raydiumsapp[.]org

The domain raydiumsapp.org was registered on September 04, 2025 through Tucows Domains Inc. and resolves to the IPv4 address 186.2.161.117, which is allocated to AS59692 IQWeb FZ-LLC in Belize. The site’s HTTP response is currently offline, and no SSL certificate was observed on the host. Nameserver configuration lists three njalla-operated servers (1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo), a pattern frequently seen in malicious infrastructure. The page title returned by the domain is "Swap Raydium," directly referencing the targeted brand Raydium, and the intelligence categorises the campaign as a wallet/seed phishing impersonation of that brand.

VirusTotal reports three of ninety‑five scanners flagging the domain, indicating partial detection by security products. Independent blocklists PhishDestroy and ScamSniffer have already listed the host, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The overall risk rating is elevated, reflecting the combination of brand impersonation, low trust score, and active blocklist listings.

Uncertainty remains regarding the exact content served before the site went offline, as no visual or functional analysis is available. Defenders should add the domain and its associated IP address to internal blocklists, monitor the listed nameservers for related activity, and consider the host as a confirmed malicious actor targeting Raydium users. Continuous vigilance is advised, especially for any future re‑registration of the domain or reuse of the same hosting infrastructure.