hanoilheritagediamond[.]spahotel[.]guru

The domain hanoilheritagediamond.spahotel.guru is currently identified as a high-risk credential theft site. It masquerades as a legitimate hotel booking page using the title 'Hanoi L'Heritage Diamond Hotel & Spa - Hanoi, Vietnam' to deceive users into submitting sensitive information, likely targeting tourists or travelers looking for accommodations, making it a prime candidate for phishing schemes.

Technical analysis reveals critical data points: VirusTotal has flagged the domain with 17 out of 95 security vendors recognizing it as malicious. The domain is registered through Spaceship, Inc., and was created on June 02, 2026, suggesting a possible attempt to deceive users with a future-looking creation date. Furthermore, the domain resolves to IP address 52.29.26.157 and uses a Let's Encrypt SSL certificate with a YE2 identifier. Notably, the domain is already blocked by one known security blocklist, PhishDestroy, indicating ongoing malicious activity.

Users who have interacted with this domain should immediately change any potentially compromised credentials and monitor their accounts for unusual activity. It is advisable to run a full antivirus scan on their devices and report the domain to relevant authorities or cybersecurity bodies for further investigation. Strengthening security awareness and avoiding unsolicited emails or links can prevent future credential theft risks.