raydiunmsol[.]com

Analysis of raydiunmsol.com shows a short‑lived site that was created on 25 September 2025 and subsequently taken offline. The page title returned by the server is "Raydium", matching the declared brand target of Raydium and the listed scam type of brand impersonation. The domain resolves to 188.114.96.3, an address owned by Cloudflare, Inc. and geolocated to Canada. Nameserver records point to dane.ns.cloudflare.com and nena.ns.cloudflare.com, confirming Cloudflare as the DNS provider. No TLS certificate is presented, meaning the site operated without HTTPS, which is atypical for legitimate services and further suggests malicious intent.

A VirusTotal scan recorded 13 detections out of 94 security vendors, indicating that a minority of scanners identified malicious characteristics. The Gridinsoft trust score of 36 / 100 places the domain well below common safety thresholds. The site appears on three public blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the assessment of a phishing or brand‑impersonation threat. Technical fingerprints show a Node.js runtime serving a Vue.js/Nuxt.js application, with Cloudflare Browser Insights and HTTP/3 enabled, a stack frequently observed in fraudulent cryptocurrency‑related pages.

Registration was performed through the registrar WEBCC, and no SSL certificate was issued. Because the domain is currently offline, real‑time content cannot be examined, and the exact phishing landing page remains unknown. Defenders should continue to block the IP address 188.114.96.3 and the domain name in DNS and web filtering solutions, monitor for any re‑registration or resurrection of the host, and consider adding the domain to internal threat intel feeds. Additional investigation may be warranted if new activity appears, especially given the moderate vendor detection count and the presence on multiple blocklists.