raydium[.]io-wallet-api-connect-v3-app[.]com

The domain raydium.io-wallet-api-connect-v3-app.com is a confirmed phishing site engaged in brand impersonation targeting Raydium, a cryptocurrency platform. This scam domain mimics legitimate Raydium services to deceive users into disclosing wallet credentials or sensitive information, posing an elevated risk of financial loss. As of the latest verification, raydium.io-wallet-api-connect-v3-app.com has been taken offline, though prior activity classified it as a cryptocurrency phishing threat.

Technical analysis reveals that raydium.io-wallet-api-connect-v3-app.com was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Fortinet. The domain appears on 1 security blocklist (PhishDestroy) and was registered on February 21, 2026, though registrar details are not available. It resolved to the IP address 188.114.97.3, hosted by Cloudflare (AS13335), and used an SSL certificate issued by Cloudflare TLS Issuing ECC CA 1. The observed page title was 'Access Denied,' and Gridinsoft assigned a trust score of 0/100, further confirming its malicious nature.

Users who interacted with raydium.io-wallet-api-connect-v3-app.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand (Raydium) to aid in takedown efforts. If credentials were entered, change passwords on all associated accounts and watch for signs of fraud or identity theft.