deerpark[.]spahotel[.]guru

This domain resolves to the IP address 52.29.26.157 located in Germany within an AWS EC2 eu-central-1 instance and returns an HTTP status code of 200. Infrastructure analysis reveals the use of nameservers launch1.spaceship.net and launch2.spaceship.net with registration handled through Spaceship, Inc. The site presents an SSL certificate issued by Let's Encrypt and serves content built on WordPress with supporting components including MySQL, PHP, Nginx, and HTTP/3. Current records confirm the domain remains active and appears on one security blocklist.

Detection metrics show a Gridinsoft trust score of 0 out of 100 along with flags from 19 out of 95 security vendors on VirusTotal. The page title matches the legitimate branding of The Deer Park Hotel Giritale in Giritale, Sri Lanka, indicating direct impersonation of that hospitality property. The assigned threat classification is generic phishing, and the site is noted as blocked by PhishDestroy.

Defenders should incorporate the exact domain and its current IP address into blocklists and monitoring rules. Network defenders can reference the observed nameserver pair and hosting provider details to identify additional infrastructure sharing the same registration or cloud footprint. Continued observation of the active resolution status supports timely updates to protective controls while the impersonation elements remain consistent with the recorded page title.