swapraydium[.]xyz

The domain swapraydium.xyz is a confirmed brand impersonation phishing site targeting the foundation brand, specifically designed to steal cryptocurrency credentials. It poses as a legitimate platform called 'Swap Raydium' but is a scam that attempts to trick users into connecting their wallets or entering sensitive information. The site has been taken offline, but users who interacted with it remain at risk.

Technical indicators confirm the malicious nature of swapraydium.xyz. VirusTotal reports 2 of 95 vendors flagging the domain, including alphaMountain.ai and Forcepoint ThreatSeeker. The domain was registered through Porkbun, LLC on July 11, 2025, and resolves to IP address 198.251.89.220, located in the US under AS53667 FranTech Solutions. It appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. The SSL certificate is issued by aaaa.com, and the page title observed was 'Swap Raydium'. Google Safe Browsing did not flag the domain, and Gridinsoft assigned a trust score of 0/100.

Users who visited swapraydium.xyz should take immediate safety steps. Since this is a cryptocurrency phishing site, revoke any token approvals granted to the domain and move all funds to a new, secure wallet. Change passwords for any accounts that may have been compromised and enable two-factor authentication. Monitor for unauthorized transactions and report the incident to the impersonated brand foundation and relevant authorities.