# raydiumswap.us — MALICIOUS

> Security alert: raydiumswap.us impersonates Raydium. 9/95 vendors flag this site. Check the full report.

## Summary
PhishDestroy identifies raydiumswap.us as an active brand impersonation domain targeting Raydium users. This domain poses an elevated risk due to its deliberate attempt to deceive visitors by mimicking the legitimate Raydium platform, a well-known decentralized exchange on the Solana blockchain. The threat involves fraudulent cryptocurrency trading sites designed to steal user credentials and funds through fake interfaces. Users attempting to access Raydium via this domain risk unauthorized asset transfers, wallet compromise, and financial loss. Immediate avoidance and reporting are strongly advised to prevent exposure to credential harvesting and cryptocurrency theft schemes.

This domain was flagged by 9 out of 95 VirusTotal security vendors and is associated with multiple red flags. It resolves to IP address 188.114.96.3, is registered through GoDaddy.com, LLC, and obtained an SSL certificate from Google Trust Services. The domain was created on July 29, 2025, indicating recent registration aligned with active phishing campaigns. Its low trust score and presence on multiple threat intelligence feeds further validate its malicious intent. The combination of a recently registered domain, brand impersonation, and active detection underscores the urgency for user caution and enterprise blocking.

To mitigate the threat posed by raydiumswap.us, users should avoid visiting the domain entirely and remove it from bookmarks or saved links. Block the domain and IP address (188.114.96.3) at the network and endpoint levels using firewall rules, DNS filtering, or security platforms. For Raydium users, only access the platform via the official domain raydium.io and verify all links before clicking. Enable wallet transaction simulation tools and use hardware wallets to limit exposure. Report this domain to your security team or via platforms like PhishDestroy to help protect the broader community from ongoing impersonation attacks.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Raydium

## Domain Intelligence
- Registered: 2025-07-29 14:36:14
- Registrar: GoDaddy.com, LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 9 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/46ff392b-ad4b-46cb-a47c-96edb9d62d65
- PhishDestroy: https://phishdestroy.io/domain/raydiumswap.us/
- LLM endpoint: https://phishdestroy.io/domain/raydiumswap.us/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/raydiumswap.us/
Last updated: 2026-03-29