raydiumaapps[.]com

This domain is flagged as a high-risk brand impersonation site specifically targeting Raydium, a decentralized finance platform. Analysis indicates the site is designed to deceive users into believing they are interacting with the legitimate Raydium interface, potentially leading to unauthorized asset transfers or credential harvesting. The threat type is classified as brand impersonation with a focus on cryptocurrency-related fraud, given the target's association with Solana-based DeFi services. Infrastructure analysis reveals the domain raydiumaapps.com was registered on June 01, 2026, through Metaregistrar BV and currently resolves to IP address 188.114.97.3, hosted on Cloudflare, Inc. (AS13335) infrastructure. The domain lacks an SSL certificate, increasing the risk of man-in-the-middle attacks or data interception. It is actively blocked by three security blocklists and flagged by 2 out of 95 security vendors on VirusTotal. Additional intelligence confirms the domain is detected by multiple threat intelligence platforms, including PhishDestroy, MetaMask, and SEAL, further validating its malicious intent. The page title explicitly mirrors the legitimate Raydium brand, reinforcing the impersonation tactic. Mitigation steps for this threat include immediate blocking of the domain and its associated IP address (188.114.97.3) at the network level. Users should verify the authenticity of any Raydium-related website by cross-referencing official communication channels, such as the project's verified social media accounts or documentation. Organizations are advised to update their threat intelligence feeds to include this domain and its indicators of compromise (IOCs). End-users should be educated on recognizing brand impersonation tactics, particularly in the context of cryptocurrency platforms, and encouraged to use hardware-based authentication methods for sensitive transactions. Monitoring for unusual asset movements or unauthorized access attempts is recommended for those who may have interacted with the domain.