raydium[.]io-wallet-api-connect-v2-app[.]live

The domain raydium.io-wallet-api-connect-v2-app.live is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform Raydium. It poses an elevated risk as a cryptocurrency scam, designed to deceive users into interacting with fraudulent wallet connection prompts. No drainer kit was identified, but the site impersonates Raydium’s branding to steal credentials or assets. As of the latest verification, raydium.io-wallet-api-connect-v2-app.live has been taken offline.

Technical indicators confirm the domain’s malicious nature. VirusTotal reports 2 of 95 security vendors flagged raydium.io-wallet-api-connect-v2-app.live as malicious, including Fortinet and Trustwave. The domain was created on February 21, 2026, and resolves to the IP address 188.114.97.3, hosted on Cloudflare’s infrastructure (AS13335). It appears on one security blocklist, PhishDestroy, and holds a Gridinsoft trust score of 0/100. The SSL certificate is issued by WE1, and the observed page title matches the domain name itself. Google Safe Browsing has not flagged the site.

Users who interacted with raydium.io-wallet-api-connect-v2-app.live should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If credentials were entered, change passwords on the legitimate Raydium platform and enable two-factor authentication. Report the phishing domain to the impersonated brand’s security team and submit it to abuse reporting services such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group.