raydiun[.]lat

This domain, raydiun.lat, is a fraudulent replica of the legitimate Raydium platform, specifically mimicking its staking interface. The site is designed to deceive users into entering sensitive credentials or connecting cryptocurrency wallets, enabling attackers to drain funds or harvest private keys. The page title explicitly displays 'Raydium Staking,' a direct attempt to exploit trust in the Raydium brand for financial gain. Analysis indicates the domain was registered on April 14, 2026, through Namecheap, a registrar frequently abused for malicious infrastructure. It resolves to the IP address 104.21.73.32 and is flagged by 5 out of 95 security vendors on VirusTotal. Additionally, the domain appears on 4 separate security blocklists, and its Gridinsoft trust score is 0/100, reflecting high confidence in its malicious nature. Technologies detected include Cloudflare, which is often leveraged to obscure hosting origins and evade takedowns. If you visited raydiun.lat, immediately disconnect any connected wallets and revoke permissions for all associated dApps. Scan the device for malware using updated security tools, as the site may have deployed malicious scripts. Change passwords for any accounts accessed while the domain was open, and monitor financial accounts for unauthorized transactions. Report the incident to relevant security teams or platforms to assist in broader mitigation efforts.