radium-wallt-en[.]pages[.]dev

This domain radium-wallt-en.pages.dev is assessed as a high-risk brand impersonation infrastructure targeting the Raydium ecosystem. The page title "Raydium Wallet – Secure Solana DeFi" is engineered to resemble a legitimate wallet interface, suggesting credential harvesting or wallet interaction redirection typical of fake login or crypto drainer campaigns.

Technical telemetry indicates multiple malicious signals. VirusTotal reports 10/95 security vendors flagging the domain. The domain was created on March 11, 2026 and is registered through Cloudflare, Inc. It resolves to IP 188.114.96.3 under AS13335 (Cloudflare, Inc.), and uses an SSL certificate issued by Google Trust Services (WE1). The infrastructure is currently active and appears on 3 security blocklists including PhishDestroy, MetaMask, and SEAL.

At present, the domain remains live and accessible, sustaining potential user exposure to credential theft or wallet compromise. Users who interacted with the site should assume possible credential exposure and immediately secure associated accounts. Recommended actions include revoking wallet approvals, transferring assets to a new secure wallet, and reviewing recent blockchain transactions for unauthorized activity. Any credentials entered should be treated as compromised and rotated immediately. Endpoint scanning and browser session cleanup are advised to mitigate persistence risks and prevent further exploitation.