Security Scan Report: raydiumtoken-en.web.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 6 domains to perform 126 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://raydiumtoken-en.web.app/app

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake 'Raydium AI' wallet-connect page on a free web.app subdomain that harvests seed phrases/private keys and posts them to a formsubmit.co address tied to a personal Gmail. Multi-feed phishing match; confirmed scam.

Risk Factors (5)
Seed-phrase / private-key harvesting form disguised as a wallet connection dialog
Credential exfiltration to an external form-handling service tied to a personal Gmail address
Impersonation of the Raydium brand on a non-official, free hosting subdomain
Multi-source phishing threat-intelligence match on the primary domain
Mass wallet-brand impersonation across more than 100 named wallets
Domain age information unavailable

Details

Page Title

swap-raydium-ai Wallet system

Scan Type

public

Domain Name Analysis

The domain name 'raydiumtoken-en.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'raydiumtoken-en'. Its registrable label 'web' stretches across 3 characters split between 1 vowel and two consonants. Segmentation suggests one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://raydiumtoken-en.web.app/app

Another page of the site in scan 2898348a

Page Load Overview

5.53s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,366 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain83% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
83%
technology software
80%
finance banking
80%
documentation technical
57%
e-commerce shopping
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
15172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15192.178.183.95Google · CDNUnited States
AS15169Google LLC
15104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
15142.250.154.94Google · CDNUnited States
AS15169Google LLC
15151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
15104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1268--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FC141D6A61FE00915B42B498239B72407736F21FD84BCC48FA9EBB8EDFC151655A23CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:xe/UEJLzg/X61UIB2+i+6EB3SQa/M5aO1dcU13EvJdxi56HEXWLEhzu+asFejZOn:xe/UE5iIb62raiJnYvBk4YxYZOlhzH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:201471:ZBEAwJTDhBZglgQAbQSTAIElEBiAwNnlheh0wdRoJAIKgJAZgIAwdCAoQCAMEUAoQQ7WFZRQ0ck2gEIhhQwNgAgpCNoCIgEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:187e3e0c2c343c30
Perceptual Hash:8299cd686c396e37
Difference Hash:b3f0ecdde9cdd5e5
Wavelet Hash:197e3e2f25057c34
Color Hash:#d279cc

Scan History

Scan history not available

Unable to load historical scan data