basicspaceappsmart[.]online

This domain, basicspaceappsmart.online, is flagged as a brand impersonation threat targeting Raydium, a decentralized finance protocol. Analysis indicates the site replicates Raydium’s interface to deceive users into disclosing wallet credentials or approving malicious transactions, a tactic consistent with cryptocurrency phishing campaigns. No explicit drainer kit signatures were identified, but the domain’s structure and content align with credential-harvesting infrastructure. Infrastructure analysis reveals the domain was registered on May 20, 2026, via HOSTINGER operations, UAB, and resolves to IP address 172.67.219.236. Security vendor assessments show a VirusTotal detection score of 6/95, with four independent blocklists listing the domain as malicious. The domain employs Cloudflare for hosting and CDN services, including HSTS and HTTP/3 protocols, which may obscure origin servers and complicate takedown efforts. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. As of the latest verification, basicspaceappsmart.online has been taken offline, likely due to registrar intervention or Cloudflare enforcement. However, residual risk persists due to the domain’s recent creation date and the potential for re-registration or migration to alternative infrastructure. Users who interacted with the domain are advised to revoke any suspicious wallet approvals, rotate credentials, and monitor connected accounts for unauthorized transactions. Security teams should update blocklists to include the domain and associated IP, while remaining vigilant for derivative campaigns using similar naming conventions or infrastructure.