VirusTotal
9 / 91
“Mixtor - Secure Solana Mixer”
The domain www.mixtor.space, impersonating Ethereum, is currently down, suggesting it may have been taken down. This site has a high threat score of 71/100.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
9 / 91
3 threat-system alerts
रिपोर्ट करेंchecked — no match recorded
no community references
रिपोर्ट करेंprovider verdict: clean
रिपोर्ट करेंसंग्रहित रिपोर्ट
रिपोर्ट करें विश्लेषण पूरा हुआ
रिपोर्ट करें46/100
50/100
रिपोर्ट करेंChecked; no threat flag recorded
रिपोर्ट करें| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | unpkg.com/@splinetool/runtime@1.9.82/build/runtime.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | www.gstatic.com/draco/versioned/decoders/1.5.2/draco_wasm_wrapper.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | unpkg.com/@splinetool/runtime@1.9.82/build/process.js |
audit | Hunting_JS_WebAssembly |
The domain www.mixtor.space is a confirmed phishing site engaged in brand impersonation targeting Ethereum users. It presents itself as a 'Secure Solana Mixer' under the name Mixtor, misleading victims into believing it is a legitimate cryptocurrency service. This scam operates as a cryptocurrency phishing scheme, not a drainer kit, and is currently taken offline.
Technical indicators confirm the elevated risk. www.mixtor.space was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered through Go Daddy, LLC on July 28, 2025, and resolves to the IP address 66.33.60.130, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate is issued by Let's Encrypt (R12), and the site employed technologies such as Three.js, Vercel, Cloudflare, and HSTS. The observed page title was 'Mixtor - Secure Solana Mixer', despite impersonating Ethereum, and Gridinsoft assigned it a trust score of 46 out of 100.
Victims of www.mixtor.space should immediately revoke any token approvals granted to the site and transfer funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts. Monitor accounts for unauthorized transactions and consider notifying the impersonated brand, Ethereum, of the fraudulent activity.
पृष्ठ ने ब्राउज़र-जैसे विज़िटर को एक प्रतिक्रिया दी और क्रॉलर या सुरक्षा स्कैनर को दूसरी। क्लोकिंग केवल समीक्षकों को वास्तविक लैंडिंग पेज से दूर रखने के लिए मौजूद है।
content_splitस्कैनर नोट: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-172777.invalid', port=80): Max retries exceeded with url: / (Caused by
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
एज-आईपी प्रतिष्ठा इस डोमेन के लिए जिम्मेदार नहीं है।
ns1.vercel-dns-3.comns2.vercel-dns-3.comns3.vercel-dns-3.comns35.domaincontrol.comns36.domaincontrol.comns4.vercel-dns-3.comLocation describes the IP network.
630fb9f2cd856786daf07b9a7e03a6f3464c4c827a9533d736c177351a7d78a6Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
10 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
52 संग्रहीत मिलते-जुलते डोमेन
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
Template-based draft · optional AI wording assistance requires separate consent
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंसंदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंहाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंलाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।