academy[.]soonpayapp[.]io

PhishDestroy identifies academy.soonpayapp.io as an active generic phishing domain under investigation, with a confirmed risk level of under_investigation and a specific threat type of a fake login form. This domain was flagged for mimicking the SoonPayApp login interface, likely to harvest user credentials or crypto wallet access. The site leverages social engineering to trick victims into submitting sensitive information, posing a direct threat to cryptocurrency funds and personal data security.

This domain resolves to IP 216.150.1.1 and is registered through GoDaddy.com, LLC. The domain was created on April 03, 2023, and secured with a Let’s Encrypt SSL certificate, which may mislead users into trusting the site. Despite 0 detections out of 95 VirusTotal scans as of the latest analysis, the domain has not yet been widely blocklisted or assigned trust scores, indicating a low profile in current threat intelligence feeds. This combination of recent registration, low detection rates, and SSL usage suggests an emerging threat that may evade traditional defenses.

Users are strongly advised to avoid interacting with academy.soonpayapp.io or any subdomains under soonpayapp.io. Verify URLs and use PhishDestroy’s real-time domain checks before entering login credentials or cryptocurrency wallet connections. If you suspect exposure, revoke any connected wallet permissions immediately and scan devices for malware. Report this domain to PhishDestroy and relevant platforms to help disrupt the threat actor’s infrastructure.