raydium-swap[.]cc

This domain, raydium-swap.cc, poses as the legitimate Raydium decentralized exchange platform to deceive users into interacting with malicious smart contracts or disclosing wallet credentials. The site is designed to execute crypto drainer attacks, where victims unknowingly authorize transactions that transfer funds to attacker-controlled addresses. Such impersonation schemes often employ fake liquidity pools, yield farming offers, or swap interfaces to exploit trust in established brands. Analysis indicates the domain was registered on September 01, 2025, through Spaceship, Inc., a registrar commonly used for short-lived malicious infrastructure. It resolves to the IP address 104.21.27.40 and has been flagged by 5 out of 95 security vendors on VirusTotal. The page title, 'Home Page,' is generic and lacks the branding elements typical of legitimate Raydium interfaces. Additionally, the domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, further confirming its malicious intent. If you visited raydium-swap.cc or interacted with its content, immediately disconnect your wallet from all decentralized applications and revoke any suspicious token approvals using a blockchain explorer or wallet management tool. Scan your device for malware, as crypto drainers may deploy additional payloads. Monitor your wallet for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Report the domain to relevant security teams or blocklist providers to aid in takedown efforts. Always verify domain authenticity by cross-referencing official project communications before engaging with crypto services.