raydiom[.]io

This domain, raydiom.io, represents an elevated-risk brand impersonation threat targeting users of Raydium, a decentralized finance platform operating on the Solana blockchain. Analysis indicates the domain was specifically engineered to deceive victims into believing they are interacting with legitimate Raydium services, likely through the presentation of fraudulent web interfaces designed to harvest wallet credentials or facilitate unauthorized token transfers. The impersonation extends to visual and structural mimicry of Raydium’s official portal, increasing the likelihood of user compromise in cryptocurrency-related transactions or account access attempts.

Infrastructure analysis reveals the domain was registered on September 16, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-volume domain registrations linked to malicious campaigns. The domain resolves to the IP address 45.155.69.51, an infrastructure node previously observed in other cryptocurrency-related phishing operations. Detection metrics further substantiate the threat: VirusTotal reports 5 out of 95 security vendors flagging raydiom.io as malicious, while the domain appears on one security blocklist, specifically PhishDestroy. Additionally, Gridinsoft assigns a trust score of 0/100, reinforcing the classification of this domain as hostile.

Users who accessed raydiom.io are advised to take immediate remedial action. Any cryptocurrency wallets or credentials entered on the site should be considered compromised and revoked. Affected parties must disconnect all connected applications from their wallets, transfer remaining assets to a new wallet with a fresh seed phrase, and conduct a comprehensive audit of all linked accounts for unauthorized transactions. Browser-based extensions or applications downloaded from the domain should be removed, and systems scanned for potential malware. Ongoing monitoring of financial and identity-related accounts is strongly recommended to detect any subsequent fraudulent activity.