webdisk[.]raydium-token[.]xyz

This domain is flagged as a high-risk brand impersonation targeting Raydium, a decentralized exchange protocol. Registered on February 21, 2026, through OwnRegistrar, Inc., the domain employs Cloudflare for content delivery and HTTP/3 protocol, with nameservers greg.ns.cloudflare.com and marjory.ns.cloudflare.com. The page title 'Just a moment...' and HTTP 403 status indicate access is blocked to direct inspection, a common tactic used by threat actors to evade automated analysis and delay takedown. Gridinsoft assigns a trust score of 0/100, and one security vendor (PhishDestroy) flags the domain on a blocklist. VirusTotal shows 1 of 93 vendors detecting malicious activity. The domain remains active as of July 13, 2026. Defenders should treat this domain as actively hostile, block all traffic at network and email gateways, and monitor for associated subdomains or IPs. The use of Cloudflare may indicate an attempt to obscure the true hosting infrastructure, so further investigation into upstream providers or historical DNS records is recommended. No additional details on the specific scam kit or landing page content are available from the current data.