956b52c2ecf347d6[.]raydiumpro-web[.]shop
“Raydium Pro”
956b52c2ecf347d6.raydiumpro-web.shop — Contenu indisponible (HTTP 502). Usurpation de l'identité de la marque : Raydium; Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 10/95 (CRDF, CyRadar, Ermes, Emsisoft, Fortinet); Google Safe Browsing flagged; PhishDestroy score 80/100. Bureau d’enregistrement: Gname.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
On 24 July 2026 the domain 956b52c2ecf347d6.raydiumpro-web.shop was observed to be offline but retains a footprint indicative of a high‑risk brand‑impersonation campaign targeting Raydium. The domain was registered on 15 October 2025 through Gname.com Pte. Ltd. and is hosted behind Cloudflare’s network (ASN 13335) with the IP address 104.21.86.58 located in the United States. DNS resolution is served by alaric.ns.cloudflare.com and brynne.ns.cloudflare.com, confirming the use of Cloudflare’s authoritative name‑servers. No TLS certificate was presented, meaning the site would have been reachable only over HTTP, a common tactic to avoid certificate‑pinning checks.
The page title returned during the brief live period was “Raydium Pro”, matching the declared brand target Raydium and the listed scam type “Crypto Scam”. Google Safe Browsing classified the URL as social engineering, and VirusTotal recorded ten detections out of ninety‑five scanners, indicating that multiple security vendors identified malicious characteristics. The domain also appears on a single external blocklist and was listed by PhishDestroy as a blocked resource. Evidence suggests the operator intended to lure Raydium users into a fraudulent cryptocurrency workflow, although the exact payload or credential‑capture mechanism has not been captured.
Because the site is currently offline, active traffic cannot be measured, and the specific malicious infrastructure remains unknown. Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurgence of the same host header or similar sub‑domains, and update detection rules to flag the exact page title “Raydium Pro”. Incident response teams should also advise Raydium community members to disregard any unsolicited communications referencing “Raydium Pro” and to verify URLs against the official Raydium domain.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Registration: raydiumpro-web.shop
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain raydiumpro-web.shop behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif