raydium[.]co[.]in

Analysis of raydium.co.in shows a domain registered on September 11, 2025 through Endurance Digital Domain Technology Private Limited. The domain resolves to IP address 147.45.222.156, which is assigned to AS216127 INTERNATIONAL HOSTING COMPANY LIMITED located in Germany. DNS resolution uses the dnspod authoritative servers a.dnspod.com and c.dnspod.com, a pattern frequently observed in malicious campaigns.

An SSL certificate presented by the host is labeled "localhost," indicating a default or self‑signed certificate rather than a legitimate certificate for the Raydium brand. HTTP requests return a 404 Not Found page title, suggesting the site is currently offline or deliberately serving an error page to avoid detection. VirusTotal scans have flagged the domain by 10 of 95 security vendors, providing independent corroboration of malicious intent.

The domain is listed on two public blocklists, PhishDestroy and ScamSniffer, and is categorized as a crypto scam targeting the Raydium brand. Given the combination of recent registration, foreign hosting, anomalous TLS configuration, multiple vendor detections, and blocklist presence, defenders should block both the domain and its associated IP address, monitor for any future resolution changes, and include the domain in threat intelligence feeds related to cryptocurrency fraud. Continuous observation of the hosting ASN and DNS records is recommended to detect potential re‑use or migration of the infrastructure.