diamondbeach[.]spahotel[.]guru

PhishDestroy identifies diamondbeach.spahotel.guru as an active gift card phishing domain designed to steal payment credentials through spoofed hotel loyalty programs. The domain mimics a fake spa hotel site offering fraudulent gift card promotions, tricking users into entering financial or personal details under the guise of 'exclusive offers.' Security telemetry confirms malicious redirections to credential harvesting pages, with no legitimate hotel affiliation. This campaign specifically targets travelers or loyalty program members expecting promotional discounts.

This domain was flagged by OpenPhish and PhishingArmy, and blocked by 17/95 VirusTotal security vendors. It resolves to IP 52.29.26.157 and uses a Let's Encrypt SSL certificate to appear legitimate. Diamondbeach.spahotel.guru appeared on 2 public blocklists and was registered recently, correlating with the surge in fake hotel promotions. The infrastructure lacks legitimate hosting ties, further confirming its malicious purpose.

If you visited diamondbeach.spahotel.guru, assume your data may have been compromised. Disconnect any active sessions on hotel or financial accounts, scan devices for malware using updated tools, and report the incident to your bank if payment details were entered. Change passwords immediately using a secure device, and monitor accounts for unauthorized transactions. Report the domain to your email provider or browser for blacklisting to prevent further phishing attempts.