siputzx[.]my[.]id

PhishDestroy identifies siputzx.my.id as an active crypto-draining phishing site designed to trick users into transferring cryptocurrency to attacker-controlled wallets. The domain mimics legitimate crypto platforms or wallet services, often through social media promotions or fake airdrop claims. Once a victim connects a wallet or enters private keys, the phishing kit drains funds directly via malicious smart contract interactions or prompt theft of seed phrases. This domain should be treated as a high-risk threat vector until proven otherwise. This domain was flagged by PhishDestroy after being registered on April 8, 2024, through PT Digital Registra Indonesia. It currently resolves to IP address 188.114.96.3 and uses a Google Trust Services SSL certificate to appear legitimate. VirusTotal currently shows zero detections across 95 security engines—indicating it is actively evading detection systems. The domain’s recent creation date and clean VT score suggest a rapidly deployed threat likely operated by an organized phishing group targeting crypto users. If you visited siputzx.my.id, immediately disconnect your wallet from any suspicious sites using your wallet’s built-in connection manager or browser extension. Do not enter any private keys, seed phrases, or sign any transactions you did not initiate. Scan your device with up-to-date antivirus software and revoke any unauthorized wallet connections via blockchain explorers like Etherscan or Solscan. Report the domain to PhishDestroy and your wallet provider immediately to help block further abuse. Always verify URLs through trusted sources before interacting with crypto platforms.