raydiumcontracts[.]live

This domain, raydiumcontracts.live, is identified as a high-risk brand impersonation threat specifically targeting Celer Network, a cross-chain interoperability protocol. The site presents itself as an official platform under the title 'raydiumofficialhome,' attempting to exploit user trust in legitimate crypto services. Analysis indicates the domain is designed to facilitate fraudulent activities, likely including wallet-draining schemes or unauthorized transaction approvals, by mimicking Celer Network's branding and interface. Users interacting with this domain risk financial loss through malicious smart contract interactions or credential harvesting. Infrastructure analysis reveals multiple red flags supporting this assessment. The domain was registered on January 13, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. It resolves to the IP address 188.114.97.3, hosted on Cloudflare's network (AS13335), which is often leveraged to obfuscate true origins. Security vendors on VirusTotal flag the domain at a ratio of 18/95, and it appears on four independent blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The SSL certificate (WE1) further suggests minimal effort to establish legitimacy, as it lacks validation beyond basic encryption. Users who have visited raydiumcontracts.live or interacted with its content should take immediate remedial actions. Disconnect all active wallet sessions associated with the domain and revoke any smart contract approvals granted during the interaction. Scan connected devices for malware or unauthorized extensions, as the site may have deployed additional payloads. Monitor financial accounts and transaction histories for unauthorized activity, and report the domain to relevant security communities to prevent further exploitation. If credentials or private keys were entered, consider migrating assets to new wallets to mitigate potential compromise.