syn-recprotocol[.]xyz

The domain syn-recprotocol.xyz was registered on February 21, 2026 and is presently taken offline. Technical probing shows it resolves to the IP address 104.21.112.1, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The site presented a page title of "Raydium," but no further page content has been observed, leaving the exact visual presentation unknown. Intelligence flags the site as a crypto‑related scam that impersonates the Celer brand, consistent with the listed brand target of "celer" and the generic scam type "Crypto Scam." Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser rates the domain at 5 out of 100.

The domain appears on five independent security blocklists, specifically PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura, confirming cross‑vendor recognition of malicious intent. VirusTotal scans report that nine of ninety‑three security vendors flagged the domain, reinforcing the suspicion of malicious activity. An SSL certificate labeled "WE1" is present, but no additional certificate details are available.

The combination of low trust scores, multiple blocklist listings, and a non‑trivial detection rate on VirusTotal suggests a high likelihood that the domain was used to lure victims into a cryptocurrency fraud scheme. Defenders should continue to block the domain at perimeter controls, monitor for any resurgence of the hostname, and consider adding it to internal threat intelligence feeds. Given the offline status, ongoing observation is advised to detect any re‑hosting attempts or related infrastructure that may be activated in the future.