montanape[.]spahotel[.]guru

This domain, montanape.spahotel.guru, carries an elevated risk level and was identified as a generic phishing threat, specifically designed for credential theft by impersonating the Montana Pine Resort Oludeniz brand. Although currently offline, its past activity posed a serious risk to users seeking to book accommodations at the resort.

PhishDestroy flagged this domain based on multiple indicators. It appears on one security blocklist and received a 17/95 detection rate on VirusTotal, meaning 17 security vendors flagged it as malicious. The domain was registered through Spaceship, Inc. and resolved to IP address 52.29.26.157. It used an SSL certificate from Let's Encrypt (E7), which is commonly abused by phishing sites. The page title explicitly copied the legitimate hotel's name, further confirming the impersonation attempt.

Users who encountered this domain should avoid entering any personal or financial information. To mitigate the threat of credential theft, always verify a website's URL before entering sensitive data, use a password manager to detect lookalike domains, and enable multi-factor authentication on accounts. PhishDestroy recommends reporting such domains to blocklists and monitoring for related phishing campaigns targeting the hospitality industry.