. Registered through GoDaddy.com, LLC, stabplastchemo.com resolves to IP address 103.138.189.68 and was created on May 13, 2013. The domain is not currently listed on Google Safe Browsing (GSB), and its age suggests it may have been repurposed for malicious activity. While its long-standing registration might imply stability, the lack of broad detection and the presence of security flags warrant heightened caution. The combination of an outdated registration and low VT detection rate highlights the domain's potential to evade initial scrutiny, posing a persistent threat to unsuspecting users.  

 Currently, stabplastchemo.com remains active, with no evidence of takedown or remediation. Users are strongly advised to avoid interacting with this domain, as it poses a significant risk of credential theft, financial fraud, or malware delivery. Immediate actions include blocking the domain at the network level (e.g., via DNS filters or firewall rules) and reporting the domain to security vendors and relevant authorities (e.g., PhishReport, FBI IC3, or local cybercrime units). Remaining risk is elevated due to the domain's active status, low detection rate, and the likelihood of continued exploitation. Users should remain vigilant for similar domains and prioritize verifying the legitimacy of medical or financial websites before providing any sensitive information.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2013-05-13 11:37:02
- Registrar: GoDaddy.com, LLC
- IP: 103.138.189.68

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5a91cb91-1f85-429f-952d-ab25ddac7ec9
- PhishDestroy: https://phishdestroy.io/domain/stabplastchemo.com/
- LLM endpoint: https://phishdestroy.io/domain/stabplastchemo.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/stabplastchemo.com/
Last updated: 2026-03-23