raydiumm[.]com

Analysis of the domain raydiumm.com indicates a high-risk crypto scam operation impersonating the Raydium brand. Registered on March 6, 2026, through Hello Internet Corp, the domain resolved to the IP address 104.21.15.108, hosted under AS13335 (Cloudflare, Inc.) in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (summer.ns.cloudflare.com and terin.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns. The domain lacked an SSL certificate, increasing the likelihood of interception or tampering during user interactions.

Security vendor detections on VirusTotal flagged the domain as malicious, with 13 of 94 engines identifying it as a threat. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, suggesting prior abuse reports. The page title, 'Raydium,' aligns with the targeted brand, further corroborating the impersonation attempt. No legitimate association with the Raydium platform is known, and the domain was taken offline as of the report date.

Defenders should treat this domain as confirmed malicious infrastructure. Network-level blocking of the IP 104.21.15.108 and monitoring for related Cloudflare-hosted domains registered via Hello Internet Corp may mitigate further abuse. Given the lack of SSL and the domain's abrupt offline status, residual risk from cached or mirrored versions remains possible. Additional scrutiny of domains sharing the same registrar or hosting provider is recommended to identify potential campaign expansion.