# www.spinarhata.com — SUSPICIOUS

> PhishDestroy identifies spinarhata.com as a live fake prize scam site. Created August 10, 2025, it already resolves to Amazon-hosted IP 52.222.236.

## Summary
spinrahata.com presents an active generic phishing threat currently under investigation by PhishDestroy. This domain is not yet flagged by VirusTotal, despite being registered only days ago on August 10, 2025 through NameSilo, LLC. It resolves to Amazon IP 52.222.236.27 and hosts an SSL certificate issued by Amazon, which creates false trust cues. The complete absence of detections (0/95) on VirusTotal indicates this campaign is newly launched and remains undetected by security vendors, making it particularly dangerous for early victims.

This domain was flagged with zero VirusTotal detections, registered through NameSilo, LLC on August 10, 2025, and currently resolves to Amazon IP 52.222.236.27 under a valid Amazon SSL certificate. No blocklist entries or reputation scores are available due to its recent creation, which suggests this is an emerging threat likely propagating via social media or messaging platforms under the guise of fake prize offers. The generic phishing nature indicates attackers are harvesting credentials or payment details through deceptive prize claim forms.

Users should immediately block the domain spinarhata.com at the network level and avoid any links or attachments related to this campaign. If credentials or payment details were entered, rotate passwords immediately and monitor financial accounts for fraudulent transactions. Organizations should update threat intelligence feeds with the domain and IP to prevent future exposures, while individuals should report suspicious messages to platform abuse teams to disrupt the campaign's propagation channels.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-08-10 08:48:16
- Registrar: NameSilo, LLC
- IP: 52.222.236.27

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/63bbef30-5341-40db-b8bf-46a13a853138
- PhishDestroy: https://phishdestroy.io/domain/www.spinarhata.com/
- LLM endpoint: https://phishdestroy.io/domain/www.spinarhata.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.spinarhata.com/
Last updated: 2026-03-27