changeupmixer[.]space

This domain, changeupmixer.space, posed as a legitimate Solana privacy mixer service called ChangeUP Mixer. In reality, it was a brand impersonation site designed to deceive users into interacting with a fraudulent platform. Such sites typically aim to steal cryptocurrency wallet credentials, private keys, or trick users into sending funds to attacker-controlled addresses. The site is now offline, but its infrastructure remains a risk indicator for similar future threats.

Technical analysis confirms the impersonation. The domain was registered on June 14, 2025, through NameCheap, Inc., and resolved to IP address 216.198.79.193. VirusTotal analysis shows 5 out of 95 security vendors flagged the domain as malicious. The page title was 'ChangeUP Mixer - Solana Privacy Mixer', and the SSL certificate was issued by Let's Encrypt. The site used Vercel hosting and enforced HSTS. Gridinsoft assigned a trust score of 0/100, and the domain appears on one security blocklist. PhishDestroy has blocked the domain, and it is currently offline.

If a user visited this site, they should immediately disconnect any connected wallets and revoke permissions granted to the domain. They should monitor their cryptocurrency accounts for unauthorized transactions and consider moving funds to a new wallet if any credentials were entered. Users should also run a security scan on their device. Reporting the domain to relevant threat intelligence platforms helps protect others. General advice: always verify URLs independently before interacting with cryptocurrency services, especially those promising privacy or mixing features.