raydiumswap9[.]wordpress[.]com

The domain raydiumswap9.wordpress.com is a phishing site engaged in brand impersonation targeting Raydium, a cryptocurrency platform. It presented itself as the 'Raydium Swap – Official Site' to deceive users into interacting with fraudulent content, specifically aiming to steal cryptocurrency assets. No drainer kit was identified, but the site operated as a cryptocurrency scam. As of the latest verification, raydiumswap9.wordpress.com has been taken offline.

Technical indicators confirm the malicious nature of raydiumswap9.wordpress.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including ChainPatrol, and appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. It was registered through MarkMonitor, Inc., with a creation date of March 03, 2000, though the subdomain itself is recent. The site resolved to the IP address 192.0.78.12, hosted by Automattic, Inc. in the US, and used an SSL certificate issued by Let's Encrypt / E8. Detected technologies included WordPress, MySQL, PHP, and Google Analytics. The HTTP status returned a 410 error, indicating the page is no longer available.

Users who interacted with raydiumswap9.wordpress.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to the impersonated brand, Raydium, and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.