raydlium[.]cc

This domain, raydlium.cc, poses a specific brand impersonation threat against the decentralized exchange Raydium. By mimicking the legitimate Raydium brand, the domain was likely designed to deceive users into connecting their cryptocurrency wallets, disclosing private keys, or approving malicious transactions. The page title, '恭喜，站点创建成功！' (Chinese for 'Congratulations, site created successfully!'), indicates the domain was set up quickly and lacked legitimate content, a common pattern for phishing infrastructure. The threat is heightened by the domain's registration through a privacy-oriented registrar and its appearance on multiple blocklists.

Technical indicators confirm the elevated risk. VirusTotal analysis reveals that 7 out of 95 security vendors flag this domain as malicious, providing strong community consensus on its danger. The domain was registered through Dynadot LLC on February 22, 2026, a relatively recent creation date that aligns with scam deployment timelines. It resolves to IP address 172.67.130.27 and appears on 3 security blocklists, including MetaMask, SEAL, and PhishDestroy. The domain is currently offline, but the infrastructure remains identifiable for forensic analysis.

Users who visited raydlium.cc should take immediate action. Disconnect any cryptocurrency wallet that was connected to the site, revoke any token approvals granted, and monitor wallet addresses for unauthorized transactions. Change passwords on any accounts where the same credentials were used, and enable two-factor authentication where available. Run a full security scan on any device used to access the domain. Report the domain to relevant security platforms and consider freezing any assets associated with exposed wallets.