app-raydum[.]cc

This domain, app-raydum.cc, poses a significant risk as a brand impersonation threat designed to deceive users of Raydium, a decentralized exchange on the Solana blockchain. The site mimics legitimate Raydium interfaces, presenting itself as a "Raydium Exchange Guide | Solana DEX Portal" to trick visitors into connecting wallets or entering sensitive credentials. Such schemes often deploy crypto drainers—malicious scripts that automatically siphon funds from connected wallets without user consent. The potential for financial loss is high, particularly for users unfamiliar with the authentic platform’s domain structure. Analysis indicates this domain was registered on April 1, 2026, through NameSilo, LLC, a registrar frequently associated with suspicious domains due to its low-cost and minimal verification processes. Infrastructure analysis reveals the site resolves to the IP address 104.19.169.112 and employs Cloudflare, a common tactic to obscure hosting origins and evade takedowns. Security telemetry shows the domain is flagged by 4 out of 95 vendors on VirusTotal, including detection by PhishDestroy. Additionally, it appears on one security blocklist, and Gridinsoft assigns it a trust score of 0/100, further confirming its malicious nature. The use of HTTP Strict Transport Security (HSTS) is noted, though this is likely an attempt to appear legitimate rather than an indicator of security. Users who visited app-raydum.cc should assume their wallet or credentials may be compromised. Immediate steps include disconnecting any wallets linked to the site and revoking permissions via a blockchain explorer. All passwords or seed phrases entered on the site should be considered exposed, necessitating the creation of new wallets and migration of assets. Monitor connected accounts for unauthorized transactions and enable transaction simulation tools to preview wallet interactions before approval. If funds were lost, report the incident to relevant blockchain analytics services and local cybercrime authorities. Always verify domain authenticity by cross-referencing official project sources before interacting with decentralized finance platforms.