raydium[.]it[.]com

The domain raydium.it.com was registered on February 21, 2026 and is currently listed as offline. Security monitoring indicates that the site was used to impersonate the cryptocurrency platform Raydium, presenting a page title of “Raydium | Futuristic Sushi Experience.” The infrastructure resolves to the IP address 104.21.16.1, which belongs to Cloudflare, Inc. (AS13335) and is hosted in the United States. The SSL certificate presented is identified as WE1, suggesting a standard TLS configuration without further validation. Threat intelligence shows that the domain appears on a single security blocklist and was flagged by PhishDestroy, confirming that the site was actively blocked by that service.

VirusTotal scans report that two of ninety‑three security vendors flagged the domain, providing additional evidence of malicious intent. Independent trust scoring from Gridinsoft assigns a score of zero out of one hundred, reflecting a lack of reputation. The known classification is a crypto scam, aligning with the brand‑impersonation pattern aimed at deceiving Raydium users.

Uncertainty remains regarding the specific payload or credential‑stealing mechanisms, as no detailed page content or network traffic analysis has been published. Defenders should continue to block the domain at perimeter filters, update threat intelligence feeds with the observed IP and SSL details, and monitor for any resurgence of the domain or similar variants. Given the low trust score and multiple independent detections, the recommended posture is to treat any traffic to raydium.it.com as malicious and to educate users about the fraudulent brand representation.