hartaspinindonesia[.]com

PhishDestroy identifies www.hartaspinindonesia.com as a generic phishing domain currently under active investigation. Specific threat type is generic phishing impersonating a spin bike retail storefront to harvest payment card data and deploy keyloggers. Current status is active, indicating ongoing live operations and user exposure.

This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating it has not yet been widely blacklisted despite its recent creation. It resolves to IP 52.222.236.34 and was registered through NameSilo, LLC on August 10, 2025. The SSL certificate is issued by Amazon, showing a domain-validated certificate likely used to establish false trust. The domain is newly registered, lacks historical reputation, and shows no detections on leading threat intelligence platforms, making it particularly dangerous due to its clean appearance.

Given the active status and absence of vendor detections, users are strongly advised to avoid visiting hartaspinindonesia.com and to report any interactions to their security teams. Organizations should block the domain at DNS and firewall levels using the IP 52.222.236.34 and domain hartaspinindonesia.com. Consumers who may have entered payment details should immediately contact their financial institutions, monitor accounts for fraudulent transactions, and perform a system scan for malware including keylogger infections. Security teams are recommended to monitor for related infrastructure and update threat intelligence feeds accordingly.