cryodex[.]io
Forensic brief
Read full brief
PhishDestroy identifies cryodex.io as a high-risk generic phishing domain impersonating cryptocurrency exchange platforms. This threat matters because it attempts to deceive users into divulging sensitive information such as login credentials and financial data, potentially leading to significant financial loss. The domain cryodex.io was created on February 21, 2026, and remains active.
It resolves to IP address 104.21.32.1 and has been flagged by 11 out of 11 security vendors on VirusTotal. Furthermore, it appears on one security blocklist, confirming its malicious intent. The domain's page title, "Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | CryoDex," is designed to lure users seeking legitimate crypto exchange services.
Users are strongly advised to avoid interacting with cryodex.io and to refrain from providing any personal or financial information on this site. It is recommended to verify the authenticity of cryptocurrency platforms through official sources and to use multi-factor authentication where available. Reporting suspicious domains to security organizations can help protect the broader user community.
Threat response pipeline
VirusTotal
Forensic Evidence CollectionEvidence capture
Domain Intelligence
Technical details
Public blocklist status
Technologies
Technologies · 7 identified
VirusTotal consensus
Aggregated detection across 11 security vendors.
Evidence & external reports
Were you affected by this site?
Were You Affected?
Recommendations & Advice for Victims
- Do not pay anything else. Recovery agents demanding upfront fees are a second-stage scam.
- Disconnect compromised wallets. Move remaining funds to a fresh seed phrase generated offline.
- Preserve evidence. Screenshot transactions, save URLs, archive emails — chain-of-custody matters for prosecution.
- Report to authorities (see section 15 below) — even small reports help build case patterns.
- Notify your bank/exchange. Some chargebacks may still be possible within 24-72h.
Report to your local authorities
Email template — registrar abuse
abuse@
Case: PD-
Embed this report
About this report
About this report: cryodex.io
This domain security report is maintained by PhishDestroy's automated threat-intelligence pipeline. Our system continuously monitors this domain across 11 security vendors on VirusTotal and 1 public blocklists.
The site displays a page titled “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | CryoDex”.
cryodex.io has been flagged by 11 security vendors as of May 17, 2026.
If you believe this listing is inaccurate, you can submit an appeal. For more information about our methodology, visit our FAQ page.