956b52c2ecf347d6[.]raydiumpro-web[.]shop
“Raydium Pro”
956b52c2ecf347d6.raydiumpro-web.shop — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Raydium; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 10/95 (CRDF, CyRadar, Ermes, Emsisoft, Fortinet); Google Safe Browsing flagged; PhishDestroy score 80/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
On 24 July 2026 the domain 956b52c2ecf347d6.raydiumpro-web.shop was observed to be offline but retains a footprint indicative of a high‑risk brand‑impersonation campaign targeting Raydium. The domain was registered on 15 October 2025 through Gname.com Pte. Ltd. and is hosted behind Cloudflare’s network (ASN 13335) with the IP address 104.21.86.58 located in the United States. DNS resolution is served by alaric.ns.cloudflare.com and brynne.ns.cloudflare.com, confirming the use of Cloudflare’s authoritative name‑servers. No TLS certificate was presented, meaning the site would have been reachable only over HTTP, a common tactic to avoid certificate‑pinning checks.
The page title returned during the brief live period was “Raydium Pro”, matching the declared brand target Raydium and the listed scam type “Crypto Scam”. Google Safe Browsing classified the URL as social engineering, and VirusTotal recorded ten detections out of ninety‑five scanners, indicating that multiple security vendors identified malicious characteristics. The domain also appears on a single external blocklist and was listed by PhishDestroy as a blocked resource. Evidence suggests the operator intended to lure Raydium users into a fraudulent cryptocurrency workflow, although the exact payload or credential‑capture mechanism has not been captured.
Because the site is currently offline, active traffic cannot be measured, and the specific malicious infrastructure remains unknown. Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurgence of the same host header or similar sub‑domains, and update detection rules to flag the exact page title “Raydium Pro”. Incident response teams should also advise Raydium community members to disregard any unsolicited communications referencing “Raydium Pro” and to verify URLs against the official Raydium domain.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: raydiumpro-web.shop
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain raydiumpro-web.shop behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive