raydium-management-system-v2-ui[.]pages[.]dev

This domain is flagged as a high-risk brand impersonation threat targeting Raydium, a decentralized finance platform. Analysis indicates the site mimics legitimate Raydium infrastructure, presenting itself as the "Raydium Management System" to deceive users into disclosing credentials or transferring assets. The threat type is classified as brand impersonation, a tactic commonly used to exploit trust in established entities for fraudulent purposes. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on February 26, 2026, and resolves to the IP address 172.66.45.3, associated with AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which may reduce initial suspicion. Detection metrics show the domain appears on 3 security blocklists, while VirusTotal reports 1 out of 95 security vendors flagging it as malicious. Additional indicators include active blocking by at least three independent security entities, confirming its malicious classification. Mitigation steps for this brand impersonation threat include immediate blacklisting of the domain and IP address within network security controls. Organizations should update endpoint protection rules to block access to raydium-management-system-v2-ui.pages.dev and monitor for related subdomains or variations. Users should be alerted to verify domain authenticity before interacting with any Raydium-related services, particularly those hosted on non-official platforms. Security teams are advised to conduct retrospective analysis for prior exposure and review logs for connections to 172.66.45.3 or related Cloudflare-hosted domains.