# raydiumio.cc — MALICIOUS

> raydiumio.cc, a phishing site mimicking Raydium, was flagged and taken offline. Learn about its threat and blocking details here.

## Summary
PhishDestroy has identified raydiumio.cc as a high-risk brand impersonation domain targeting Raydium. Classified under brand impersonation phishing, this domain aimed to deceive users by replicating the legitimate Raydium platform's appearance and branding. The page title found simply read "Raydium," reinforcing its intent to mislead.

Technically, raydiumio.cc was registered recently on March 5, 2026, through Global Domain Group LLC, a registrar often associated with malicious registrations. The domain resolved to IP address 172.67.195.117 and was flagged by 13 out of 95 VirusTotal security vendors. Additionally, it appeared on two separate security blocklists, indicating widespread detection of its malicious nature.

Currently, raydiumio.cc has been taken offline following detection and reporting. PhishDestroy recommends continued vigilance for similar brand impersonation attempts targeting Raydium or related platforms. This takedown reflects proactive threat mitigation but highlights the ongoing risk posed by fraudulent domains exploiting trusted brands.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Raydium
- Page title: Raydium

## Domain Intelligence
- Registered: 2026-03-05 03:07:01
- Registrar: Global Domain Group LLC
- Country: US
- IP: 172.67.195.117
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["deborah.ns.cloudflare.com", "uriah.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "CRDF", "CyRadar", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Lionic", "Netcraft", "SOCRadar", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/Jj9bcL6T/4bc607a54c1c.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/raydiumio.cc
- Wayback Machine: https://web.archive.org/web/https://raydiumio.cc
- PhishDestroy: https://phishdestroy.io/domain/raydiumio.cc/
- LLM endpoint: https://phishdestroy.io/domain/raydiumio.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/raydiumio.cc/
Last updated: 2026-03-19