rayddium-wallet-suport[.]pages[.]dev
“Raydium Wallet | Powerful & Secure RAY Wallet App”
rayddium-wallet-suport.pages.dev — İçerik kullanılamıyor. Marka kimliğine bürünme: Raydium; Dolandırıcılık türü: Seed Phrase Theft. Kanıt özeti: VirusTotal 10/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, Fortinet); PhishDestroy score 80/100. Kayıt kuruluşu: Cloudflare.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
On July 23, 2026, the domain rayddium-wallet-suport.pages.dev was observed serving a page titled “Raydium Wallet | Powerful & Secure RAY Wallet App”. The page title explicitly references the Raydium brand, confirming that the site is attempting to impersonate the official Raydium wallet service. WHOIS data shows the domain was registered on February 21, 2026 through Cloudflare, Inc., and the authoritative name servers are mona.ns.cloudflare.com and armfazh.ns.cloudflare.com. DNS resolution points to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The HTTPS endpoint is backed by a Google Trust Services certificate issued by the WE1 intermediate, indicating a valid TLS chain, while HSTS and HTTP/3 are enabled, suggesting that the operator configured modern security features to increase credibility.
The site returned an HTTP 403 status code at the time of analysis and is currently listed as offline. Despite being offline, the infrastructure has been flagged by multiple defensive products. VirusTotal recorded detections from 10 of 93 scanned security vendors. Independent blocklists, including PhishDestroy, MetaMask, and SEAL, have already added the domain to their deny lists, and the domain appears on three additional security blocklists. Gridinsoft assigned a trust score of 0 out of 100, indicating an extremely low confidence rating.
The observed scam type is categorized as Wallet/Seed Phishing, implying that the operator likely intended to harvest private keys or seed phrases from unsuspecting Raydium users. Evidence therefore points to a high‑risk brand‑impersonation operation that leveraged Cloudflare’s infrastructure to host a convincing‑looking wallet landing page before being taken down. The exact content of the page, including any credential‑capture forms, has not been captured in the current dataset, leaving the precise phishing workflow unknown.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Adli İstihbarat
Teknolojiler · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of rayddium-wallet-suport.pages.dev · checked Apr 13, 2026
Kanıtlar ve Dış Raporlar
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin