deckmixer[.]space

This domain, deckmixer.space, operates as a fraudulent privacy mixer targeting users of the Solana blockchain. The site falsely presents itself as a legitimate service for anonymizing transactions, but analysis indicates its primary function is to deceive visitors into connecting their cryptocurrency wallets. Once connected, the site likely executes unauthorized transactions to drain funds, a common tactic in blockchain-based phishing schemes. The page title, 'DeckMixer - Solana Privacy Mixer,' explicitly mimics trusted Solana ecosystem tools to enhance credibility and lure potential victims. Infrastructure analysis reveals multiple red flags confirming the malicious nature of this domain. It was registered on June 11, 2025, through NameCheap, Inc., a registrar frequently associated with newly created phishing sites. The domain resolves to the IP address 216.198.79.193, hosted on Amazon Web Services (AS16509), a common cloud provider for both legitimate and malicious infrastructure. Detection metrics further support the threat assessment: only 1 out of 95 security vendors on VirusTotal currently flag the domain, suggesting it remains under the radar for most detection systems. Additionally, the domain appears on one security blocklist, and its SSL certificate, issued by Let's Encrypt, provides minimal assurance of legitimacy due to the ease of obtaining such certificates. Users who have visited deckmixer.space or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any cryptocurrency wallets that may have been linked to the site and revoke any suspicious transaction approvals. Monitor wallet activity closely for unauthorized transfers, particularly those involving Solana or associated tokens. If funds have been lost, report the incident to relevant blockchain analytics platforms and local cybercrime authorities. To prevent future exposure, avoid engaging with unsolicited links, verify domain authenticity before connecting wallets, and rely on official Solana resources for legitimate privacy tools. The domain's recent creation date and low detection rate underscore the importance of heightened vigilance when interacting with unfamiliar blockchain services.