jathemanordubai[.]spahotel[.]guru

PhishDestroy identifies jathemanordubai.spahotel.guru as an elevated risk domain involved in a generic phishing threat, specifically deploying fake login tactics to deceive users. This fraudulent activity aims to capture sensitive credentials by masquerading as a legitimate service.

The domain jathemanordubai.spahotel.guru has been flagged by 7 out of 95 security vendors on VirusTotal, signaling a significant but not overwhelming consensus on its malicious intent. It is registered using a Let's Encrypt SSL certificate, which is commonly used for benign purposes but also abused by threat actors for credibility. The domain resolves to the IP address 52.29.26.157. While no creation date or registrar information has been provided directly, the domain is actively flagged and listed in multiple blocklists, reinforcing its threat status.

Users should exercise extreme caution when interacting with jathemanordubai.spahotel.guru. To mitigate risk, avoid entering any login credentials or personal information on this domain. Employ multi-factor authentication on all sensitive accounts and use reputable security tools to detect and block phishing attempts. It is also recommended to verify the domain’s current reputation on trusted platforms like PhishDestroy before any engagement.