sistmdalertaoffcmcrfwhtpp[.]iceiy[.]com

PhishDestroy identifies sistmdalertaoffcmcrfwhtpp.iceiy.com as an active crypto-drainer phishing domain designed to steal cryptocurrency wallet credentials. Victims are lured into entering their private keys, seed phrases, or wallet passwords on spoofed login pages mimicking legitimate financial services. The page mimics official bank or crypto exchange branding to deceive users into surrendering access to their digital assets, enabling immediate theft by the threat actor. This is not a generic phishing lure but a targeted crypto-draining operation using decoy login forms that harvest and exfiltrate sensitive private information. This domain was flagged by PhishDestroy as high-risk and remains active based on multiple indicators. Registered on December 06, 2020 through Porkbun LLC, it uses a ZeroSSL certificate for authenticity. VirusTotal analysis shows 8 out of 95 security vendors currently detect it as malicious. The website resolves to IP address 185.27.134.176, hosted within a block commonly associated with fraudulent activity. Its age and certificate issuance further obscure its malicious purpose from casual inspection, making it particularly dangerous for untrained users. If you visited sistmdalertaoffcmcrfwhtpp.iceiy.com, immediately disconnect from the internet and close all browser tabs. Do not enter any credentials or private keys on the page. Revoke any permissions granted to connected wallets via your wallet provider’s dashboard. Scan your device with updated antivirus software and consider rotating passwords for financial accounts. Report the incident to your bank or crypto exchange and submit this domain to PhishDestroy for deactivation support. Never reuse wallet passwords across platforms, and verify URLs manually before entering sensitive information.