One domain, and how to check it

Privacy tools attract convincing copies. There is exactly one address for this one.

Three checks, ten seconds

1. Spell it out. s‑o‑l‑m‑i‑x‑.‑o‑r‑g. Nothing before it, nothing extra in the middle, and .org on the end. A hyphen, a doubled letter or a different suffix is a different site owned by somebody else.
2. Check the padlock resolves to this domain. Click it and read the certificate name. HTTPS alone proves nothing — a clone can have a perfectly valid certificate for its own lookalike domain.
3. Get here the same way twice. Bookmark it now, and use the bookmark from then on. The dangerous moment is the one where you follow a link somebody sent you.

How a cloned mixer actually takes your money

The copy is not a bad copy. It is this page, duplicated, which is why looking carefully at the design tells you nothing. The change is in one of two places, and both are invisible from the front:

• The note generator. Altered so the "random" numbers your browser produces are predictable to whoever built the clone. Your deposit works, the pool accepts it, and the note is withdrawn by somebody else before you get round to it.
• The deposit address. Swapped for one they control, so your SOL never reaches a pool at all.

In neither case is there a moment where something looks wrong. You find out later, and there is no recovering it — not by us, not by anyone, because nobody has custody of anything in this design.

Where the fake links come from

Paid search results sitting above the real one. Replies under posts about mixing. "Support" accounts that appear in your mentions shortly after you ask a public question. Group chats where a helpful stranger pastes a link. Every one of these is cheap to run and all of them work, which is why they keep happening.

Things this site will never do

SolMix has no support channel, no staff who contact users, and no reason to ever need anything from you. So treat all of the following as an attack with no exceptions: a message that arrives first; a request for your note "to check the status"; anyone asking for a seed phrase or private key; an instruction to prove a wallet works by sending it something. There is no legitimate version of any of them.