cpcalendars[.]raydium-token[.]xyz

This domain, cpcalendars.raydium-token.xyz, is actively impersonating the Raydium brand and is classified as a high-risk crypto scam. As of July 25, 2026, the domain is still active and has been flagged by 2 out of 93 security vendors on VirusTotal, indicating a potential threat. The domain appears on one security blocklist and has a Gridinsoft trust score of 0 out of 100, further raising concerns about its legitimacy. The page title 'Just a moment...' suggests that the website may be employing Cloudflare's security measures to deter automated scans or to delay access.

Technologies detected on the domain include Cloudflare Browser Insights, Cloudflare, and HTTP/3, which are commonly used to enhance security and performance. The nameservers for this domain are greg.ns.cloudflare.com and marjory.ns.cloudflare.com, both managed by Cloudflare. The domain was registered through OwnRegistrar, Inc., and was created on February 21, 2026. The HTTP status code 403 indicates that access to the website is forbidden, which is a common tactic used by malicious actors to prevent analysis.

The domain is currently blocked by PhishDestroy, a security tool designed to protect users from phishing attempts. Given the high risk level and the specific impersonation of Raydium, it is recommended that defenders block this domain and monitor for any related activity. The exact content of the website has not been analyzed, but the combination of the domain name and the technologies used strongly suggest a targeted attempt to deceive Raydium users. Defenders should also inform their users about the potential risks associated with this domain and advise them to avoid visiting or interacting with it.