radwire[.]org

Analysis of radwire.org indicates this domain was actively involved in a crypto scam operation impersonating the brand 'across'. The domain was registered on November 24, 2025, through Internet Domain Service BS Corp and resolved to the IP address 82.221.129.44, hosted on AS50613 (Advania Island ehf) in Iceland. At the time of assessment on July 25, 2026, the domain was offline, though it had previously been flagged by one security blocklist (PhishDestroy) and appeared in a single AlienVault OTX threat intelligence pulse. Four of 93 security vendors on VirusTotal had detected the domain as malicious, though the exact nature of the detections remains unconfirmed.

The SSL certificate was issued by Let's Encrypt (R13), and the site's infrastructure included LiteSpeed and HTTP/3 technologies. Nameservers were provided by buffy.ns.orangewebsite.com and siti.ns.orangewebsite.com. The page title, 'Radwire.org | Cybersecurity News Aggregator', does not align with the identified scam type, suggesting either a decoy or misdirection tactic.

While the domain is currently inactive, defenders should treat any future resolution or reappearance as high-risk, particularly in environments where cryptocurrency transactions or the 'across' brand are relevant. Historical associations with known scam infrastructure and the mismatch between the stated purpose and actual threat classification warrant continued monitoring. No further details about the specific crypto scam mechanics or victim targeting are available from the current evidence.