finoptic[.]space

The domain finoptic.space is a confirmed phishing site engaged in brand impersonation targeting Solana users. It presented itself as a 'Solana Privacy Mixer' under the name 'FINOPTIC MIXER' but operated as a cryptocurrency scam designed to deceive victims into transferring funds. As of the latest verification, finoptic.space has been taken offline and no longer resolves to its previous infrastructure.

Technical indicators confirm the malicious nature of finoptic.space. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and SOCRadar, and appeared on 1 security blocklist, specifically PhishDestroy. It was registered through NameCheap, Inc. on June 18, 2025, and resolved to the IP address 216.198.79.193, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate was issued by Let's Encrypt (R12), and the site used technologies such as Vercel and HSTS. The page title observed was 'FINOPTIC MIXER - Solana Privacy Mixer', and the domain was referenced in 1 AlienVault OTX threat intelligence pulse. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with finoptic.space should immediately revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. If credentials or wallet details were entered, change passwords for associated accounts and enable two-factor authentication where possible. Report the domain to relevant platforms, including the impersonated brand Solana, cryptocurrency security services, and organizations like the Anti-Phishing Working Group (APWG) or local cybercrime units to aid in takedown efforts.