VirusTotal
2 / 91
“Bergabunglah dalam SpinHarta!”
PhishDestroy identifies www.spinha.app as a fresh Amazon-brand phishing lure hosted on 99.84.152.79 with 0/95 VirusTotal detections.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
2 / 91
checked — no match recorded
no community references
Bildirprovider verdict: clean
Bildirsaklanan rapor
Bildir Analiz tamamlandı
Bildir12 kontrol edildi — engelleme yok
96/100
BildirChecked; no threat flag recorded
BildirPhishDestroy has flagged www.spinha.app as an active generic-phishing domain that impersonates Amazon to harvest login credentials and payment details. The site currently resolves to 99.84.152.79, which is served over an Amazon SSL certificate—an attempt to appear trustworthy—and remains undetected by every antivirus engine on VirusTotal with 0 out of 95 detections at the time of writing.
Created very recently, www.spinha.app exploits cheap, recently expired domains to bypass reputation filters; it also relies on Amazon’s certificate to trick cautious users into overlooking subtle misspellings or suspicious redirects. Because the domain is only hours or days old, traditional blocklists and domain-reputation services have yet to catch up, leaving even updated browsers and endpoint agents vulnerable to first-contact compromise.
If you visited www.spinha.app accidentally, cease entering any data immediately and close the tab. Next, run a full antivirus scan and change any passwords you may have typed on the page. Report the incident to Amazon’s anti-phishing team via their official reporting form and to your organization’s security help-desk if you were on a corporate device. Disable browser autofill for now and consider resetting cookies tied to amazon.com or payment sites you may have accessed from the same browser session.
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
Tarayıcı notu: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-181821.invalid', port=80): Max retries exceeded with url: / (Caused by
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.
kay.ns.cloudflare.comLocation describes the IP network.
56def728bbf81de6f5fd5ca3da016a283ad8df1ae2c4e5115b3f54b0d5c8825aspharta.ccspharta.orgspharta.topspharta.vipspharta.xyzspinha.appspinha.ccspinha.comspinha.topspinha.vipspinharta36.comspinharta37.comspinharta38.comspinharta39.comspinharta41.comspinharta42.comspinharta43.comspinharta44.comspinharta45.comspinharta46.comspinharta47.comspinharta48.comspinharta49.comspinharta51.comspinharta52.comspinharta53.comspinharta54.comspinharta55.comspinhartaagent.comspinhta.appspinhta.ccspinhta.comspinhta.netspinhta.orgspinhta.topspinhta.vipsspharta.appsspharta.ccsspharta.comsspharta.topsspharta.vipsspharta.xyzSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of duplicate-disabled-181821.invalid · checked Mar 28, 2026
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin