jkbkbjkjbkjbkjb[.]pages[.]dev

Analysis indicates that the domain jkbkbjkjbkjbkjb.pages.dev was registered on March 30, 2026 and is presently active. DNS resolution points to IP address 172.66.45.6, hosted by Cloudflare, Inc. in Canada, and the domain is served through Cloudflare's infrastructure with a Google Trust Services / WE1 SSL certificate. The authoritative nameservers are algin.ns.cloudflare.com and melina.ns.cloudflare.com, and the site presents an HTTP 200 response while enforcing HSTS and supporting HTTP/3. Page metadata reveals the title "Swap Raydium," aligning with a brand impersonation campaign targeting the Raydium platform. The site is listed on four security blocklists and carries a Gridinsoft trust score of 0 out of 100, reflecting a high‑risk classification. VirusTotal records show that one of ninety‑four security vendors flagged the domain, and it is currently blocked by PhishDestroy, MetaMask, SEAL, and ScamSniffer. While the page content beyond the title has not been disclosed, the observable infrastructure and detection history suggest a deliberate attempt to deceive Raydium users. Defenders should add the domain and its IP address to deny‑list rules, enforce outbound traffic filtering for the associated Cloudflare IP range, and monitor for any related DNS or certificate changes. Continuous telemetry collection is recommended to detect potential payload delivery or credential harvesting activities associated with this high‑risk brand impersonation campaign.