ray-dium-wallet[.]pages[.]dev

PhishDestroy identifies ray-dium-wallet.pages.dev as an active brand-impersonation domain targeting Raydium users. This fraudulent page attempts to deceive visitors into believing it is an official Raydium wallet interface, likely to harvest private keys or seed phrases. Given the ongoing investigation and absence of current blocklist entries, the site remains accessible and poses a credible risk to cryptocurrency users seeking legitimate Raydium services.

The domain was flagged by 5 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely blacklisted despite its malicious intent. It is registered through Cloudflare, Inc., resolves to IP 172.66.44.73, and uses a Google Trust Services SSL certificate. While the exact registration date is not disclosed in the available intelligence, the site’s active status and impersonation tactics suggest recent deployment aimed at capitalizing on Raydium’s popularity in decentralized finance.

Given the confirmed impersonation of Raydium and the site’s active status, PhishDestroy recommends users avoid interacting with ray-dium-wallet.pages.dev entirely. Verify any Raydium-related URL through official channels only—such as Raydium’s verified website or social media—and use browser extensions or security tools that detect impersonation sites. If you suspect exposure to this domain, immediately revoke any shared credentials and scan your device for malware. Users are advised to report this domain to Raydium’s security team and relevant abuse channels to aid in its takedown.