arkadykirilenkosigma[.]com

This domain, arkadykirilenkosigma.com, is identified as a brand impersonation threat specifically targeting Raydium, a decentralized finance platform. Analysis confirms the domain was actively used for phishing operations designed to deceive users into disclosing credentials or transferring assets under false pretenses. As of the latest verification, the domain has been taken offline, though prior activity remains under scrutiny. Infrastructure analysis reveals the domain was registered on June 08, 2026, through OwnRegistrar, Inc., and resolved to the IP address 104.21.92.128. It appears on two security blocklists and has been flagged by 13 of 95 security vendors on VirusTotal. Additionally, the domain was included in four threat intelligence pulses on AlienVault OTX, further corroborating its malicious classification. The elevated risk level is supported by its detection across multiple independent threat feeds, including automated and community-driven platforms. The domain is currently offline, reducing immediate exposure risk. However, organizations and users are advised to treat any prior interactions with this domain as compromised. Network administrators should ensure the domain and its associated IP (104.21.92.128) are blocked at the perimeter. Security teams are recommended to review logs for connections to this domain or IP, particularly those occurring between June 2026 and its takedown. User awareness training should emphasize the risks of brand impersonation, especially in decentralized finance contexts, and encourage verification of official communication channels.