raydiumchain[.]world

This domain, raydiumchain.world, poses a direct financial threat to users by impersonating the legitimate Raydium decentralized exchange platform. Analysis indicates the site is designed to function as a crypto drainer, tricking visitors into connecting their wallets under false pretenses. Once connected, the site can execute unauthorized transactions, siphoning cryptocurrency assets without the user's consent. The page title 'Et øjeblik ...' suggests an attempt to mimic a loading or authentication screen, a common tactic to lull users into a false sense of security while malicious scripts execute in the background. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain is flagged by 19 out of 95 security vendors on VirusTotal, with blocklist entries from PhishDestroy, MetaMask, and SEAL. It is registered through Cloudflare, Inc., and resolves to the IPv6 address 2a06:98c1:3120::3, hosted on Cloudflare's network (AS13335). The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which is often exploited by threat actors to lend credibility to fraudulent sites. The domain appears on three independent security blocklists, further corroborating its malicious intent. Users who have visited raydiumchain.world should take immediate action to mitigate potential risks. Disconnect any wallets that may have been linked to the site and revoke all associated smart contract approvals using a trusted blockchain explorer. Monitor wallet activity for unauthorized transactions and consider transferring assets to a new wallet if suspicious activity is detected. Report the domain to relevant security platforms to aid in broader threat mitigation efforts. Exercise caution with similar domains, particularly those impersonating cryptocurrency platforms, and verify URLs through official channels before interaction.