raydium[.]ai[.]in

This domain, raydium.ai.in, was identified as a brand impersonation threat targeting Raydium and classified as a crypto scam. Registered on February 21, 2026, and reported on July 23, 2026, the domain displayed a page titled Raydium Fitness Club | Elevate Your Workout Experience. The domain resolved to IP address 172.67.186.50, hosted in the United States on AS13335 (Cloudflare, Inc.). It carried an SSL certificate (type WE1). At the time of analysis, the domain was taken offline.

Security vendor detection was low, with 2 of 93 vendors on VirusTotal flagging the domain as malicious. It appeared on 1 security blocklist. The Gridinsoft trust score was 0/100, indicating high suspicion. PhishDestroy had blocked the domain. The brand target was explicitly Raydium, though the page title suggested a fitness club theme, which may indicate an attempt to mix unrelated content to evade automated detection.

Defenders should treat this domain as a confirmed crypto scam and brand impersonation. Users who interacted with the site should monitor for unauthorized crypto transactions or credential theft. The domain is no longer online, but defenders should ensure any associated URLs or IPs are blocked in network security policies. The exact scam mechanism (e.g., wallet drainer, fake investment platform) remains unconfirmed from available data, though the crypto scam classification strongly indicates financial fraud targeting Raydium users. No further evidence of phishing kits or malware was identified in this analysis.