countryrreat[.]spahotel[.]guru

countryrreat.spahotel.guru poses a significant threat by operating a credit card theft scam disguised as a hotel booking service. Users who input their payment details risk unauthorized financial transactions and identity theft. This domain specifically targets victims through fraudulent spa hotel booking forms designed to harvest sensitive information.

VirusTotal analysis shows that 8 out of 95 security vendors have flagged this domain, indicating a high likelihood of malicious intent. The domain uses a Let's Encrypt SSL certificate to appear trustworthy and resolves to IP address 52.29.26.157. Although the registrar and creation date are not specified here, the domain is currently active and has an elevated risk level, warranting immediate attention in blocklists and threat databases.

Users who have visited countryrreat.spahotel.guru and entered personal or payment information should immediately monitor their financial accounts for suspicious activity and consider contacting their bank to alert them of potential fraud. It is also recommended to run comprehensive malware scans on their devices and refrain from revisiting the site. Security practitioners should update blocklists to prevent further exposure to this fraudulent domain.