# siecax.com — SUSPICIOUS

> PhishDestroy warns: siecax.com hosts a crypto-draining fake login page. VT 0/95, IP 104.21.84.43. Verify before you click

## Summary
PhishDestroy identifies siecax.com as an active cryptocurrency-draining phishing domain under investigation, currently resolving to 104.21.84.43. This generic-looking site is being promoted as a fake login portal designed to harvest wallet credentials and seed phrases, enabling irreversible asset theft. The campaign does not impersonate a specific brand at this stage, pointing instead to an opportunistic drainer kit repurposed across multiple low-profile domains.    Technical indicators are exact: the domain carries a 0/95 VirusTotal detection score as of capture, was registered on March 16 2026 through GMO Internet, Inc., and secured with a Let’s Encrypt SSL certificate. It is currently hosted on Cloudflare front-end IP 104.21.84.43 and remains unlisted by Google Safe Browsing and other major blocklists, giving it a clean reputation window attackers are exploiting.    Current status is active; response is under way with domain takedown and IP de-listing requests submitted. Remaining risk level is under investigation pending additional telemetry and victim reports. Users are advised to verify URLs in PhishDestroy before entering credentials and to enable multi-factor authentication on all crypto accounts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-16 14:00:05
- Registrar: GMO Internet, Inc.
- IP: 104.21.84.43

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/siecax.com
- PhishDestroy: https://phishdestroy.io/domain/siecax.com/
- LLM endpoint: https://phishdestroy.io/domain/siecax.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/siecax.com/
Last updated: 2026-04-07