lelittoral[.]spahotel[.]guru
“Hotel Le Littoral Quebec City - Quebec City, Canada”
lelittoral.spahotel.guru — Non vérifié. Type d'arnaque : Credential Phishing. Résumé des preuves: VirusTotal 17/91 (ADMINUSLabs, BitDefender, Chong Lua Dao, Cluster25, CRDF); PhishDestroy score 95/100. Bureau d’enregistrement: Spaceship.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
This domain, lelittoral.spahotel.guru, poses a targeted credential theft threat through brand impersonation of Hotel Le Littoral Quebec City, a legitimate hospitality provider in Quebec. Analysis indicates the site was designed to harvest login credentials, payment details, or personal information from visitors under the pretense of hotel booking services. The use of a recognizable hotel brand increases the likelihood of successful deception, particularly among travelers or individuals seeking accommodation in Quebec City. Infrastructure analysis reveals multiple technical indicators supporting malicious classification. The domain was registered on May 14, 2026, through Spaceship, Inc., and currently resolves to IP address 52.29.26.157, hosted on AWS EC2 in the eu-central-1 region (Germany). Security vendors on VirusTotal flagged the domain at a rate of 17/95, and it appears on one security blocklist. The site employed a Let's Encrypt SSL certificate (serial E8), which, while providing encryption, does not validate legitimacy. The page title, 'Hotel Le Littoral Quebec City - Quebec City, Canada,' directly mirrors the branding of the authentic hotel, reinforcing the impersonation scheme. Users who visited lelittoral.spahotel.guru should assume potential exposure of sensitive data. Immediate actions include resetting passwords for any accounts entered on the site, monitoring financial statements for unauthorized transactions, and scanning local devices for malware. If payment information was submitted, affected parties should contact their financial institution to initiate fraud protection measures. Given the domain's current offline status, further interaction is unlikely; however, vigilance is advised for related phishing attempts via email or other communication channels referencing the same hotel brand.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Registration: spahotel.guru
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain spahotel.guru behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif