nyxlondonholbornbyleonardos[.]spahotel[.]guru

Analysis of nyxlondonholbornbyleonardos.spahotel.guru shows an active generic phishing infrastructure. The domain resolves to the IPv4 address 52.29.26.157 and returns a DNS response indicating missing nameserver information (NS_NOT_FOUND). VirusTotal scans have recorded eight detections out of ninety‑one security vendors, suggesting that at least a subset of scanners have identified malicious characteristics associated with the host. No additional metadata such as WHOIS, ASN, or hosting provider details are available, and no content or page‑level analysis has been published, leaving the exact phishing payload unknown. The limited evidence confirms that the domain is currently reachable and flagged by multiple security tools, warranting immediate defensive action. Network defenders should block both the domain and its resolved IP at perimeter firewalls, update intrusion detection signatures, and monitor outbound traffic for connections to the host. Continuous DNS surveillance is advised to detect any future re‑registration or aliasing that could extend the campaign.