# cyrexmods.to — MALICIOUS

> CyrexMods.to is a crypto drainer impersonating gaming mods. Flagged by 22 of 95 VirusTotal vendors, block it immediately via PhishDestroy for safety.

## Summary
PhishDestroy identifies CyrexMods.to as an active crypto drainer scam. This domain was flagged by 22 of 95 VirusTotal vendors, registered through Registrar.eu, resolves to IP 185.178.208.138, and was created on March 09, 2026. Trust scores remain critically low across blocklists.


The site remains active and poses an elevated threat to users seeking gaming mods. Current status shows no signs of takedown, requiring proactive blocking. Immediate action is advised to prevent financial loss or credential theft. Avoid interaction entirely.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-09 06:24:23
- Registrar: Registrar.eu
- IP: 185.178.208.138

## Detection Status
- VirusTotal: 22 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/44d11fbd-bdb8-408b-9797-25076a033ae1
- PhishDestroy: https://phishdestroy.io/domain/cyrexmods.to/
- LLM endpoint: https://phishdestroy.io/domain/cyrexmods.to/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cyrexmods.to/
Last updated: 2026-03-21