raydium-swaps[.]com

This domain, raydium-swaps.com, is flagged as a high-risk crypto phishing site targeting users of the Raydium decentralized exchange. Registered on May 31, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating active malicious classification. Analysis reveals 12 of 91 security vendors on VirusTotal detect the domain as malicious, though the specific payload or phishing kit remains unconfirmed.

No additional infrastructure details, such as hosting IP, ASN, or SSL certificate issuer, are currently available for further attribution. The domain's creation date aligns with recent phishing campaigns observed in the decentralized finance (DeFi) space, though no direct evidence links it to a broader threat cluster. Defenders should treat this domain as confirmed malicious and block it at the network and endpoint levels.

Security teams are advised to monitor for connections to this domain in logs and review any associated wallet addresses or transaction hashes for signs of compromise. Given the lack of public indicators beyond blocklist presence and vendor detections, further investigation into the site's content and backend infrastructure is recommended to determine the full scope of the threat.