stashpatrik[.]cc

The domain www.stashpatrik.cc was registered on March 2, 2026 through PublicDomainRegistry.com (PDR Ltd.) and is hosted on an IP address owned by SpaceWeb Ltd. (ASN 44112) located in Russia. The authoritative name servers ns1.spaceweb.ru, ns2.spaceweb.ru, ns3.spaceweb.pro, and ns4.spaceweb.pro resolve the domain to 77.222.40.147, and the site is served over HTTPS using a Let’s Encrypt certificate issued under the R13 series. HTTP requests return a 200 status code, indicating an active web service. The front‑end of the site is built with PHP and leverages the Bootstrap framework together with Popper.js, and it is delivered by an Nginx web server. The page title presented to visitors is “Patrick Market”, which suggests an attempt to imitate a legitimate marketplace or brand named Patrick. No additional branding or trademarked assets were observed, but the title alone is sufficient to mislead users searching for a known commercial entity. Reputation services flag the domain as high risk. VirusTotal reports that 2 out of 95 scanned engines raise detections, and Gridinsoft assigns a trust score of 0 out of 100. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy sinkhole, confirming that it is being used for phishing campaigns. The combination of a recent registration date, low trust score, and active blocklist presence aligns with the high‑risk classification. Defenders should add www.stashpatrik.cc to URL filtering and email gateway block lists, monitor DNS queries for the associated name servers, and consider sinkholing the resolved IP address 77.222.40.147. Incident response teams should treat any credential submissions to the site as compromised, and users who may have interacted with the page should be instructed to reset passwords and enable multi‑factor authentication. Ongoing surveillance of the SpaceWeb hosting infrastructure is advised, as similar domains may be provisioned on the same network.