[Warning]: Fake [banned mixer] - NEW

[Dave1]

Fresh and hot phishing site of https://[banned mixer]/. Not even a day old, chance upon it when looking for more mixer phishing site. Quick!!! we need to report it so that it will be taken down immediately.

Code:

http://kryptomixer.io/

Archive: https://archive.is/SI73g



Whois record:

[1714774777]

1714774777

[1714774777]

1714774777

[1714774777]

1714774777

[1714774777]

1714774777

[btc_angela]

Very nice catch, yes, it's brand new and probably these criminals are just waiting for someone to fall for it. Another red flag is that the site is not even SSL, which the scammers forgot to add to really look like it is legit.

Reported it to https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en.

[Yogee]

The site is still active but I'm done reporting to Google's safebrowsing. Are there any other websites with easy and convenient reporting procedure like that of Google? No sending emails and posting personal information. Reporting domain to NameCheap seems a bit of a hassle.

I saw another site that's advertised as a mixer but the content seems unrelated to crypto [it's in Rusian]. Watch out for cryptomixer.cloud

[Baofeng]

The site is still active but I'm done reporting to Google's safebrowsing. Are there any other websites with easy and convenient reporting procedure like that of Google? No sending emails and posting personal information. Reporting domain to NameCheap seems a bit of a hassle.

I saw another site that's advertised as a mixer but the content seems unrelated to crypto [it's in Rusian]. Watch out for cryptomixer.cloud

Code:

www.cryptomixer.cloud

will redirect you to:

Code:

https://cryptomixer.space/

Another phishing site of the original https://[banned mixer]/.

And the IP address is a cesspool of malwares.

Code:

IP Address 	104.27.190.115 - 444 other sites hosted on this server 

https://www.virustotal.com/gui/ip-address/104.27.190.115/relations

[khaled0111]

Good catch @op, but I think we should gather all these fake websites into one topic and keep it updated instead of creating a new topic for each one of them.
This will make it easier for anyone who wants to help reporting them or wants to check if he is visiting the right link.

Are there any other websites with easy and convenient reporting procedure like that of Google?

You should also report phishing websites to the hosting company and the domain registrar to take them down completely.

[Stedsm]

Very nice catch, yes, it's brand new and probably these criminals are just waiting for someone to fall for it. Another red flag is that the site is not even SSL, which the scammers forgot to add to really look like it is legit.

That's right, nonetheless, noobs will still fall for this if they're not technically sound about mixers as well as even websites. I highly doubt there are, but even if they'll scam 10 people, I guess they'll easily make up their money they used in making that website. Reporting it to complaint based websites will be more useful than reporting at Google alone as it will only remove it from their index but it can still be sent through email blasters. I believe we should create some active complains and even report this website at scam adviser.

[qwertyup23]

Impressive work done by you, OP.

Lots of scammers creating fake websites nowadays are taking advantage of the bullish run of bitcoin in the market. This attempt is laughable at its best but this may caught people off-guard especially if they failed to check the link.

Continue your investigation with other similar websites like these and post it on the 'scam accusation' board in order to notify non-members of this forum.

[Furious 7]

I really appreciate the OP's catch.

It's true we have to make a lot more aware of the many people on this forum and out there there have been so many phishing sites and now cryptomixers are being targeted again, I know this does require a careful search to catch and publish it here, with the bitcoin price trend on the rise. Then other phishing sites will remain. Please do some research for those who don't know. I think Dave has done a lot of work here so we will continue to see how scamers want to grab our funds with phishing sites.

[mike2077]

What is crypromixer and why one would need it?

[Xal0lex]

Good catch @op, but I think we should gather all these fake websites into one topic and keep it updated instead of creating a new topic for each one of them.
This will make it easier for anyone who wants to help reporting them or wants to check if he is visiting the right link.

There is a topic 2021 List Bitcoin Mixers Bitcoin Tumblers Websites and there is a post with an updated list of scam mixers.

[pakhitheboss]

This topic was created on 16th of this month and still this website is live. I am not sure how many people need to report it for Google to start blocking it. This has been an ongoing issue we as a community find websites and apps that are scam or fake , we do report it to Google and Google then take ages to remove them. In the mean time innocent newbies fall for them and then they blame Bitcoin for all their issues. Sometimes I feel Google deliberately is delaying corrective actions

[Bitcoadvice]

Fresh and hot phishing site

Code:

http://kryptomixer.io/

Archive: https://archive.is/SI73g

Hey there,
as of my check on 2/2/2024, the domain "kryptomixer.io" is being used as a phishing cloaked domain in search engines. When you click on this URL, it redirects you to "cryptomixer2.com", which is another bitcoin mixer phishing website. This website is a clone of the former legitimate service called "CryptoMixer". Based on my suspicions, I believe the fraudster responsible for this is from Russia.

The scammer behind "kryptomixer.io" is the operator of a large network of cryptocurrency mixer phishing scam websites. This individual has already stolen millions of dollars, and you can see more detail of this in my thread where I mentioned the phishing domains.
You can find the thread here: https://bitcointalk.org/index.php?topic=5478625

Sadly, the domain "kryptomixer.io" is still active and online. They have changed their domain registrar to Nicenic, which is known as the most abused registrar according to Spamhaus (https://www.spamhaus.org/statistics/registrars/). This choice of registrar makes it extremely difficult, if not impossible, to take the domain down.

It is both shocking and disheartening to see that this fraudster has been able to continue scamming people around the world for years.

[NotATether]

It is both shocking and disheartening to see that this fraudster has been able to continue scamming people around the world for years.

Which makes it all the more important to get BitMixList at the top of search results and not these scummy phishing sites.

[Husires]

It is both shocking and disheartening to see that this fraudster has been able to continue scamming people around the world for years.

Have phishing links increased since December or have they been around for a while? Because I think the lack of discussion about mixers here is what makes it easy for scammers to show phishing links first when you use Google.

Great effort Bitcoadvice but we can't do much, trying. There is a demand for privacy services and since the Chipmixer ban mixing services have boomed a lot.

[Bitcoadvice]

It is both shocking and disheartening to see that this fraudster has been able to continue scamming people around the world for years.

Have phishing links increased since December or have they been around for a while? Because I think the lack of discussion about mixers here is what makes it easy for scammers to show phishing links first when you use Google.

Great effort Bitcoadvice but we can't do much, trying. There is a demand for privacy services and since the Chipmixer ban mixing services have boomed a lot.

Thank you for your kind words. The phishing domains of fake cryptocurrency mixers have been in existence for several years at the top of search engines.
Surprisingly, the individual I mentioned in my previous reply has managed to discover a method to get his phishing websites ranked at the top of search results.
I suspect he achieved this using black hat methods or possibly employing unique, unknown techniques. Considering the value of such information, I believe there is a significant amount of money involved.
The individuals behind this cryptocurrency phishing mixer network are not amateurs or newcomers; there is definitely an experienced individual orchestrating this operation.

[Lucius]

Hey there,
as of my check on 2/2/2024, the domain "kryptomixer.io" is being used as a phishing cloaked domain in search engines. When you click on this URL, it redirects you to "cryptomixer2.com", which is another bitcoin mixer phishing website. This website is a clone of the former legitimate service called "CryptoMixer". Based on my suspicions, I believe the fraudster responsible for this is from Russia.
~snip~

On that link, I only see a page without any content with the message "Website kryptomix.io is ready. The content is to be added" and no redirection to other pages. On some other browsers, a warning appears about a potentially dangerous page that has been blocked, which means that the reports on Google Safebrowsing were successful.

Have phishing links increased since December or have they been around for a while? Because I think the lack of discussion about mixers here is what makes it easy for scammers to show phishing links first when you use Google.
~snip~

I don't think there has been an increase in phishing links, because even before mixers were one of the most frequent targets of scammers. A method of protection against ads that are displayed by Google as top search results is just one good ad blocker like uBlock Origin - free and easy.

[Bitcoadvice]

Hey there,
as of my check on 2/2/2024, the domain "kryptomixer.io" is being used as a phishing cloaked domain in search engines. When you click on this URL, it redirects you to "cryptomixer2.com", which is another bitcoin mixer phishing website. This website is a clone of the former legitimate service called "CryptoMixer". Based on my suspicions, I believe the fraudster responsible for this is from Russia.
~snip~

On that link, I only see a page without any content with the message "Website kryptomix.io is ready. The content is to be added" and no redirection to other pages. On some other browsers, a warning appears about a potentially dangerous page that has been blocked, which means that the reports on Google Safebrowsing were successful.

As I previously stated,

as of my check on 2/2/2024, the domain "kryptomixer.io" is being used as a phishing cloaked domain in search engines.

This indicates that if someone clicks on "kryptomixer.io" through Google, they will be redirected to "cryptomixer2.com", which is another cloned bitcoin mixer phishing website. This is called cloaked search results, which is also not allowed on Google. However, the fraudster abuses this.
"cryptomixer2.com" is currently suspended, which may be why "kryptomixer.io" is no longer appearing in the search results. However, if they modify the redirect on "kryptomixer.io", the website may reappear in Google.
Although "cryptomixer2.com" is currently suspended, there is a possibility that "kryptomixer.io" will appear again in the search results in the future. This is because the domain and server are still active and online, and the fraudster may redirect users to another phishing website.