Security Scan: swap-raydium-ai Wallet system

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3674256a-cbac-4adf-ab9d-36e83aed2465 Domain and IP registration (RDAP)/api/v1/rdap/3674256a-cbac-4adf-ab9d-36e83aed2465How often this domain was scanned/api/v1/domain/stats/raydiumtoken-en.firebaseapp.com Scan history for this domain/api/v1/domain/history/raydiumtoken-en.firebaseapp.com?limit=15

This website contacted 9 IPs in 1 country across 6 domains to perform 126 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://raydiumtoken-en.firebaseapp.com/app

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake wallet-connection page on a firebaseapp.com subdomain that asks for your recovery phrase, keystore or private key and posts it to a personal Gmail via formsubmit.co. Seed-phrase phishing impersonating Raydium and dozens of wallet brands — never enter anything.

Risk Factors (6)

Requests the user's recovery phrase / keystore / private key — direct theft of wallet credentials

Credential-harvesting form submits cross-origin to formsubmit.co addressed to a personal Gmail account

Brand impersonation of Raydium and of multiple legitimate wallet vendors on a non-official domain

Free instant-provisioning hosting subdomain (firebaseapp.com) with unverifiable creation date

Unranked / no domain reputation despite claiming to be a major DeFi brand

Single-source threat-intel phishing report on the primary domain

Domain age information unavailable

Details

Page Title

swap-raydium-ai Wallet system

Scan Type

public

Favicon Hash

MMH3: 1283570893

MD5: 85eed78b7ea9b4a4494c3d37e20a5e90

Domain Name Analysis

Domain 'raydiumtoken-en.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'raydiumtoken-en'. Count 11 characters in 'firebaseapp' with five vowels and six consonants. Breaking it apart gives three words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Another page of the site in scan 09b2dcad

Page Load Overview

5.54s

Total Load Time

2.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,366 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain83% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

83%

technology software

80%

finance banking

80%

documentation technical

57%

e-commerce shopping

46%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
14	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	192.178.183.95Google · CDN	United States	AS15169Google LLC
14	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
14	142.250.154.94Google · CDN	United States	AS15169Google LLC
14	104.18.40.68Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
14	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
126	9	-	-