# stashpatrick.bz — SUSPICIOUS

> stashpatrick.bz is a malicious phishing site impersonating Stash cash giveaways, flagged by 1 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies stashpatrick.bz as a live phishing domain actively impersonating Stash’s cash giveaway promotions to deceive users into surrendering sensitive financial information. This domain is currently classified as an active threat with an elevated risk level, posing imminent danger to unsuspecting users who may fall victim to its fraudulent reward scheme. The threat actor behind this campaign employs spoofed branding and urgency-driven messaging to coerce users into submitting personal or banking credentials under the guise of claiming a fabricated cash prize.  stashpatrick.bz resolves to IP address 188.114.97.3 and is currently flagged by 1 of 95 VirusTotal security vendors, indicating low but concerning detection coverage. The domain leverages a Google Trust Services SSL certificate to enhance its appearance of legitimacy, despite its malicious intent. While specific registrar details and creation date remain unverified in this dataset, the use of a trusted SSL issuer highlights the sophistication of this phishing attempt in deceiving users through superficial authenticity. The presence of only one detection vendor suggests a relatively new or niche threat that may evade broader security monitoring systems.  As of this report, stashpatrick.bz remains active and operational. Users are strongly advised to avoid interacting with any links or content associated with this domain, particularly those claiming to offer free cash rewards from Stash or similar financial services. To mitigate risk, users should verify any promotional offers directly through official channels using verified URLs or contact information. Organizations are encouraged to update firewall rules and DNS blocklists to include this domain and its IP address. If accidental exposure occurs, immediately scan devices for malware, reset passwords, and report the incident to the legitimate service provider and relevant cybersecurity authorities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a0f38830-a3d2-404e-8b86-90cac49fd19d
- PhishDestroy: https://phishdestroy.io/domain/stashpatrick.bz/
- LLM endpoint: https://phishdestroy.io/domain/stashpatrick.bz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/stashpatrick.bz/
Last updated: 2026-03-24