[ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented

[TryNinja]

Am I reading this right, does this mean that Google received a complaint from the .online domain and it got the original .com domain got removed from searches because of this?

Lol, you are right.

SENDER
ChipMixer
on behalf of crade234@gmail.com

Unauthorized usage of my client's (https://chipmixer.online) brand images.

Here is Google's page about it: https://transparencyreport.google.com/copyright/domains/chipmixer.com?hl=en
More specifically: https://transparencyreport.google.com/copyright/request/12571840?hl=en

Looks like the scammer also owns chipmixer dot one:

The original copyrighted website design owned by ChipMixer, Inc (represented online by https://chipmixer.one/articles/index). The infringing website has copied the text "Following articles are about Bitcoin privacy both theory and practice. You can find latest ones at the top. If you want to read it like a book - click on one of the topics."

[1714974923]

1714974923

[1714974923]

1714974923

[1714974923]

1714974923

[TeddyXc]

Shit so i got ripped by some phishing shit that somehow got first result on google, nice..

[BlackHatCoiner]

Shit so i got ripped by some phishing shit that somehow got first result on google, nice..

Yep, and unfortunately you're the reason why they keep making these. They don't care much about what's the official ChipMixer or where they're ranked in SEO; they just want that one wrench who'll screw it up.

Sorry for your loss, I hope you didn't send much.

[dkbit98]

Shit so i got ripped by some phishing shit that somehow got first result on google, nice..

Yes you got scammed, and you should never blindly trust google search results, always try to verify if website is legit than bookmark them, and add extension uBlock origin to hide scam ads.
I just searched for term chipmixer is multiple search engines and only DuckDuckGo and Yendex game me chipmixer.com as first result, but there is still la lot of fake results below.
One more thing you can do is to always check domain date registration, scam XYZ website was registered last month:

Code:

Domain Name: CHIPMIXER.XYZ
Registry Domain ID: D280968252-CNIC
Registrar WHOIS Server: whois.iisp.com
Registrar URL: http://nicenic.net/
Updated Date: 2022-03-09T10:11:14.0Z
Creation Date: 2022-03-09T05:44:08.0Z
Registry Expiry Date: 2023-03-09T23:59:59.0Z
Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED

[Lucius]

Shit so i got ripped by some phishing shit that somehow got first result on google, nice..

And it's not even a paid ad that mostly tricks many people, but a very skillful manipulation to remove a legitimate page from search results, and to have a fake service at the top. However, the second search result in my case is the ChipMixer signature campaign thread, and it would be logical for me to look for any information about a service I would like to use.

Next time you will surely be more careful because it is best to learn from your own mistakes. Also don't let that discourage you, it can happen to any beginner, even to the more experienced.

[stompix]

Now on to the obvious question right now, can we simple users do something about this?
Reporting to google for fake misleading ads is one thing and I did that a lot of times, but here is something that I guess is a bit more complicated, so stick to reporting the xyz domain as a phishing website via the safebrowsing report tool or is there something else we can do about it?

[LoyceV]

Am I reading this right, does this mean that Google received a complaint from the .online domain and it got the original .com domain removed from searches because of this?

That would be amazingly dumb! Does this mean Google just follows any BS claim without verifying anything? But when it's about taking down a reported phishing site, they don't seem to care? It doesn't make sense. The word "stupid" doesn't even cover it!
I would expect Google to have more than enough data to determine which site is the original creator of the data. They're a search engine, it's their core business to know these things.

Now on to the obvious question right now, can we simple users do something about this?

I'm starting to think of adding this to /etc/hosts:

Code:

127.0.0.1       google.com

Reporting to google for fake misleading ads is one thing and I did that a lot of times, but here is something that I guess is a bit more complicated, so stick to reporting the xyz domain as a phishing website via the safebrowsing report tool or is there something else we can do about it?

It would be interesting if a scammed user sues Google over this. They're actively promoting a scam, despite being reported to them many times. But I guess victims value their privacy too much for that.

[BlackHatCoiner]

Now on to the obvious question right now, can we simple users do something about this?

Aren't we already doing a lot in our signatures?

[stompix]

Now on to the obvious question right now, can we simple users do something about this?

Aren't we already doing a lot in our signatures?

Hmm, I don't think this has anything to do with our signatures.

The .xyz and the .online domains are scammers, a lot of users around here including myself have reported google ads, domains to domain registrars and hosting and even video on youtube for all type of possible scams, I don't think that doing 3 minutes of reporting is something that should be considered a task or should be restricted to an ongoing partnership or directly affected users.

If there is a chance that by writing an email or filling out a simple form a scammer will be stopped at least for a while and save somebody from a monetary loss I think that's some well-spent time.

I'm starting to think of adding this to /etc/hosts:

Code:

127.0.0.1       google.com

The users who know how to add that and know what it does aren't probably the ones that will fall for a phishing website in the first place.
As for the google suing part, as much as I would see it happening I give it some hell frozen over chances. 

[o_e_l_e_o]

Google are your enemy. I've said this before many times. It boggles my mind people still trust a company which has proven consistently and repeatedly to be corrupt to the core.

Google don't care. You think a multi-billion dollar company like Google can't hire a couple of people on minimum wage to check the authenticity of ads which are submitted? Of course they could, they just don't care. Google are not your friend. They don't care about you, your data, your coins, your privacy, your security, your computer, your phone, your life, anything. They care about money. If a scammer is willing to pay money to advertise their scam, Google are quite happy to accept. If a scammer is willing to pay money to have their malware infected app listed on the Play Store, Google are quite happy to accept. As long as they make a profit, they don't care in the slightest if people lose their life savings to a scam ad they are showing.

This has been going on for years. Google have proven time and time again they are quite happy for users to have their lives ruined as long as they keep making those sweet, sweet profits. Still using Google products or trusting Google with anything is pretty much Stockholm Syndrome as this point.

People need to stop using Google products. I've long been anti-Google since it invades every inch of your privacy, tracks literally everything you do, builds a massive profile on you, and sells that data to third parties, advertisers, governments, etc. However, as time goes on, it becomes more and more clear that using Google isn't just a massive privacy risk, but a massive security risk too. They put ads to scams and phishing sites at the top of their search results, they do zero due diligence in to what shows up on the Play Store and frequently host and promote scam apps like this one, they leak data, their cloud storage is hacked repeatedly, they store passwords in plain text, the list goes on. If you care at all about either your privacy or your security, stop using all Google products.

Google doesn't care about you, like, at all. The sooner people realize that the better. Every Google product that exists - search engine, email, maps, Chrome, etc. - exists to harvest your data and make money from it. Why do you think they offer you all these services for free? Your data is the most valuable asset you own, and then can make a lot of profit from selling it.

Google are primarily a data harvester. They don't care if their app store is filled with scams, if their extension store is filled with scams, if their search engine returns scam sites. In fact, they will happily accept money from scammers to place adverts for said scams at the top of your results page. They don't care if you get scammed, as long as they can get your data.

[dkbit98]

For protection against this, I had an idea of using some filter for uBlock extension that would detect and update all fake chipmixer domains, and I even asked guys from chipmixer about this.
They said it would not had much effect because people who already know about this scams would probably be the only people who would use this filter.
Only way that something like this could work is if those scam website domains would be a part of some bigger uBlock filter lists:
https://github.com/gorhill/uBlock/wiki/Filter-lists-from-around-the-web
https://filterlists.com/

Google are your enemy. I've said this before many times. It boggles my mind people still trust a company which has proven consistently and repeatedly to be corrupt to the core.

It's not just google, because if you try using all other search providers you would get similar results, and they often use mixed
search results from google.

[malevolent]

Funny how he also reported other phishing sites: https://lumendatabase.org/notices/25372739

Now on to the obvious question right now, can we simple users do something about this?
Reporting to google for fake misleading ads is one thing and I did that a lot of times, but here is something that I guess is a bit more complicated, so stick to reporting the xyz domain as a phishing website via the safebrowsing report tool or is there something else we can do about it?

Reporting phishing sites, DMCA reports and/or counter notices. I think it's first and foremost in Chipmixer's interest to hire someone to do it for them. Maybe one of those 'reputation management' companies could be of use.

[BitManX2]

Hi! Someone withdrew my chip with 22,000 SATS fee!

How is this even possible? I had problems with my session and by the time I was able to get my private key, my funds were sent out....

This is an extremely high transaction fee, so what could have gone wrong?

I made all the http requests on the same IP address which belongs to a reputable VPN Service.

Expecting a solution... Thanks


EDIT: for those wondering; yes I used chipmixer.com, the official URL, and I can share proof of my deposits to a team member

[jackg]

How is this even possible? I had problems with my session and by the time I was able to get my private key, my funds were sent out....

Could you elaborate on the problems you faced with the session? Did anything feel like an adversary was in control of the machine or browser you were using?

Have you emailed your vpn provider to check there was no attack on their end?

[BitManX2]

How is this even possible? I had problems with my session and by the time I was able to get my private key, my funds were sent out....

Could you elaborate on the problems you faced with the session? Did anything feel like an adversary was in control of the machine or browser you were using?

Have you emailed your vpn provider to check there was no attack on their end?

I reloaded the pages few times, awaiting my deposit to hit the ChipMixer's system. When it finally went through, the page loaded without a stylesheet (no CSS). Then I refreshed the page again and took several seconds to load this time. Once the page loaded, my saved session token was not found, and my session shown a new deposit address, so I thought the logs of my transaction got purged from this website's database.

I kept refreshing and I was getting a new deposit address for the session I have previously saved.... until... I finally got the same deposit address I sent funds to minutes back ago.

So I proceeded to the step2 - mix --> and I had no options to split my chips, all of the chips were in a private key, so I said 'Well, let's just withdraw if I cannot split', so I went straightforward to the third step, and got my signed receipt. I copied and pasted this address with my funds on the blockchain explorer and.... funds were withdrawn like 5 minutes ago and obviously not by me.

Let me know if this is a deep enough explanation. I have saved down the receipt, the deposit address I have used and everything including sessions to prove this is not an "invented" story just to steal funds or any kind of misleading activity.

Thanks.

[satoshbitsZ7]

Hi! Someone withdrew my chip with 22,000 SATS fee!

How is this even possible? I had problems with my session and by the time I was able to get my private key, my funds were sent out....

This is an extremely high transaction fee, so what could have gone wrong?

I made all the http requests on the same IP address which belongs to a reputable VPN Service.

Expecting a solution... Thanks


EDIT: for those wondering; yes I used chipmixer.com, the official URL, and I can share proof of my deposits to a team member

i had issue today also on chipmixer. i sent transaction for mixing, but still shows 0 chips even after 3 confirm.

seems different from your issue, but also i have use chipmixer for 4+ years now and never had problem like this. I email him already so I hope he can resolve it.

[ChipMixer]

Important announcement

Chipmixer.com is no longer under our control. Do not use it

What is happening?
Chipmixer com domain is pointing to our IP.
Attacker server is responding to requests made to this IP.
Attacker used it to create new SSL certificate https://crt.sh/?id=6604573658
Attacker is using it to serve altered website that changes deposit addresses and also displays invalid onion address.
Chipmixer com has been disabled till fix is found.

This has happened before with different service provider https://bitcointalk.org/index.php?topic=1935098.msg58026067#msg58026067

Tor / onion service has not been affected.
Any data sent to and received from .com on April 24 may be compromised. Sweep your chips and do not reuse session tokens.
Contact us at chipmixer@protonmail.com if you have been affected.

[satoshbitsZ7]

Chipmixer.com is no longer under our control. Do not use it

What is happening?
Chipmixer com domain is pointing to our IP.
Attacker server is responding to requests made to this IP.
Attacker used it to create new SSL certificate https://crt.sh/?id=6604573658
Attacker is using it to serve altered website that changes deposit addresses and also displays invalid onion address.
Chipmixer com has been disabled till fix is found.

This has happened before with different service provider https://bitcointalk.org/index.php?topic=1935098.msg58026067#msg58026067

Tor / onion service has not been affected.
Contact us at chipmixer@protonmail.com if you have been affected.

can you check email? i sent but still no reply, also sent pm.

[satoshbitsZ7]

have other user who lost fund received reply yet?

CM admin post on this thread, but i still receive no contact on my request for my lost funds

[LeGaulois]

have other user who lost fund received reply yet?

CM admin post on this thread, but i still receive no contact on my request for my lost funds

I'm sure he's more than busy working on the sec. the last hours. I'd say you can wait a few more hours. I mean, it's not like it's been three days.
ChipMixer will respond, of course. No worry

(I know it's easy to say 'no worry' when it's about your own money but he'll get back to you as soon as possible for sure)