raudium-waleet-eng-us[.]blogspot[.]com

This domain poses a targeted brand impersonation threat against Raydium, a decentralized finance platform. The site presents itself as a legitimate Raydium Wallet Guide under the title 'Raydium Wallet Guide: Secure, Fast,' likely designed to deceive users into disclosing wallet credentials, seed phrases, or installing malicious software under the guise of security instructions. The content is structured to exploit trust in the Raydium brand, potentially leading to unauthorized access to cryptocurrency assets or financial fraud. Analysis indicates the domain is hosted on Google Blogger infrastructure and resolves to IP address 142.251.14.132. The SSL certificate is issued by Google Trust Services (WE2), which does not mitigate the malicious intent. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, while it appears on 3 distinct security blocklists. The domain leverages the legitimate appearance of a Blogspot subdomain to evade initial suspicion, though the naming convention 'raudium-waleet-eng-us' is atypical for official communications and includes deliberate misspellings to mimic the target brand. Users who visited this domain should immediately revoke any permissions granted to associated browser extensions or applications. If credentials or seed phrases were entered, affected wallets must be transferred to new, secure addresses, and all connected devices should undergo a full malware scan using updated security tools. Monitor transaction histories for unauthorized activity and report the incident to the legitimate Raydium support channels for further mitigation. Avoid interacting with any content from this domain, and verify all future communications through official Raydium channels only.