radiumprotocol[.]world

PhishDestroy identifies radiumprotocol.world as an actively malicious domain distributing fraudulent cryptocurrency investment content. This site is designed to appear as a legitimate decentralized finance (DeFi) protocol and misleads users into depositing digital assets under false promises of high returns. The domain uses a Let's Encrypt SSL certificate to enhance credibility, but the underlying infrastructure—hosted on IP 104.21.53.135 via OwnRegistrar, Inc.—and its recent registration date of March 06, 2026, indicate a hastily deployed threat operation targeting unsuspecting investors. This domain was flagged as a generic phishing campaign with zero detection coverage across 95 security engines on VirusTotal as of investigation time. The domain is newly registered, lacks any historical trust signals, and raises immediate concern due to its thematic alignment with rapidly evolving DeFi scams. Based on domain age, registrar choice, and zero-blocklist status, the risk profile is classified as active and potentially escalating—especially as operators often rebrand or expand campaigns within days. If you have visited radiumprotocol.world, cease all interaction immediately and disconnect from the internet if you entered any credentials or cryptocurrency wallet connections. Monitor financial accounts closely for unauthorized transactions and consider revoking any connected blockchain permissions using tools like MetaMask or Etherscan. Report the domain to your organization’s security team or to abuse channels for OwnRegistrar, Inc., including full URL, timestamp, and any extracted artifacts. Enable transaction alerts and block the IP 104.21.53.135 at network boundaries where possible to prevent further user exposure.