# raydiummarkets.live — SUSPICIOUS

> raydiummarkets.live is a malicious domain impersonating Raydium, flagged by 3 of 95 VirusTotal vendors. Avoid clicking suspicious links to protect your assets.

## Summary
PhishDestroy identifies raydiummarkets.live as an active domain engaged in brand impersonation targeting Raydium, a legitimate decentralized exchange (DEX) on the Solana blockchain. The domain masquerades as the official Raydium platform, posing significant risks to users seeking to interact with the protocol. This threat is currently live and operational, with no signs of takedown as of the latest analysis.

This domain was flagged by 3 of 95 VirusTotal security vendors, indicating limited but present detection coverage. Registered through NameSilo, LLC, it resolves to IP address 104.21.16.25 and was created on March 19, 2026. The domain utilizes a Let's Encrypt SSL certificate, which may lend it an air of legitimacy to unsuspecting users. Despite its recent creation, the low trust scores and minimal blocklist presence suggest it is a newly deployed threat designed to exploit Raydium's brand recognition.

Users are strongly advised to avoid interacting with raydiummarkets.live under any circumstances. To mitigate risk, verify the authenticity of any Raydium-related domain by cross-referencing with official sources, such as the verified Raydium website or its social media channels. Additionally, ensure your browser extensions or security tools are updated to detect and block known malicious domains. If you have encountered this domain, report it to your organization's SOC or relevant cybersecurity authorities immediately. Proactive monitoring of network traffic for connections to 104.21.16.25 or similar IPs is recommended to prevent potential compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Raydium

## Domain Intelligence
- Registered: 2026-03-19 20:31:27
- Registrar: NameSilo, LLC
- IP: 104.21.16.25

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b511043c-3eab-4af0-a3b9-1e417e63e6a2
- PhishDestroy: https://phishdestroy.io/domain/raydiummarkets.live/
- LLM endpoint: https://phishdestroy.io/domain/raydiummarkets.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/raydiummarkets.live/
Last updated: 2026-03-22