raydium-wallete[.]pages[.]dev

The domain raydium-wallete.pages.dev is a confirmed cryptocurrency phishing site engaged in brand impersonation targeting Raydium, a decentralized finance platform. This site posed an elevated risk by attempting to deceive users into connecting wallets or entering sensitive credentials, though it did not deploy a known drainer kit. As of the latest verification, raydium-wallete.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of raydium-wallete.pages.dev. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and alphaMountain.ai, and appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through Cloudflare, Inc. on October 15, 2025, it resolved to the IP address 188.114.97.3, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare' with an HTTP 403 status. Technologies detected included HSTS, Cloudflare, and HTTP/3, while Gridinsoft assigned a trust score of 0/100.

Users who interacted with raydium-wallete.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to platforms such as Google Safe Browsing, MetaMask’s phishing detection, and the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.