raydiumwalle[.]vercel[.]app

PhishDestroy has flagged raydiumwalle.vercel.app as a high-risk brand impersonation threat, specifically targeting Phantom wallet users. The domain masquerades as a legitimate Raydium wallet interface, displaying the title "Raydium Wallet — Connect, Swap & Farm on Solana" to deceive victims into connecting their wallets and surrendering private keys or seed phrases. While the brand target is Phantom, the page title references Raydium, suggesting a multi-brand lure to harvest Solana ecosystem credentials.

Technical indicators confirm the threat. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious. The domain resolves to IP 216.198.79.67 and was registered through Tucows Domains Inc. on February 21, 2026. It holds an SSL certificate from Google Trust Services (WR1), which is common for phishing sites to appear legitimate. The domain currently appears on 3 security blocklists, indicating active monitoring but insufficient widespread blocking.

As of the latest check, the domain remains active and accessible, meaning users who encounter it are still at risk. PhishDestroy recommends that Phantom wallet users avoid visiting raydiumwalle.vercel.app under any circumstances. If a user has already interacted with the site, they should immediately transfer funds to a new wallet, revoke any permissions granted, and run a security scan on their device. Reporting the domain to Google Safe Browsing and Phantom’s security team can help expedite takedown. Vigilance against unsolicited wallet connection prompts is essential to prevent asset theft.