[Warning] Fake Chipmixer website

[CryptoYar]

What happened: Chipmixer phishing website

Website Link:

Code:

https://chipmixer.one

Thanks for the warning - mole0815

Archive Link: https://archive.vn/DZ4Vq

Domain Name: chipmixer.one
Registry Domain ID: D0C64A5BE48B14AFC8950CDD619B5D422-GDREG
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-07-21T18:33:47Z
Creation Date: 2021-07-16T18:33:47Z
Registry Expiry Date: 2022-07-16T18:33:47Z
Registrar: NameCheap, Inc.

whois



Old posts:

chipmixer.xyz

chipmixer.shop

chipmixer.me

Please report to: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[1714835721]

1714835721

[1714835721]

1714835721

[1714835721]

1714835721

[1714835721]

1714835721

[Lorence.xD]

The reason that it is around the first page of Google is because of SEO or something like that where they pay to be on the first page. This is the most legitimate looking spoof website that I have seen and I would've mistaken it for the real thing if it weren't for the domain name. To all newbies out there, before doing any transactions on a website, make sure that they are legitimate by looking at their domain name, those that doesn't end in .com or any legit domains most of the time are spoofed websites.

[CryptoYar]

The reason that it is around the first page of Google is because of SEO or something like that where they pay to be on the first page. This is the most legitimate-looking spoof website that I have seen and I would've mistaken it for the real thing if it weren't for the domain name. To all newbies out there, before doing any transactions on a website, make sure that they are legitimate by looking at their domain name, those that doesn't end in .com or any legit domains most of the time are spoofed websites.

Yes. Scammers have used search engine optimization to bring the website to the first page. It is also a fact that many groups of scammers are active and continuously creating such fake websites. And we can say that almost every popular website is being targeted. Therefore, we need to report them so that Google can block them and add them to the blacklist.

Always bookmark your favorite websites so you don't have to search on Google. And always pay attention to the domain name of the website as you said.

Please report here: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[Lorence.xD]

~

Yes. Scammers have used search engine optimization to bring the website to the first page. It is also a fact that many groups of scammers are active and continuously creating such fake websites. And we can say that almost every popular website is being targeted. Therefore, we need to report them so that Google can block them and add them to the blacklist.

Always bookmark your favorite websites so you don't have to search on Google. And always pay attention to the domain name of the website as you said.

Please report here: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

For me, I don't really need to pay attention to the website that I am visiting as long as I know their full domain name, I can guarantee that I will not be on a spoofed website. Tried to catch and report this kind of websites a long time ago but they are a Hydra, destroy one and another three will pop up. The best approach is to catch the people behind and not the website because crippling the source is the best way to win this war.

[Obito]

For me, I don't really need to pay attention to the website that I am visiting as long as I know their full domain name, I can guarantee that I will not be on a spoofed website. Tried to catch and report this kind of websites a long time ago but they are a Hydra, destroy one and another three will pop up. The best approach is to catch the people behind and not the website because crippling the source is the best way to win this war.

Too bad that you stopped fighting the good fight but I'm telling you every head the we kill is a victory for us, it doesn't matter how many heads it takes as long as we can destroy them little by little, this is a battle of attrition. I do agree with you catching the people behind all of this but it is a difficult situation and not every user can do that, you need to have some sort of coding and networking skills to track the ones behind this. I respect your decision but it doesn't sit well with me that you have given up. I would like to add that we also should educate the people about this kinds of websites so as to destroy the demand thus with low demand and a high supply, the supply will stop eventually.

[Lucius]

I do not see that page, not even on the second page of search - even when I turn off ad blocker all results are legitimate and there are no ads from Google AdWords. This suggests that the SEO campaign is targeted at specific countries where scammers assume they will have more success.

The best approach is to catch the people behind and not the website because crippling the source is the best way to win this war.

How are you going to catch a professional hacker who knows how to hide his tracks? If he uses Tor and a mixer for all the stolen coins, then only the top secret services of the world could be of help, as was the case here.

Those who could help prevent things like this are certainly the ones who provide hosting and domain registration services - but have they ever shown that they care about anything but profit?

[Lorence.xD]

~

How are you going to catch a professional hacker who knows how to hide his tracks? If he uses Tor and a mixer for all the stolen coins, then only the top secret services of the world could be of help, as was the case here.

Those who could help prevent things like this are certainly the ones who provide hosting and domain registration services - but have they ever shown that they care about anything but profit?

If there is a dedicated cyber team to track down this kinds of people, I think that they can be tracked. There are even private firms that offers to track people on the Internet and the only time that I see them fail is when they tried to track down Cicada 3301.

[CryptoYar]

What happened: Another chipmixer phishing website

Website Link:

Code:

https://chipmixer.xyz

(Archive link)

Registrar Status   clientTransferProhibited
Dates   63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08

Reported: https://www.google.com/safebrowsing/static/submit_malware.html?hl=en

[TalkStar]

Registrar Status   clientTransferProhibited
Dates   63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08

Reported: https://www.google.com/safebrowsing/static/submit_malware.html?hl=en

Report submitted from my end.

If i am not wrong then its pretty much easy to say that all these phishing and clone sites are running by the same group of scammers who are taking all chipmixer related domains.

If you just check on domain providers available list you will see why i am talking this. They have already taken most domains and using one by one to complete their scam game. Whenever they get caught with one they shift their common script to another domain and continue their activities.

In a situation like this make the habit of bookmarking real website url is so effective which can save lots of new crypto users from losing their crypto assets.

[khaled0111]

The fake website you reported is still online and despite reporting it to Google it's still considered safe for browsing!!:

Current status

No unsafe content found

I noticed that the receiving address does not change even if you start a new session and that address already has been used before. I believe a vigilant person would notice this too.

[CryptoYar]

Report submitted from my end.

Thanks for your reporting. I hope that soon Google will take action against this website.

The fake website you reported is still online and despite reporting it to Google it's still considered safe for browsing!!:

Maybe it will take some time. But eventually, it will look something like [ this ].

[CryptoYar]

Got two more chipmixer phishing websites.

Website Link: https://chipmixer.shop
Archive Link: https://archive.ph/yhDyI

Domain information:

Domain Name: CHIPMIXER.SHOP
Registry Domain ID: DO5597313-GMO
Registrar WHOIS Server: whois.porkbun.com
Registrar URL: http://porkbun.com
Updated Date: 2021-03-29T19:53:19.0Z
Creation Date: 2021-03-29T19:52:11.0Z
Registry Expiry Date: 2022-03-29T23:59:59.0Z
Registrar: Porkbun LLC
Registrar IANA ID: 1861

Website Link:

Code:

https://chipmixer.me/

Archive Link: https://archive.ph/HaQQM

Domain information:

DDomain Name: CHIPMIXER.ME
Registry Domain ID: D425500000333922063-AGRS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-07-05T21:15:43Z
Creation Date: 2020-05-06T08:28:13Z
Registry Expiry Date: 2021-05-06T08:28:13Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068

Please report all these phishing websites.

https://chipmixer.me/ [ Active ]

https://chipmixer.xyz [ Active ]

https://chipmixer.cm/ [ Active ]

https://chipmixer.shop [ Offline ]


If you do not know how to report to any phishing website, then read this post : https://bitcointalk.org/index.php?topic=5281378.0  - By:
Leviathan.007

[Joel_Jantsen]

I don't know what the ideal solution is but one thing could be easily done from the main service's side -  Buy all the secondary domains which are the most identical to the primary one. That way, scammers will not be able to access that "chipmixer" part at least. They will use something like "ch1pmixer.com" or "chimiKer.com" that is faking the primary domain but it is much easier to spot compared to "chipmixer.xyz". Also, the secondary domains are fairly cheap.

[Kong Hey Pakboy]

What happened: Another chipmixer phishing website

Website Link:

Code:

https://chipmixer.xyz

(Archive link)

Registrar Status   clientTransferProhibited
Dates   63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08

Reported: https://www.google.com/safebrowsing/static/submit_malware.html?hl=en

They're still doing this kind of thing even though their other site was already caught and reported, hopefully there is less or no victim that is going to fall for it because I don't know what to say about this people falling for this because mixing services is a niche part of crypto and I don't think that a newbie is going to fall for this.

[ScamViruS]

They're still doing this kind of thing even though their other site was already caught and reported, hopefully there is less or no victim that is going to fall for it because I don't know what to say about this people falling for this because mixing services is a niche part of crypto and I don't think that a newbie is going to fall for this.

We have already seen many reports that Newbies have been scammed while using the mixing service. Since we have heard of such scams before, it is not possible to say for sure that no one will be a victim of this website. Scammers often use Google's ads in these fake websites to get first results, so that inexperienced users can easily fall into their trap.

[Lucius]

I checked all the fake links from OP and none were blocked and marked as a deceptive site, really weird because I personally reported each of them to Google a little less than 2 months ago. What else to say but that someone is not doing their job, or that reports stay unhandled because they don’t understand what a mixer is and what the difference is between a legitimate and a fake version.

I will try again, but I will also contact the hosting service and send a ticket to their abuse support.

[stompix]

I will try again, but I will also contact the hosting service and send a ticket to their abuse support.

Google has always been a let down exactly when it mattered but speaking of hosting namecheap abuse department has gone deaf completely, I don't know what their plan is, trying to build a reputation of safe haven and anonymity or what but lately they went from being slow to not even responding to emails, and I'm not using the same email to say they just got tired of my reports and blacklisted me.
I have reported a few mixing clones, fake mining gear shops, ponzi schemes, and from all of my reports in the last 3 months or so the most I got from them was a reply they are investigating...and investigating and silence while topics about people getting scammed pile up every day.

Anyhow, did a fresh new round of reports for those 4, different IP, different device, who knows, maybe one more would finally trigger the alarm bells.

[Lucius]

Google has always been a let down exactly when it mattered but speaking of hosting namecheap abuse department has gone deaf completely...

I had the impression that Google was doing this pretty well considering I had personally seen the results in a browser that showed a deceptive site for at least 90% of what I personally reported (like many others of course). Either they have introduced some new criteria by which they work, or they have trouble understanding what it is all about - I put a link to the original site in each report, so I don't understand how intelligent someone needs to be to see what is original and what is false.

And when it comes to hosting, I have the same experiences as you - I never even got feedback from them about anything - so I think their message is pretty clear - profit comes first, everything else is less important.

[CryptoYar]

chipmixer.shop is offline now. 

Actually chipmixer.shop was being promoted through Google ads. hope, it will save some people's money... Thank you stompix , Lucius . and thanks to everyone who reported these phishing websites.
Although there are still three left. keep reporting.

[BlackHatCoiner]

This is actually pretty dangerous. The only way for someone to verify that he/she mixes on the legit ChipMixer is by having an account on bitcointalk and observe the difference. I'm pretty sure that lots of money have been lost since that man keeps creating more ChipMixers. Generally, mixing coins on the internet without having legit reviews is difficult. There aren't many ways to ensure that the reviews are real.

Although there are still three left. keep reporting.

Even if I don't believe that the solution for this case is reporting the website, there aren't many things you can do to help so... reported by BlackHatCoiner too.