hiodax[.]com

PhishDestroy identifies hiodax.com as an active cryptocurrency exchange phishing domain engaged in credential harvesting and fund theft. The domain resolves to IP 104.21.35.186, registered on March 04, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal currently shows 6/95 detection engines flagging the domain, and no presence on major blocklists has been observed. The SSL certificate issued by Let's Encrypt may be used to lend false legitimacy to the fraudulent site. This domain was flagged under investigation due to its recent creation date and zero detections despite clear phishing indicators. While the lack of VirusTotal coverage may suggest low visibility, it also indicates a newly deployed threat with potential to evade early detection. The use of a legitimate-looking SSL certificate further masks malicious intent, targeting users who rely on HTTPS indicators for trust. To mitigate exposure to hiodax.com, avoid visiting or interacting with the domain entirely. Block the IP 104.21.35.186 at the network level and add hiodax.com to browser-based blocklists or hosts files. Users considering cryptocurrency transactions should verify exchange URLs through official channels only. Report any interactions with this domain to your security team and relevant cybercrime units to aid in takedown efforts.