[ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented

[examplens]

by searching through Google the first result directs me to chipmixer domain with .xyz extension, with a very similar (maybe even identical) design there is easy to make a mistake.

.com has been removed by Google as copyright offender. See here:

Google received a complaint from the .online domain and it got the original .com domain removed from searches because of this?

this is really amazing to me that Google made a reaction like this on the report of a site that is significantly younger than the original.
I would even think that the site (.online) in question is the property of the original Chipmixer owner, In the bottom, we can see a link to real chipmixer .onion (chipmixorflykuxu56uxy7gf5o6ggig7xru7dnihc4fm4cxqsc63e6id.onion) page. or is it just a trick to deceive users in their impersonation?

I think we need to fight fire with fire.  I suspect that the scammer behind the .xyz site spammed google with "legal removal" requests, probably with a bunch of different google accounts.

I've just reported the .xyz site as malware using the link below.  I suggest we all submit a report, making it hard for google to ignore.

https://safebrowsing.google.com/safebrowsing/report_badware/?hl=en

as far as I've seen, most TLD extension with "chipmixer" is taken, they should all be checked, and those that use the same or similar visual identity as the Chipmixer needs to be reported. .online also.

[1714246204]

1714246204

[1714246204]

1714246204

[1714246204]

1714246204

[1714246204]

1714246204

[1714246204]

1714246204

[Pmalek]

I don't think relying on a third-party website (Bitcointalk) as a primary source for the real URL is a good idea...

You can't rely on Google either. They obviously don't know what they are doing or they don't care.

and I'm not sure how many people are going to verify it.

That's their problem. It's like clicking on phishing links, downloading fake software, and not verifying it. What can be done is to inform them about the dangers of such actions and recommend what should be done. If they are smarter or don't want to listen, they will face the consequences.   

But I've seen confused users who weren't sure what the real URL is.

There you go. Direct them to multiple sources where they can check the real .onion link. If Google interferes again and messes up or a new clearnet site goes down or gets redirected, there is always this ANN thread that should serve as official information. Bitcointalk hasn't had a serious security breach for several years, so the forum is quite reliable.

[ChipMixer]

Since the clearnet domain is facing a lot of attacks, shouldn't the better  solution be that the clearnet be just used for informational purposes about Chipmixer and also a link to the tor version that the users can use to mixer coins. More like a move pushing users to mix through the tor version.

This is solution that was decided.

.com is now online. It does not allow mixing. It is used for informational purposes only.

[Pmalek]

Glad to see it back online. There is a link to the Bitcointalk announcement page as well. Nice!
Hopefully, Google will include the official site in their search results one day as well.

But other search engines such as DuckDuckGo aren't any better either. When you do a search on "chipmixer", you have 4 fake sites among the first 4 results. chipminxer.com, chipmixér.com, chipmlxer.com/, and chipmixres.com. PLEASE DON'T VISIT THESE SITES!
I didn't check beyond the first couple of results, but there are surely more. 

[dkbit98]

.com is now online. It does not allow mixing. It is used for informational purposes only.

I am glad to see .com is back and I like this approach, but it's going to be interesting to see how long until phishing domain do the same thing, linking to their own scam onion link.
I checked some of them and their domains still have old clearnet mixing page.

PS
Maybe you should add additional information that .com is only official clearnet domain and everything else is used for phishing scam.

[DireWolfM14]

.com is now online. It does not allow mixing. It is used for informational purposes only.

I am glad to see .com is back and I like this approach, but it's going to be interesting to see how long until phishing domain do the same thing, linking to their own scam onion link.
I checked some of them and their domains still have old clearnet mixing page.

It's been a week and a half since I reported the .xyz site (I hope I wasn't the only one,) but it still tops the search results on google.  A friend called me the other day, asking if the .xyz site was the legit one or not.  The last time he used chipmixer I walked him through using tor.  He said he was about to send the coins but it felt too easy, so he figured it must be a scam, lol.  Good call!

I told him to bookmark chipmixer.com, which he had not done.  He did bookmark the tor site in torbrowser, but had forgotten about all that, which is why he searched for it.  Just another lesson about the importance of bookmarking sites you use for financial transactions.

[Lucius]

It's been a week and a half since I reported the .xyz site (I hope I wasn't the only one,) but it still tops the search results on google. 

It's been months since I personally reported a few fake CM sites to that same link you posted, but nothing has happened. I doubt that these reports are handled by people at all, and their AI is clearly too unintelligent to discern the good from the bad.

If we were to go into conspiracy theories, maybe the whole point is not for someone to make a profit by scamming potential users, but just to do harm to CM.

[newalias]

I am glad to see .com is back and I like this approach, but it's going to be interesting to see how long until phishing domain do the same thing, linking to their own scam onion link.

Looks like chipmlxer.com (SCAM!) just got a nice idea from you 

However, this is the most advanced scam, even maintaining session expiration time and renew/restore.

I think the new API is really nice but it is a matter of time until scam sites will use it:
Checking and redeeming sessions and vouchers entered or even providing fully functional scam sites, scamming only higher amounts to gain trust.
For sure, the latter can be done with own infrastructure, but with much more effort.

All scam sites lack captcha, just as observation.
Captcha is to protect from DoS, I think. That is also a problem for API, isnt it?
I think API is (or will get) a nightmare.

Anyone has a clue about how many these sites are making? I would start monitoring on my own otherwise.

[DireWolfM14]

Looks like chipmlxer.com (SCAM!) just got a nice idea from you 

Don't blame anyone other than the scammers, that's not helpful.  Dkbit98's prediction was the obvious next move whether it was mentioned or not. 

The funniest part is that the scammers "onion" address is actually a clear-net address with chipmixer's real prefix.  Anyone who's used tor would know that's a big red flag right away, so hopefully it won't trick too many people.  If only these scamming clowns would put as much effort into a legitimate business as they do into scamming, they would probably make a comfortable income for themselves. 

[dkbit98]

All scam sites lack captcha, just as observation.
Captcha is to protect from DoS, I think. That is also a problem for API, isnt it?
I think API is (or will get) a nightmare.

Adding captchas to any website is trivial thing and if I remember correctly I saw several scam services that used them in past, so this won't protect you from anything.
I would suggest everyone to report this phishing website that first started to clone new Chipmixer homepage.
It's interesting to see that this scammers even copied tor link that they changed domain from .onion to .onl that works in clearnet  



And this is how original Chipmixer looks like with proper onion domain:

[Husires]

Adding captchas to any website is trivial thing and if I remember correctly I saw several scam services that used them in past, so this won't protect you from anything.

To support Captcha, it is necessary to activate JavaScript in browsing, which leads to the leakage of some data. This was the way in which the location of the founder of the Silk Road was discovered.

Is there an easy way to remember that site, maybe @Chipmixer should buy/add a domain/sub that redirects the Onion address or create something that makes the address recognizable.

[TryNinja]

To support Captcha, it is necessary to activate JavaScript in browsing, which leads to the leakage of some data.

That's incorrect. Even ChipMixer's captcha works with no javascript.

You must be thinking about Google's ReCaptcha, which does require js.

[newalias]

Is there an easy way to remember that site, maybe @Chipmixer should buy/add a domain/sub that redirects the Onion address or create something that makes the address recognizable.

That is only possible with a clearnet server and would be exposed to the same problems as clearnet mirror was.
Redirecting would also state the darknet address as legitimate. That could be a problem.

Real Chipmixer never scammed anyone, even very high amounts were processed smoothly.
However, I am still aware of there is no letter of guarantee, as the mixing process does not support that.
Signed receipts means the server is able to sign and has a private key.
I would be happy to see signed deposit addresses. This can be another part of security.
(Being aware of scam sites can generate legit CM addresses and copy signed message to fake sites, this should contain time of generation and session.)

[DineroGrande]

Hi guys I’m new to BitcoinTalk I’m currently having trouble with ChipMixer at the moment, my deposit is not showing up but when I check the deposit address on the blockchain it shows my BTC has been deposited. Is there any support I can rewatch out to in regards to this matter, I’m a Avid user of ChipMixer and this is my first time running into this issue, I’m hoping someone could help me out or lead me into the right direction. Thank you guys in advance.

[SFR10]

my deposit is not showing up but when I check the deposit address on the blockchain it shows my BTC has been deposited.

If you used a clearnet link, then you're probably a victim of phishing websites ^{[I hope I'm wrong, but lately, there have been a lot of targeted attacks on ChipMixer]}.

• .com is now online. It does not allow mixing. It is used for informational purposes only.
  

Is there any support I can rewatch out to in regards to this matter,

Here you go: chipmixer@protonmail.com

[DineroGrande]

[/quote]
If you used a clearnet link, then you're probably a victim of phishing websites ^{[I hope I'm wrong, but lately, there have been a lot of targeted attacks on ChipMixer]}.

Thanks @SFR10 I used the .onion link thankfully I double checked and made sure it was the correct link. I’ve reached out to support just waiting on a response. I’ve been researching and a lot of people say it’s easier to get in contact with “ChipMixer” here on BitcoinTalk.

[DireWolfM14]

The .xyz site has fallen from it's perch atop google's search results.  The fake "dark net" site has claimed that spot.  Still no sign of chipmixer.com on the front page, but at least chipmixer's profile here on the forum is now the 4th result.  That's an improvement.

[Pmalek]

The .xyz site has fallen from it's perch atop google's search results.  The fake "dark net" site has claimed that spot.  Still no sign of chipmixer.com on the front page, but at least chipmixer's profile here on the forum is now the 4th result.  That's an improvement.

Things seem to have changed again. The fake .xyz site is at the top again, the DarknetOne site is 2nd, and this ANN thread is in the 5th place.
But there are good news from DuckDuckGo. A search for "chipmixer" now results in https://chipmixer.com/ being the first search result. The site was nowhere to be found the last time I tried it.

[SFR10]

The .xyz site has fallen from it's perch atop google's search results.  The fake "dark net" site has claimed that spot.  Still no sign of chipmixer.com on the front page, but at least chipmixer's profile here on the forum is now the 4th result.  That's an improvement.

Things seem to have changed again. The fake .xyz site is at the top again, the DarknetOne site is 2nd, and this ANN thread is in the 5th place.
But there are good news from DuckDuckGo. A search for "chipmixer" now results in https://chipmixer.com/ being the first search result. The site was nowhere to be found the last time I tried it.

That's great news ^{[bolded part]}, but we shouldn't rely too much on how Google shows us these results ^{[because of "certain things", each one of us gets slightly different results]}.
^{- Despite posting a few times on this thread, the ANN thread doesn't even appear for me on the first page!}

[dkbit98]

I checked few more alternative search engines with term ''Chipmixer'' without domain name.
This is the results I got:

qwant.com search: Legit Chipmixer website is in the first place on top, followed by several fake scams.
duckduckgo.com search: Legit Chipmixer website is also in the first place on top, followed by several fake scams.
yandex.com search: Legit Chipmixer website is in the first place on top, and bitcointalk ANN topic is in 3rd place.
bing.com search: Legit Chipmixer website is in the first place on top, followed by several fake scams.
yahoo.com search: Legit Chipmixer website is in the first place on top, followed by several fake scams.
startpage.com search: I can't find legit Chipmixer website, and xyz scam domain is on top, but there is bitcointalk ANN topic in 5th place.
searx.be  search: I can't find legit Chipmixer website, and xyz scam domain is on top, but there is bitcointalk ANN topic in 6th place.
brave.com search: I can't find legit Chipmixer website, and xyz scam domain is on top; there are youtube videos with fake website on top.
baidu.com search: Showing only articles about hacks and scams.
presearch: seach: First search result is showing xyz scam, and real Chipmixer website is shown in third place.
youtube.com search: Showing mostly videos with fake chipmixer scam domains.

Best search engines for Chipmixer seems to be Qwant, Bing, Yandex and DuckDuckGo.
Most problematic results for me are coming from youtube (google) with many misleading video tutorials.
Note that I excluded results coming from g-search.