spomodapk[.]com

PhishDestroy identifies spomodapk.com as an active phishing domain distributing malicious Android mod APK files through deceptive lures, currently flagged as a generic phishing threat under investigation.

This domain was flagged on April 13, 2025, with a VirusTotal detection score of 0/95, indicating no current detections by antivirus engines despite active phishing distribution. The domain is registered through Spaceship, Inc., and resolves to IP address 44.233.250.75. Google Safe Browsing has not yet flagged this domain, and it remains unlisted on major threat intelligence blocklists, suggesting either a newly emerging threat or a successful evasion of detection mechanisms.

The domain remains active as of the latest analysis, with no confirmed user reports or third-party takedown actions despite its involvement in phishing campaigns. The lack of detections on VirusTotal suggests a low detection rate but does not confirm the absence of malicious activity. Users are advised to avoid downloading APK files from this domain and to report any suspicious encounters to threat intelligence platforms. The current risk assessment remains under investigation due to limited historical data and low detection rates, though the targeting of Android users poses a significant potential threat.