max-solantesting-z1[.]com

Analysis of the domain max-solantesting-z1.com indicates a high-risk crypto scam operation targeting users of the Celer brand. The domain was registered on February 21, 2026, through MAT BAO CORPORATION and is currently offline. Infrastructure analysis reveals it was hosted on Cloudflare IP 172.67.167.39 (AS13335, United States) with nameservers janet.ns.cloudflare.com and memphis.ns.cloudflare.com. No SSL certificate was detected, increasing the likelihood of unencrypted user interactions.

The page title, Raydium, does not align with the known brand target, Celer, suggesting either a misdirection tactic or a generic template used across multiple scam campaigns. Google Safe Browsing flags the domain for social engineering, while 14 of 93 security vendors on VirusTotal classify it as malicious. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is referenced in one AlienVault OTX threat intelligence pulse. The absence of an SSL certificate, combined with Cloudflare hosting, is a common pattern in transient scam domains designed to evade takedowns.

While the exact content of the site remains unconfirmed due to its offline status, the available evidence—including the brand impersonation, crypto scam classification, and detection by multiple security vendors—supports a high-risk assessment. Defenders should treat this domain as compromised and block it at the network level. Given its presence on multiple blocklists and association with known scam infrastructure, organizations should also monitor for related domains using similar naming patterns or Cloudflare-hosted IPs. The registration date suggests the domain was active for approximately five months before being taken offline, indicating a potential window of exposure for users who may have interacted with it during that period.