raydiumdefi[.]net

This domain, raydiumdefi.net, was designed to impersonate the legitimate Raydium decentralized exchange platform. The site posed as a fake login or wallet connection portal, likely attempting to drain cryptocurrency assets from unsuspecting users. By mimicking the Raydium brand, attackers aimed to trick visitors into entering private keys or approving malicious transactions, leading to potential financial loss.

Technical analysis confirms the threat. VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious. The domain was registered on December 8, 2025, through Hello Internet Corp, a registrar often associated with low-quality or fraudulent domains. The site resolved to IP 188.114.96.3, used a Let's Encrypt SSL certificate, and appeared on two security blocklists. AlienVault OTX included it in one threat intelligence pulse, and Gridinsoft assigned a trust score of 0/100. The page title "Un instant…" suggests a redirect or loading screen typical of phishing kits.

If you visited this domain, do not enter any credentials or connect your crypto wallet. Revoke any permissions granted to the site immediately via your wallet settings. Run a full security scan on your device using trusted anti-malware tools. Monitor your crypto accounts for unauthorized transactions and consider moving assets to a new wallet if you interacted with the site. Report the incident to relevant blockchain security platforms.