13707[.]academy

Analysis as of July 24, 2026 indicates that the domain 13707.academy is currently offline and returns a HTTP 504 Gateway Timeout page title. The domain was registered on February 21, 2026 through Dynadot LLC and resolves to the IPv4 address 172.247.73.242, which is assigned to AS40065 operated by CNSERVERS LLC in the United States. The hosting server presents a Let's Encrypt R12 certificate, confirming the presence of TLS but offering no additional trust signals.

DNS configuration lists the authoritative name servers 5014.ns1.abovedomains.com and 5014.ns2.abovedomains.com, and the MX record points to park-mx.above.com with priority 10, a pattern often observed in malicious infrastructures. The domain appears on a single security blocklist, specifically PhishDestroy, and has been flagged by one of ninety‑three vendors on VirusTotal, indicating a low but non‑zero detection rate. The risk level assigned is elevated, reflecting the combination of recent creation, use of a reputable registrar, and association with a known phishing blocklist.

Because the site is offline, content analysis is not possible, and the only observable indicator is the generic phishing classification supplied in the intelligence feed. Defenders should add 13707.academy and its resolving IP address to inbound and outbound filtering rules, monitor for any future re‑activation, and consider correlating internal logs for any attempted connections to the listed name servers or MX host. Continuous re‑evaluation is advised should the domain become reachable again, at which point a deeper payload and page‑content inspection would be required.