raydiumtoken-en[.]firebaseapp[.]com

Analysis indicates the domain raydiumtoken-en.firebaseapp.com is operating as a brand impersonation page targeting the Raydium ecosystem. The page title "Swap Raydium" suggests an attempt to mimic a legitimate decentralized trading interface, potentially to mislead users into connecting wallets or entering sensitive credentials. Such infrastructure is commonly associated with unauthorized access attempts and potential financial asset theft, especially in crypto-related contexts.

Technical indicators support a high-risk classification. VirusTotal reports 12/95 security vendors flagging the domain as malicious. The domain was created on February 21, 2026 and is hosted under Google LLC Firebase infrastructure. It resolves to IP 199.36.158.100 in the United States and uses a Google Trust Services SSL certificate (WR4). Additionally, it appears on 6 security blocklists, reinforcing ongoing malicious assessment.

If a user has visited or interacted with the site, immediate precautions are recommended. Disconnect any connected wallets or sessions, revoke token approvals if applicable, and avoid re-entering credentials. Perform a full security scan of devices used to access the page to rule out compromise. Users should also monitor accounts for unauthorized transactions and consider resetting passwords for related services. The domain remains active, so continued exposure risk exists.