raydiumdesktop[.]io

PhishDestroy identifies raydiumdesktop.io as an active brand impersonation domain targeting Raydium, a prominent cryptocurrency platform. This domain was flagged 103a6e for mimicking the official Raydium ecosystem, likely to deceive users into interacting with fraudulent crypto transactions or draining wallets. The domain resolves to IP 216.150.1.1 and is registered through Porkbun LLC, a domain registrar known for both legitimate and malicious activity. The domain was created on April 19, 2026, and currently has 0 detections out of 95 on VirusTotal, indicating it remains under the radar but poses a significant threat. The technical indicators associated with this domain are minimal but notable. The SSL certificate is issued by Let's Encrypt, a common but often exploited provider in phishing campaigns. The domain's recent creation date and low VirusTotal detection rate suggest it may be part of a targeted or emerging campaign. Additionally, the domain's impersonation of Raydium aligns with trends in cryptocurrency phishing, where threat actors leverage the popularity and trust of established platforms to lure victims into disclosing sensitive information or approving malicious transactions. Users who have visited raydiumdesktop.io should immediately cease any interaction with the site and avoid entering any credentials or cryptocurrency wallet connections. If any transactions were initiated or sensitive information entered, users should revoke any connected wallet permissions and monitor accounts for unauthorized activity. This domain is under active investigation, and users are advised to block it at the network level if possible. Always verify the legitimacy of URLs by cross-referencing with official Raydium channels before engaging.