raydium-io-swap[.]github[.]io

This domain presents a high-risk brand impersonation threat, specifically masquerading as the legitimate Raydium decentralized exchange to trick users into connecting their wallets and approving malicious transactions. The site's title "Raydium™ | Home Official Site" and its GitHub Pages hosting lend a false sense of legitimacy, but the underlying intent is to drain cryptocurrency from unsuspecting victims.

The domain raydium-io-swap.github.io was registered on February 21, 2026, through MarkMonitor, Inc., and resolves to IP address 2606:50c0:8001::153 with an SSL certificate issued by Let's Encrypt (R12). VirusTotal analysis reveals that 9 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. Despite these red flags, the site remains active, indicating that the threat actors are actively maintaining the scam.

Users should never interact with this domain. To stay safe, verify the official Raydium URL (raydium.io) before connecting any wallet. Do not enter seed phrases, private keys, or approve unknown transaction signatures. If you have already connected your wallet to this site, immediately revoke token approvals using a tool like Revoke.cash or Etherscan's token approval checker, and transfer your assets to a new wallet. Report the domain to security platforms and consider using a Web3 security browser extension to block known phishing sites.