cryodex[.]io

Analysis of cryodex.io, registered on 21 February 2026, shows it is currently offline. The domain resolves to IP address 104.21.32.1, an address owned by Cloudflare and identified as ASN 13335 in the United States. The page title retrieved from the site reads "Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | CryoDex", indicating a cryptocurrency exchange façade. The domain appears on one security blocklist and is specifically flagged by PhishDestroy.

VirusTotal records indicate that 11 of 93 scanning engines have flagged the host, providing independent confirmation of malicious intent. Gridinsoft assigns an extremely low trust score of 1 out of 100, underscoring a high likelihood of abuse. The SSL certificate is listed as "WE1", which does not correspond to a recognized public‑trusted authority and is consistent with hastily‑issued certificates often used in fraudulent deployments. Intelligence categorizes this operation as a crypto‑scam and notes that the site attempts to impersonate the brand "across".

Given the combination of a freshly‑created domain, low trust metrics, multiple vendor detections, and blocklist inclusion, defenders should treat cryodex.io as confirmed malicious infrastructure. Recommended actions include adding the domain and its resolving IP to network deny lists, monitoring for any future DNS re‑activation, and extending endpoint web‑filter rules to block content matching the observed page title. Continuous observation of related Cloudflare‑hosted IP ranges is advised, as the infrastructure could be reused for additional phishing or crypto‑draining campaigns.