revshare[.]webapplive[.]xyz

This domain, revshare.webapplive.xyz, poses an elevated risk as a brand impersonation threat targeting users of the Raydium decentralized exchange platform. The site mimics the legitimate Raydium interface, displaying an identical page title and design elements to deceive visitors into entering sensitive credentials or authorizing fraudulent transactions. Such impersonation attacks are commonly used to harvest wallet private keys, seed phrases, or other authentication details under false pretenses, leading to unauthorized asset transfers or account takeovers. Analysis indicates the domain was registered on May 20, 2026, through OwnRegistrar, Inc., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the site resolves to the IP address 104.21.49.234 and employs a Let's Encrypt SSL certificate to appear legitimate. Detection metrics from VirusTotal show that 3 out of 95 security vendors have flagged revshare.webapplive.xyz as malicious, a relatively low but notable detection rate that suggests the campaign may still be evading broader scrutiny. The discrepancy between the creation date and current year further raises concerns about potential domain spoofing or typosquatting tactics. Users who have visited revshare.webapplive.xyz or interacted with its content should take immediate corrective action. First, revoke any wallet or smart contract approvals granted to the domain via blockchain explorers or wallet management tools. Second, scan all devices used to access the site for malware or unauthorized extensions. Third, monitor linked accounts and transaction histories for suspicious activity, particularly unauthorized transfers or logins. If credentials were entered, reset passwords and enable multi-factor authentication on all associated platforms. Finally, report the domain to relevant security teams and consider submitting samples to threat intelligence platforms to aid in broader detection efforts.