hanoiprimegarden[.]spahotel[.]guru

This domain, hanoiprimegarden.spahotel.guru, posed as the official website of the Hanoi Prime Garden Hotel to trick travelers into making fake reservations or sharing payment details. It is a classic example of a generic phishing site that capitalizes on the trust people place in legitimate hotel booking sites. The threat is that visitors might enter credit card numbers or personal information, which could then be stolen and misused.

PhishDestroy identified this threat after analyzing the domain's technical indicators. VirusTotal flagged it with 8 out of 95 security vendors marking it as malicious. The domain was registered through Spaceship, Inc., and its SSL certificate was issued by Let's Encrypt, giving it a false sense of security. It resolved to the IP address 52.29.26.157, which is hosted on Amazon Web Services in Ireland. The site has since been taken offline, but the domain remains listed on one security blocklist, indicating it was actively used for malicious purposes.

If you visited this site and entered any information, you should immediately contact your bank or credit card provider to monitor for unauthorized transactions. Change any passwords you may have used and consider enabling two-factor authentication on your accounts. PhishDestroy recommends always double-checking URLs before entering sensitive data, especially for booking sites. Book directly through official hotel websites or trusted travel platforms, and verify domain names carefully.