Rayfish.xyz pitches itself as a peer-to-peer mesh VPN where you connect devices by cryptographic identity and don't need to trust a central server. For that kind of service, trust depends heavily on strong security and clear ownership — and the signals here are mostly reassuring.
On the security front, the site uses modern encryption, passes Google's threat checks, and has a clean blacklist history. The infrastructure is well-built: Cloudflare handles delivery, email authentication is in place, and the pages load fast. The domain was registered over three years ago, which is a good sign for a small VPN project — many scams don't last that long.
Two things deserve a closer look. First, the domain expires in about a month. That doesn't mean the site is shutting down, but it's worth checking back to see that the renewal happens. Second, the site is a single-page app that loads content via JavaScript, so contact information and social media links aren't easily visible without browsing around. A privacy policy and a legal entity disclosure are published, though, which is more than many small VPNs offer.
There are no rayfish.xyz reviews on Trustpilot or major tracking sites, but that's typical for a niche tool. If you're asking "is rayfish.xyz a scam?" — nothing in the evidence points that way. The bigger question is whether the service fits your technical needs. The site itself appears to be running honestly, with the usual caveats about domain renewal and transparency that apply to any small online business.