Bitcointalk username: examplens
my test of [banned mixer]
Design: The site definitely has a modern design with all the necessary elements. It seems that the team immediately reacted to some criticisms, and compared to a few days ago, I see that dark mode has been added.
If we talk about dark mode, I think that black (HEX #000000) is not an ideal solution, or at least it should have one more shade. This way we have a barely recognizable text box compared to the background
Or for example, the question mark with the info cloud is almost unrecognizable
However, the site is too generic for me, and maybe I can say that I have seen it somewhere before. It looks like a purchased stock template, so I would comment that more uniqueness is needed here.
Having blog posts on the page brings advantages, but I would instead set up a mixing page as a home page (check sinbad.io for example), and all those who want to know something more always have a menu and additional links.
Hosting: I have to emphasize again, an excellent choice for the domain. One of the best in the mixing industry.
If I saw correctly, you are using hosting from DDoS-Guard, at least IP 186.2.163.50 belongs to them (
https://whois.domaintools.com/186.2.163.50) or at least under their protection.
I believe you already know about the negative impact of anonymity when there is an intermediary between your service and the user. However, why choose DDoS-Guard, when they have a rather bad reputation? Mostly bad feedback at Trustpilot (Even those few 5 ratings seem pretty fake, which is even worse, but that's another story)
https://www.trustpilot.com/review/ddos-guard.netWhen you say that you delete all logs within 24 hours at the latest, can you be sure that DDoS-Guard also not collecting any data?
Everything is simple. [banned mixer] does not store information about its clients' deposits. All information is stored and encrypted in the tumbler code itself 
As we already mentioned deleting or saving data, you say that you delete all the information, but still keep it encrypted. So the information that you are deleting all the data is not correct (you are misleading the users here) because you still store it somewhere, at least in an encrypted form.
I only hope that the answer does not lie in encryption which is impossible to decrypt. Many hacked services said the same thing before the hacks. I don't expect that someone will hack your (or any other) mixer because of the information about the addresses that passed through the service, only this part should be formulated differently by your side
Mixing:For the first time, I chose the Basic security level with a 0.42% service fee. With 4h delay, the Anonymizing meter says
GoodI don't know if there have been any changes here, but now the mixer asks me to solve the captcha code, unlike the previous days when it just skipped the first step.
Really until the end of the whole process, all the steps were very clear and it was almost impossible to make a mistake due to "not understanding" the process. I personally consider it important and I have to praise it here.
There are several warnings that it is mandatory to download the Letter of Guarantee, but is it possible to insert a step that will enable the further process only after clicking on "download"? Currently, there is only a check box that the user is aware of the importance of the letter of guarantee, and this is just as (un)useful as confirming the age of majority to access a porn site.
What happens to funds that arrive at the generated address after 24 hours? Why can't that order be accessed again with the Tumbler code in case of transaction delay? There are possible legitimate reasons for such a scenario.
In case of closing the page while the order is in progress, you have not left the possibility for the user to open the same page again. If he wants to check the timer that counts down the time until the end of mixing.
I would suggest that you add such a possibility. For example, you can add a link inside the Letter of Guarantee, a new user who closes the page will not know that it is a link format
[banned mixer]/order#B8R9QE1O-6Z2UU3 you can add some kind of search box on the site for order ID's, or at least an explanation in the FAQ.
Exactly after 4h 1min, I received a mixed BTC amount. Of course without any connection with my original coins.
I'm not sure if the option "
Delete immediately" was added in the meantime while I'm writing this review or if it appears after a certain time, but I wanted to suggest something similar. It should exist immediately after the final transaction is completed.
AML Bot recognized the address from which I received Bitcoin as a low-risk score. Well, even though I chose almost the lowest level of anonymization, it seems satisfactory. Again, I leave open the question of how adequate AMLBot is.
I decided to do the second mixing via the TOR page, with a slightly higher level of anonymity. So, a Premium level of security divides the amount into two addresses.
I tried to add a taproot address which is not supported by [banned mixer], except for the slightly red-marked address field, there are no other indications that something is wrong. The continue button is disabled because of that, which is good as a preventive measure to avoid unnecessary mistakes. However, during the process itself, there is no information as to why it is so (disabled continue button), so it can lead to confusion in this case. It's not a big deal, but it would definitely be useful for users.
Happened to me too, the error page and it is quite possible that the wrong captcha code was entered. However, I received a vague message about where the error was, so I logically decided to do everything from the beginning.
I would emphasize that in such cases, things must be as clear as possible and if there is a mistake, the wrong entry should be unambiguous information about it.
As far as I have noticed, only Segwit addresses are always used for deposits, why not use Bech32, or even better combined?
In addition to the fact that this time I decided on the Premium security level, and entered more addresses, AMLBot showed a higher level of risk, almost worrying.
However, there is more disappointment here, because both addresses received the same funds, that is, they came from the same address. It is very easy to connect them. I am under the impression that it was an unnecessary waste of a fee for an additional address
(I made a chart, if necessary, I can fill in addresses and transactions)
I saw that some other members previously emphasized the excessive fee paid by the mixer. That was also the case with me. 40 and 43 sat/vB, although at that moment the recommended fee from the network was 20 and 27 sat/vB. It seems like an unnecessary waste of resources.
Tumbler code: I'm not sure I have the best understanding of its effectiveness here.
After each mixing operation the system generates a new TUMBLER CODE for you. We use a TUMBLER CODE to be sure that you will not get your funds back. The same code is used for the discount system. Please, keep it for your next orders and discounts. Notice that after each mixing, the TUMBLER CODE is new.
- The tumbler code is supposed to protect me from getting the same coins again, does that mean that there is a high probability that I will get tainted coins from someone else?
- After two transactions, now I have two different Tumbler codes. Does the new one also inherit the information from the previous one, or in the next mixing can it happen that I get funds back from my first mixing?
Terms & Privacy:1.1 SCOPE
This obliging Agreement is between:
- TUMBLERIO Ltd. ("The Service") and
- the person, persons, or entity ("You", "Your" or "the User") using the service (as defined below).
Is [banned mixer] a registered company?
COIN FILTERING
"The Service" may carry out verification and control of illegal activities with the help of a third party under a contract. "The Service" may terminate Your access to "The Service" with immediate effect for any reason - including, but not limited to, illegal or prohibited activities, at its sole discretion, and is not obligated to reveal the details of its decision.
You accept that "The Service's" decision to take certain actions, including termination for any reason at its sole discretion, may be based on confidentiality criteria that are necessary for "The Service's" security protocols and risk management. You accept "The Service" is not obligated to reveal to you the particularities of its security and risk management processes.
To put it even more simply, you can keep Bitcoins if you judge that they came from illegal activities. Without the obligation to explain the method of how you determined the "illegality" of the funds and whether any third party participated in the analysis?
This does not promise to gain trust.
To summarize my impressions when using the Tumbler mixer.
The whole mixing process on the site looks good. With small corrections, it can really be comfortable for the user to use this service. What may not give a passing grade is the general impression of anonymity and the fact that coins are not untraceable, even a short check through the blockchain is enough to see the connections.
Compared to the current strong competition in the mixer business, this service will have to improve a lot.
Good luck with your business, I hope I have been of help.
Show Posts
