app[.]raydium-dao[.]live

The domain app.raydium-dao.live is identified as a high-risk brand impersonation threat targeting Raydium. The domain is currently offline, but it remains a concern due to its previous malicious activities.

Analysis indicates that the domain app.raydium-dao.live was registered through CC-192-3-190-184-29 (ASN: 36352), which is associated with the IP address 192.3.190.186 located in the United States under AS36352 HostPapa. The domain was flagged by 11 out of 95 security vendors on VirusTotal, and it appears on 2 security blocklists, including PhishDestroy and ScamSniffer. Google Safe Browsing has also marked this domain as a phishing threat. The page title for the domain was found to be 'Raydium', further confirming its intent to impersonate the legitimate Raydium brand.

The domain app.raydium-dao.live is currently taken offline, but it is recommended that organizations and individuals who may have interacted with this domain conduct a thorough review of their security logs and user credentials. Network administrators should update their blocklists to include this domain and its associated IP address. Additionally, users should be educated on the risks of brand impersonation and encouraged to verify the legitimacy of any Raydium-related links before clicking or entering sensitive information.