info-swap-raydiumm[.]pages[.]dev

info-swap-raydiumm.pages.dev is flagged as a Raydium brand impersonation site delivering a crypto‑scam payload. The domain was registered through Cloudflare, Inc. on 21 February 2026 and resolves to the Cloudflare address 188.114.96.3, which is announced as belonging to AS13335 in the United States. DNS resolution uses the authoritative Cloudflare nameservers paris.ns.cloudflare.com and west.ns.cloudflare.com. TLS termination is provided by a Google Trust Services certificate (WE1) and the server advertises HSTS and HTTP/3 support. An HTTP request returns status code 403, indicating that the site is currently inaccessible; the public status is reported as “taken offline”.

Public intelligence shows the page title “Suspected phishing site | Cloudflare”, and the threat is classified as a crypto scam. The domain appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis records four of ninety‑three scanned security vendors labeling the domain as malicious. Independent scoring from Gridinsoft assigns a trust score of 0 / 100. No additional malicious infrastructure such as command‑and‑control servers or payload hashes has been disclosed.

Because the site is offline, automated crawlers have not retrieved the HTML source, so the precise phishing vector cannot be verified at this time. Analysis concludes that the observed indicators are sufficient to confirm the domain’s involvement in brand‑impersonation activity targeting Raydium users. Defenders should add the domain and its IP address to network‑level deny lists, ensure that web‑filtering solutions reference the three blocklists, and monitor for any re‑use of the Cloudflare IP range in future Raydium‑related attacks. Continuous re‑scanning on VirusTotal and similar aggregators is recommended to capture potential changes in detection status.