raydiumofficialhome[.]com

Analysis of the domain raydiumofficialhome.com indicates it was actively impersonating the Raydium cryptocurrency platform as part of a crypto scam operation. The domain, registered on December 6, 2025, through OwnRegistrar, Inc., was hosted behind Cloudflare nameservers (betty.ns.cloudflare.com and javier.ns.cloudflare.com) and resolved to the IP address 188.114.97.3, which is part of Cloudflare's infrastructure (AS13335). No SSL certificate was present at the time of assessment, increasing the likelihood of insecure connections. The page title 'Nur einen Moment…' suggests a temporary or transitional page, though the exact content and functionality remain unconfirmed due to the domain's current offline status.

Infrastructure analysis reveals that the domain was flagged by at least one security blocklist and detected by 2 of 95 security vendors on VirusTotal, indicating low but measurable suspicion. Gridinsoft assigned a trust score of 0/100, further supporting its classification as malicious. The domain was also blocked by PhishDestroy, reinforcing its association with phishing or fraudulent activity. While the specific scam mechanics are not detailed in available data, the classification as a 'Crypto Scam' aligns with the impersonation of Raydium, a known decentralized finance (DeFi) platform.

Defenders should treat this domain as part of a broader campaign targeting cryptocurrency users. The use of Cloudflare nameservers and hosting is consistent with efforts to obscure the true origin of the infrastructure, though the domain's current offline status limits further analysis. Organizations are advised to block the domain at the DNS or network level and monitor for related domains registered through OwnRegistrar or resolving to similar Cloudflare IP ranges. The absence of an SSL certificate and the presence of a generic page title may serve as additional indicators for automated detection systems.