Bitcoin Forum

Economy => Scam Accusations => Topic started by: seleme on March 18, 2020, 08:07:10 PM



Title: [Warning] Phishing Mixing Website
Post by: seleme on March 18, 2020, 08:07:10 PM
What happened:
The newbie user has opened a new thread with a fake mixing website and he offers 0.005BTC per review. The phishing link is inserted in the text and the collected info will be used for data mining.

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=2782997


Reference Link
: https://bitcointalk.org/index.php?topic=5233798.0

Proofs
:

https://i.imgur.com/8qb8W4P.jpg
https://i.imgur.com/XGJTAb3.jpg
https://i.imgur.com/XcquQ8y.jpg

I sent an email to Mixtum's official mail address but the mail has been returned to the sender. The mail address of Mixtum doesn't work and it is a bit suspicious why the scam attempt was first done with the original URL of Mixtum. Maybe the attacker has gained access to the site and later decided to change the inserted link to a phishing site for registering new users. I contacted the site owner and asked the same questions there.

Since the thread is inactive and there is no update after the last post, I tried to contact the official mail of [banned mixer]. The sent mail was returned to the sender and it looks like the service mail is not used for a long time. I checked the other mail addresses under the same mail service provider and everything is ok except mixtum_mixer@protonmail.com. Please confirm both clearnet and onion mixing service work normally. There is no alternative option to contact with developers for confirming such cases (https://bitcointalk.org/index.php?topic=5233805.0).

https://i.imgur.com/0OiDwrS.jpg

Will update later.



Title: Re: [Warning] Phishing Mixing Website
Post by: morvillz7z on March 18, 2020, 08:16:54 PM
Yup i can confirm this is indeed a fake review campaign on behalf of [banned mixer]

The link shared is his self-moderated topic where you have to "Register" is leading towards a phishing website. The said link was used before for a fake airdrop (https://bitcointalk.org/index.php?topic=5172689.0)

I've reported the thread and tagged the user.

http://archive.fo/yDExX

Code:
http://www.martynparry.com.au/register

https://www.virustotal.com/gui/url/891aaa18e272ee37d1636f5a49b5b89587ebf89c2430c69353d1e70483b44ed5/detection

https://i.ibb.co/myRfbck/dsfsdS.jpg