siayeo[.]com[.]sg

Analysis as of August 06, 2026 confirms that the domain siayeo.com.sg is actively being used for phishing operations and is classified as an elevated‑risk threat. The domain appears on a single security blocklist and is specifically blocked by the PhishDestroy service, indicating that reputable anti‑phishing feeds have identified malicious activity associated with it. VirusTotal scans have returned detections from 2 of 91 security vendors, providing independent confirmation that the domain exhibits characteristics of phishing infrastructure.

Network resolution points to the IPv4 address 111.221.46.30, which serves as the hosting endpoint for the malicious content. The limited detection footprint—only two vendor flags—suggests that the payload may be evasive or that the campaign is relatively new, but the presence on a dedicated blocklist and the confirmed detections justify a heightened defensive posture. Defensive teams should add siayeo.com.sg to internal blocklists, enforce URL filtering rules to deny outbound connections to the resolved IP, and monitor DNS logs for any resolution attempts.

Continuous re‑scanning on VirusTotal and periodic checks against PhishDestroy and other blocklist feeds are recommended to capture any escalation in detection counts or additional indicators of compromise. Organizations should also consider threat‑intel sharing with peers to broaden collective awareness of this domain's activity.