raydiumreport[.]apcollective[.]site

Analysis of the domain raydiumreport.apcollective.site indicates active brand impersonation targeting Raydium, a cryptocurrency platform. The domain was registered on July 24, 2025, through NameCheap, Inc., and currently resolves to the IP address 185.7.81.149, hosted in the Netherlands under AS49981 (WorldStream B.V.). Infrastructure analysis reveals the use of Nginx as a web server, alongside Cloudflare and cdnjs for content delivery, while the detected technologies include Ubuntu and Chart.js, suggesting a structured frontend for data visualization. The page title, 'Raydium Social Performance Dashboard,' aligns with the reported scam type of a crypto scam, reinforcing the domain's intent to deceive users by mimicking legitimate Raydium analytics or reporting tools. Detection data remains limited, with only one of ninety-five security vendors flagging the domain on VirusTotal, though it appears on a single security blocklist and is actively blocked by PhishDestroy. The domain maintains an SSL certificate issued by Let's Encrypt (R12), a common tactic to lend superficial legitimacy to fraudulent sites. Nameservers for the domain are dns1.registrar-servers.com and dns2.registrar-servers.com, consistent with NameCheap's infrastructure. While the domain remains operational as of July 12, 2026, its Gridinsoft trust score of 0/100 further corroborates its malicious classification. Defenders should prioritize blocking this domain at the DNS or network level, particularly in environments where cryptocurrency-related activity is monitored. Additional scrutiny of related infrastructure, such as the hosting IP and registrar, may uncover further associated threats. The exact content and mechanics of the scam are not yet analyzed, but the combination of brand impersonation, cryptocurrency targeting, and low detection rates warrants immediate mitigation.