multichaindex-a6o[.]pages[.]dev

Analysis indicates the domain multichaindex-a6o.pages.dev is actively impersonating Raydium, a decentralized exchange platform, as of July 12, 2026. The domain was registered on May 6, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, associated with Cloudflare's infrastructure in Canada. Nameservers kobe.ns.cloudflare.com and tina.ns.cloudflare.com further confirm Cloudflare hosting. The domain is flagged by 13 of 91 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100, indicating high-risk classification. It appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. The page title explicitly displays 'Raydium,' aligning with the reported brand impersonation scam type. Technologies detected include HSTS, Cloudflare, and HTTP/3, suggesting the use of modern web protocols to enhance perceived legitimacy. The domain remains operational, returning an HTTP 200 status, and no takedown activity has been observed. Defenders should prioritize blocking this domain at the network level, particularly in environments where Raydium or similar decentralized finance platforms are utilized. Further investigation into associated wallet addresses or transaction patterns is recommended to identify potential financial fraud vectors. The exact content and functionality of the site have not yet been analyzed, but the combination of brand impersonation, low trust scores, and active blocklist presence warrants immediate mitigation.