Raydium

Crypto & web3raydium.ioRank 196 of the most impersonated
Cert findings · 24 h
1
Cert findings · 7 days
9
5 reported or listed · 4 on phishing hosts
Registered lookalikes
97
14 listed by a source or an address list
Official domains
1
verified from Raydium's own sites and records

Certificate findings for Raydium

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Raydium's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 13 findings, grouped by hostname

  1. raydium-web3.vip US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    raydium-web3.vip
    First seen
    2026-11-04 12:26 UTC
    First published
    2026-11-04 13:12 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:32 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-04 00:00 UTC to 2027-01-24 18:13 UTC
    Logged 2026-11-04 12:22 UTC in DigiCert Sphinx2027h1, entry 354,826,328
    SHA-256 04f9829431a8c8cc3970b58782cc3061f68a5e32fc8419cedd5e036236689816
    Public key SHA-256 02527dd1fc48cb9ab2cfe3e9b4f006d998324af07863e9491058330353d28d9f
    Brand
    Raydium
    Addresses
    104.21.82.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.161.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:52b5
    2606:4700:3031::ac43:a170
    Cloudflare
    Cloudflare (104.21.82.181, 172.67.161.112): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    raydium-web3.vip
    Registered
    2026-08-26 · NameMart Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:11 UTC

    Suggest a correction

  2. raydium-swap.io LV · AS211381 · PODAON Podaon SIA
    ReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    raydium-swap.io
    First seen
    2026-11-01 12:51 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.137.247.138.
    1. Phishing-host list fetched with the address
    2. Resolved to 188.137.247.138
    3. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-01 11:46 UTC to 2027-01-30 12:44 UTC
    Logged 2026-11-01 12:46 UTC in Google ParcelYard2027h1, entry 555,419,047
    SHA-256 af690ee0a63cfe0d96b985607775e8e72d581739942e4fc48c048e929c9c9529
    Public key SHA-256 52338379655602129b3cbac316168868c2bfd319bb020d6988fe8ca10958942a
    PhishDestroy
    Brand
    Raydium
    Addresses
    188.137.247.138 · Latvia · AS211381 PODAON Podaon SIA
    Domain
    raydium-swap.io
    Registered
    2025-11-11 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  3. news.raydium-exchange.net US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareUnder raydium-exchange.net, listed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
    DetailsHide
    Hostname
    news.raydium-exchange.net
    First seen
    2026-10-31 10:41 UTC
    First published
    2026-10-31 11:03 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:10 UTC
    Listed
    MetaMask, listing raydium-exchange.net and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 09:37 UTC to 2027-01-29 09:37 UTC
    Logged 2026-10-31 10:36 UTC in Let's Encrypt Willow2027h1, entry 863,019,768
    SHA-256 1b4ecfc67f07beccfa54df10a7409afd979e20d620e2e440786b37a5a186640a
    Public key SHA-256 65eb3f74859beb8bf835f2f78c74c15989ef994cc133d64688e2f2de233888fb
    Brand
    Raydium
    Addresses
    23.227.38.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2620:127:f00f:e::
    Cloudflare
    Cloudflare (23.227.38.74): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    raydium-exchange.net
    Registered
    2026-05-02 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  4. raydium-app.to US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    raydium-app.to
    First seen
    2026-10-30 10:21 UTC
    First published
    2026-10-30 10:44 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:50 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-30 09:17 UTC to 2027-01-28 09:17 UTC
    Logged 2026-10-30 10:15 UTC in Let's Encrypt Willow2027h1, entry 847,752,186
    SHA-256 4ab97d69b8bbe94b2cfc04bb25b147c821da386a7334703eedc97ac6de1943f5
    Public key SHA-256 e6b55a8a9a1baf9ffc404c0555fbae2dff6351c98fff39ac17b9ba2c09993dc4
    PhishDestroy
    Brand
    Raydium
    Addresses
    104.21.44.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:2c0b
    2606:4700:3036::ac43:c0ca
    Cloudflare
    Cloudflare (104.21.44.11, 172.67.192.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    raydium-app.to
    Registered
    2025-10-08 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  5. raydium-app.com MD · AS200019 · AlexHost ALEXHOST S.R.L.
    ListedPhishing hostListed by MetaMask · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    raydium-app.com
    First seen
    2026-10-30 07:15 UTC
    First published
    2026-10-30 07:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 176.125.242.151.
    1. Phishing-host list fetched with the address
    2. Resolved to 176.125.242.151
    3. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 06:15 UTC to 2027-01-28 06:15 UTC
    Logged 2026-10-30 07:14 UTC in Google ParcelYard2027h1, entry 518,657,466
    SHA-256 7fcc95ad68a8e401330b9aabb69babdee05d9814576d2805389ac14efe229d5d
    Public key SHA-256 37118f16def02ef8521b12e7bb3daa7961241c6cc2c5cfdac10b6524fef4ca09
    Brand
    Raydium
    Addresses
    176.125.242.151 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    raydium-app.com
    Registered
    2026-01-12 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  6. www.raydium-io.to SC · AS206264 · AMARUTU-TECHNOLOGY Amarutu …
    ListedPhishing hostUnder raydium-io.to, listed by MetaMask · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    www.raydium-io.to
    First seen
    2026-10-27 22:52 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · delisted on 2026-10-28
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Listed
    MetaMask, listing raydium-io.to and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 31.220.1.30.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 31.220.1.30
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-27 21:52 UTC to 2027-01-25 21:52 UTC
    Logged 2026-10-27 22:50 UTC in DigiCert Wyvern2027h1, entry 325,627,226
    SHA-256 2b635b0c4d5d1ea03d4e5856a472cba726e40008be6c3af1688734fc67fecd97
    Public key SHA-256 89ea63254c1208bc94e8cf6b619f4b48ab3c41d0084591263c86a32262b46768
    Certificate
    Issued by YR2
    Valid 2026-11-02 19:17 UTC to 2027-01-31 19:17 UTC
    Logged 2026-11-02 20:16 UTC in Google PlumbersArms2027h1, entry 578,279,426
    SHA-256 8185f8b1c1f7745a2a45228a4466fb040db60da79c67cd6ce5af7f2350fc33e7
    Public key SHA-256 052f4d52cfc63d2e2a12d5d01f2f83564bd1b6867c2992389362ead3799db313
    Brand
    Raydium
    Addresses
    31.220.1.30 · Seychelles · AS206264 AMARUTU-TECHNOLOGY Amarutu Technology Ltd
    Domain
    raydium-io.to
    Registered
    2025-10-02 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  7. raydium-io.to SC · AS206264 · AMARUTU-TECHNOLOGY Amarutu …
    ListedPhishing hostListed by MetaMask · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 13 mo ago
    DetailsHide
    Hostname
    raydium-io.to
    First seen
    2026-10-27 22:52 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · delisted on 2026-10-28
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 31.220.1.30.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 31.220.1.30
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-27 21:52 UTC to 2027-01-25 21:52 UTC
    Logged 2026-10-27 22:50 UTC in DigiCert Wyvern2027h1, entry 325,627,226
    SHA-256 2b635b0c4d5d1ea03d4e5856a472cba726e40008be6c3af1688734fc67fecd97
    Public key SHA-256 89ea63254c1208bc94e8cf6b619f4b48ab3c41d0084591263c86a32262b46768
    Certificate
    Issued by YR2
    Valid 2026-11-02 19:17 UTC to 2027-01-31 19:17 UTC
    Logged 2026-11-02 20:16 UTC in Google PlumbersArms2027h1, entry 578,279,426
    SHA-256 8185f8b1c1f7745a2a45228a4466fb040db60da79c67cd6ce5af7f2350fc33e7
    Public key SHA-256 052f4d52cfc63d2e2a12d5d01f2f83564bd1b6867c2992389362ead3799db313
    Brand
    Raydium
    Addresses
    31.220.1.30 · Seychelles · AS206264 AMARUTU-TECHNOLOGY Amarutu Technology Ltd
    Domain
    raydium-io.to
    Registered
    2025-10-02 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  8. app-raydium.co.com US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    app-raydium.co.com
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Raydium
    Addresses
    104.21.90.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:5ae3
    2606:4700:3036::ac43:a233
    Cloudflare
    Cloudflare (104.21.90.227, 172.67.162.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  9. raydium-exchange.net US · AS14956 · RouterHosting LLC
    ListedListed by MetaMaskMX presentSPF ~allDMARC policy noneRegistered 6 mo ago
    DetailsHide
    Hostname
    raydium-exchange.net
    First seen
    2026-10-27 05:37 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched the new listing
    3. Latest DNS check
    Brand
    Raydium
    Addresses
    45.59.113.156 · United States · AS14956 ROUTERHOSTING - RouterHosting LLC
    Domain
    raydium-exchange.net
    Registered
    2026-05-02 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Receives mail at route1.mx.cloudflare.net, route3.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Raydium when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Crypto & web3

All brands →