raydiumswap[.]us

PhishDestroy identifies raydiumswap.us as an active brand impersonation domain targeting Raydium users. This domain poses an elevated risk due to its deliberate attempt to deceive visitors by mimicking the legitimate Raydium platform, a well-known decentralized exchange on the Solana blockchain. The threat involves fraudulent cryptocurrency trading sites designed to steal user credentials and funds through fake interfaces. Users attempting to access Raydium via this domain risk unauthorized asset transfers, wallet compromise, and financial loss. Immediate avoidance and reporting are strongly advised to prevent exposure to credential harvesting and cryptocurrency theft schemes.

This domain was flagged by 9 out of 95 VirusTotal security vendors and is associated with multiple red flags. It resolves to IP address 188.114.96.3, is registered through GoDaddy.com, LLC, and obtained an SSL certificate from Google Trust Services. The domain was created on July 29, 2025, indicating recent registration aligned with active phishing campaigns. Its low trust score and presence on multiple threat intelligence feeds further validate its malicious intent. The combination of a recently registered domain, brand impersonation, and active detection underscores the urgency for user caution and enterprise blocking.

To mitigate the threat posed by raydiumswap.us, users should avoid visiting the domain entirely and remove it from bookmarks or saved links. Block the domain and IP address (188.114.96.3) at the network and endpoint levels using firewall rules, DNS filtering, or security platforms. For Raydium users, only access the platform via the official domain raydium.io and verify all links before clicking. Enable wallet transaction simulation tools and use hardware wallets to limit exposure. Report this domain to your security team or via platforms like PhishDestroy to help protect the broader community from ongoing impersonation attacks.