radiumfixers[.]netlify[.]app

This domain, radiumfixers.netlify.app, poses a high-risk brand impersonation threat specifically targeting Raydium, a decentralized finance protocol. Analysis indicates the infrastructure is designed to deceive users into believing they are interacting with legitimate Raydium services, potentially leading to unauthorized access to cryptocurrency wallets or the execution of malicious transactions. The page title explicitly displays 'Raydium,' reinforcing the deception by mimicking the authentic platform's branding and interface elements.

Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered through Netlify on March 02, 2026, and currently resolves to the IP address 54.253.94.210. It appears on three security blocklists and is flagged by Google Safe Browsing for social engineering. VirusTotal reports 11 out of 95 security vendors detecting this domain as malicious. Additional technical details include the use of HSTS and a DigiCert SSL certificate issued by DigiCert Inc, which may lend a false sense of legitimacy to unsuspecting users.

Users who visited radiumfixers.netlify.app should immediately revoke any wallet permissions granted during the interaction and transfer assets to a new, secure wallet if unauthorized transactions are suspected. It is critical to review all connected applications and revoke access to any unknown or suspicious services. Enabling multi-factor authentication and monitoring account activity for anomalies are recommended defensive measures. If financial loss occurred, affected parties should report the incident to relevant financial authorities and cybersecurity organizations for further investigation.