raydiummarkets[.]info

The domain raydiummarkets.info is an active phishing site engaged in brand impersonation targeting Raydium, a cryptocurrency platform. It poses an elevated risk as a cryptocurrency scam, designed to deceive users into interacting with fraudulent pages that mimic legitimate services. No drainer kit has been identified, but the site remains operational and continues to present itself as Raydium, potentially harvesting credentials or facilitating unauthorized transactions.

Technical indicators confirm the malicious nature of raydiummarkets.info. As of analysis, 2 of 95 security vendors on VirusTotal flag the domain, including Gridinsoft and SOCRadar. The domain is registered through NameSilo, LLC, with a creation date of March 23, 2026, and resolves to the IP address 172.67.222.136, hosted by Cloudflare in Canada. It appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt (E8), and the site returns an HTTP 403 status with the page title 'Just a moment...'. Detected technologies include Cloudflare Browser Insights, Cloudflare, and HTTP/3.

Users who interacted with raydiummarkets.info should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If credentials were entered, change passwords on the legitimate Raydium platform and enable two-factor authentication. Report the domain to relevant authorities, including the impersonated brand (Raydium), the registrar (NameSilo), and security blocklists such as PhishTank or Google Safe Browsing. Monitor accounts for unauthorized activity and consider notifying local cybercrime units if financial loss occurred.