usortechonsolshar[.]top

The domain usortechonsolshar.top was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. It resolves to the IP address 172.67.147.216, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is hosted on Cloudflare’s network and uses the nameservers amalia.ns.cloudflare.com and quinton.ns.cloudflare.com; no SSL certificate is presented for the site. Public threat intelligence indicates that the page title displayed by the site is "Raydium" and that it is intended to impersonate the brand celer, fitting a crypto‑scam profile.

Multiple defensive feeds have flagged the domain: it appears on four security blocklists and has been blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL. Reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, and VirusTotal reports that fifteen of ninety‑five scanned security vendors flagged the domain as malicious. These observations collectively suggest that the infrastructure was deliberately configured to target cryptocurrency users, likely leveraging the brand name to lure victims.

While the site is no longer reachable, the lack of TLS, the low trust score, and the presence on several blocklists warrant continued monitoring. Defenders should ensure that any cached or archived artifacts are quarantined, update URL filtering rules to include this host, and advise users of celer‑related services to remain vigilant for unsolicited links that reference the Raydium title. Further analysis of the underlying payloads, if any were captured, would be required to fully characterize the exploit mechanisms employed.