duplicate-disabled-181846.invalid

Analysis indicates that www.sspharta.app resolves to the AWS CloudFront address 99.84.152.16 located in Germany and is served through Cloudflare name servers davina.ns.cloudflare.com and hugh.ns.cloudflare.com. The site returns HTTP 200 and presents a TLS certificate issued to Amazon with a 2048‑bit RSA key, consistent with typical AWS‑hosted infrastructure. Detected server components include Nginx, OpenResty and jQuery, confirming a standard web stack rather than specialized malware delivery platforms. The page title “Bergabunglah dalam SpinHarta!” was observed, and the domain was created on 27 March 2026 via NameSilo, LLC. The domain appears on a single security blocklist and is actively blocked by PhishDestroy, while a Gridinsoft trust score of 0 / 100 reflects a high confidence of malicious intent. The intelligence tags the site as a crypto‑drainer scam, a subtype of phishing that typically lures victims into transferring cryptocurrency to attacker‑controlled wallets. No public malware detections have been reported, but the lack of detections does not constitute assurance of safety. Uncertainty remains regarding the specific content and credential‑collection mechanisms employed on the page, as no visual or functional analysis is available. Defenders should continue to block the domain at network perimeter and DNS layers, monitor outbound connections to the associated IP address, and consider adding the domain to internal blocklists. Incident response teams should treat any user reports of unsolicited messages referencing SpinHarta or requests for crypto transfers with heightened scrutiny and advise affected users to refrain from interacting with the site.