raydiumnodes[.]cc

The domain raydiumnodes.cc has been identified as a brand impersonation threat specifically targeting the Raydium platform. This domain is currently offline, but its recent activity posed a significant risk to users who might have mistaken it for an official Raydium resource. The domain was created on April 9, 2026, and registered through OwnRegistrar, Inc., raising concerns due to the registrar's association with less rigorous verification processes. It resolved to the IP address 104.21.21.33, which is commonly linked to hosting services that may be exploited for malicious purposes. The SSL certificate was issued by Let's Encrypt, a legitimate certificate authority, but this does not validate the domain's intent. Security analysis revealed that 6 out of 95 VirusTotal vendors flagged the domain as malicious, and it appeared on 3 security blocklists, indicating a moderate level of detection across the security community.

Given the elevated risk level associated with raydiumnodes.cc, users who may have interacted with this domain should exercise caution. The domain was designed to impersonate Raydium, likely to harvest credentials or distribute malware. Although it is now offline, any data entered on the site could be compromised. Users are strongly advised to avoid visiting the domain or clicking on any links associated with it. For those who may have accessed the site, it is recommended to change passwords for related accounts and monitor for unusual activity. Additionally, enabling two-factor authentication on Raydium and associated platforms can provide an extra layer of security. PhishDestroy continues to monitor this domain and similar threats to protect users from brand impersonation and phishing attacks.