lad68[.]top

The domain lad68.top is identified as a brand impersonation threat, specifically targeting Raydium, and is currently offline. This domain poses an elevated risk level due to its impersonation activities and the negative security indicators associated with it.

Analysis indicates that lad68.top has been flagged by 9 of 95 VirusTotal vendors, suggesting a potential threat. The domain is registered through NiceNIC International Group Co., Limited and resolves to the IP address 172.67.210.86. It was created on October 07, 2025, and appears on 2 security blocklists, including ScamSniffer and PhishDestroy. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trustworthiness. The page title found on this domain, 'Swap Raydium,' further supports the hypothesis that it was designed to mimic legitimate Raydium services.

Given the current status of the domain being offline, the immediate risk has been mitigated. However, organizations and individuals should remain vigilant as the domain could be reactivated in the future. It is recommended to avoid interacting with this domain and to report any suspicious activity to security teams. Additionally, implementing domain monitoring and educating users on recognizing brand impersonation tactics can help prevent future incidents involving this or similar domains.