# cyrexmods.st — MALICIOUS

> Domain cyrexmods.st is a live crypto-drainer; 6/95 VirusTotal flags, registered March 24, 2026, via NiceNIC. Scan with PhishDestroy before download.

## Summary
PhishDestroy identifies cyrexmods.st as an active crypto-drainer site masquerading as a Minecraft mod repository.

This domain was flagged by 6 of 95 security vendors on VirusTotal and first resolved on March 24, 2026 through NiceNIC. It currently points to IP 3.33.236.10 and holds a valid Let’s Encrypt SSL certificate, giving it a veneer of legitimacy.

If you visited cyrexmods.st, disconnect your wallet immediately, revoke any unwittingly approved permissions, and run a full scan with PhishDestroy. Never enter seed phrases or private keys on any page linked from this domain.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-24 00:00:00
- Registrar: NiceNIC
- IP: 3.33.236.10

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/676f25e1-1cfb-4563-910f-a2ba5ea43901
- PhishDestroy: https://phishdestroy.io/domain/cyrexmods.st/
- LLM endpoint: https://phishdestroy.io/domain/cyrexmods.st/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cyrexmods.st/
Last updated: 2026-03-26