Cloning Chipmixer with B cyrcle

[Chikito]

Website name:

Code:

https://chipmixer.xyz/

Found this result on Top google searching



the difference is the B logo on the center with circle this is not the same like real chipmixer with C logo inside. but they was mistaken in top right still use C logo



Domain information:

Registrar Info
NameNICENIC INTERNATIONAL GROUP CO., LIMITED
Whois Serverwhois.nicenic.net
Referral URLhttp://www.nicenic.net
Important Dates
Expires On 2023-03-09
Registered On 2022-03-09
Updated On 2022-03-09
Name Servers
KINSLEY.NS.CLOUDFLARE.COM172.64.34.75
RAYDEN.NS.CLOUDFLARE.COM162.159.44.163

the Ip's relationship: https://www.virustotal.com/gui/ip-address/45.199.10.180/relations

the scammer always use this invalid address for mixing: 5Ap20Fd2QJp1XyuGoMtGrGnbo28wnXxVJ. cause I can't find it on explorer, I don't know what the purpose,

[NeuroticFish]

Not long ago somebody got his money stolen by getting directed by Google to this .xyz site.
And these (malicious) clones get bolder and bolder; the actual Chipmixer site may get demoted/removed from Google searches because of infringement complains made by the scammers.

So for now, I think that the safest way to get to Chipmixer is to get the (preferably onion v3) link from the ANN on Bitcointalk.

[hugeblack]

It seems that Cloning Chipmixer is making a good profit, so attempts to attack the site have become frequent.
Just clicking on the site will increase their chances because I believe that the goal of such sites is to obtain information more than fraud.
when .com is down, users will try to search on Google to find that site.
As for the address that does not match, they may not want to be tracked and will change it every once in a while.

And these (malicious) clones get bolder and bolder; the actual Chipmixer site may get demoted/removed from Google searches because of infringement complains made by the scammers.

.com website is still there with your signature.

[Pmalek]

No one should be using google to find the clearnet site. At the moment, there is no clearnet site as it has been taken down by ChipMixer. If you want to mix your coins, use TOR and the onion version:

Important announcement

Chipmixer.com is no longer under our control. Do not use it

What is happening?
Chipmixer com domain is pointing to our IP.
Attacker server is responding to requests made to this IP.
Attacker used it to create new SSL certificate https://crt.sh/?id=6604573658
Attacker is using it to serve altered website that changes deposit addresses and also displays invalid onion address.
Chipmixer com has been disabled till fix is found.

This has happened before with different service provider https://bitcointalk.org/index.php?topic=1935098.msg58026067#msg58026067

Tor / onion service has not been affected.
Any data sent to and received from .com on April 24 may be compromised. Sweep your chips and do not reuse session tokens.
Contact us at chipmixer@protonmail.com if you have been affected.

If you google "chipmixer" in Chrome, the fake site comes up on top with the second search result being the dnstat site as shown on the picture. On Firefox, it's the other way around. the .xyz site is placed second and dnstat.net is on the top.

[SFR10]

the scammer always use this invalid address for mixing: 5Ap20Fd2QJp1XyuGoMtGrGnbo28wnXxVJ. cause I can't find it on explorer, I don't know what the purpose,

These "fake" alphanumeric characters aren't supposed to be a deposit address ^{[they are used for restoring sessions]}!

• The following address is the one in question and it seems that it already has some victims ^{[unfortunately]}: bc1q9xuggksslzg2nlqjdkxq7c0evz86chcnjhxul2

[dkbit98]

There are bunch of this fake chipmixer websites, they are constantly under attack from scammers and probably from some government agencies.
I would suggest to always use official .onion address whenever you want to use Chipmixer, and double check if they have correct certificate.
Bookmarking page in browser is much better than doing google search.

[PrimeNumber7]

In addition to the above scam site, there is also the risk that some of the mixer "review" sites that are at the top of google search results will link to fake sites, or will link to fake sites in the future if they link to the real site today.

I sent feedback to google about the top result being a scam site. That is really all that can be done. It is possible that whoever is being the .xyz site did the same thing to the "real" chipmixer.

the difference is the B logo on the center with circle this is not the same like real chipmixer with C logo inside. but they was mistaken in top right still use C logo

This was probably a mistake on the part of the scammers.

[Chikito]

So for now, I think that the safest way to get to Chipmixer is to get the (preferably onion v3) link from the ANN on Bitcointalk.

Because fake bunch union link is also already on the searching engine on tor site, better to get it on ann thread or participant signature.

* .com site also can't open (This site can’t be reached)

the scammer always use this invalid address for mixing: 5Ap20Fd2QJp1XyuGoMtGrGnbo28wnXxVJ. cause I can't find it on explorer, I don't know what the purpose,

These "fake" alphanumeric characters aren't supposed to be a deposit address ^{[they are used for restoring sessions]}!

• The following address is the one in question and it seems that it already has some victims ^{[unfortunately]}: bc1q9xuggksslzg2nlqjdkxq7c0evz86chcnjhxul2

My mistake and thanks for the detail. I don't focus on the bitcoin address didn't have to begin with 5.

That token session (5Ap20Fd2QJp1XyuGoMtGrGnbo28wnXxVJ) is have same when I try to open using a different browser. this is different if using the real chipmixer, when open different IPs will have different session tokens. The fake chipmixer also doesn't have captcha, which is the important thing to fast know which one is fake.

[AnotherAlt]

@DroomieChikito, I would like to know what keyword you have used to search this?
I cannot post images, but you may check mine here - https://prnt.sc/GUW_yz9cMSAT.
It is clear I searched Chipmixer, and the first result is this phishing website. The original Chipmixer is not found using this keyword.

when .com is down, users will try to search on Google to find that site.
As for the address that does not match, they may not want to be tracked and will change it every once in a while.

And these (malicious) clones get bolder and bolder; the actual Chipmixer site may get demoted/removed from Google searches because of infringement complains made by the scammers.

.com website is still there with your signature.

The .com domain is still down? I was not aware of this. I have tried to visit the .com domain, but I could not access it.
Do you guys know if chip mixer has another mirror domain except for onion? Can I access it with a chrome browser? It would be helpful if anyone could confirm the official mirror domain.

[NeuroticFish]

.com website is still there with your signature.

My advice was made in a way even if ChipMixer stops its signature campaign, the correct "source" for the link should prevail.
And while I could argue that my signature has the onion link too, you do have a point and I will ask why we keep the (troubled) .com link.

[Chikito]

The .com domain is still down? I was not aware of this. I have tried to visit the .com domain, but I could not access it.

Yes, I was checking with isitdownrightnow.com, and there is still down for everyone.

Do you guys know if chip mixer has another mirror domain except for onion? Can I access it with a chrome browser? It would be helpful if anyone could confirm the official mirror domain.

No other one except TOR.
Easy way is you just need a space to download the TOR browser to access it

[NeuroticFish]

The .com domain is still down? I was not aware of this. I have tried to visit the .com domain, but I could not access it.
Do you guys know if chip mixer has another mirror domain except for onion? Can I access it with a chrome browser? It would be helpful if anyone could confirm the official mirror domain.

As I said, the most reliable information can be found in the ANN thread. You'll see there it's posted that the .com (clearnet) domain is down/disabled.
So no, you cannot access it with Chrome. But don't be scared of TOR browser, you don't need special setup for it, just download, install and run it. The link was posted in the previous post.

[dkbit98]

Do you guys know if chip mixer has another mirror domain except for onion? Can I access it with a chrome browser? It would be helpful if anyone could confirm the official mirror domain.

Only way you can access Chipmixer website, other than with Tor browser, is by using fork of Chrome browser called Brave browser, and you can do that with opening new private window with Tor (Alt+Shift+N).
I would still suggest using Tor browser as main option because it has much better privacy settings, but Brave is also available as alternative option.

[AnotherAlt]

~Snip~

~Snip~

Thanks for the guide, guys. I am scared of the Tor browser because I heard many bad things about Tor. People say that hackers can access your PC if you use the Tor browser with a full page. Tor browser is used to access the darknet, and I heard there is a lot of malware on the darknet.

[mocacinno]

--snip--
Thanks for the guide, guys. I am scared of the Tor browser because I heard many bad things about Tor. People say that hackers can access your PC if you use the Tor browser with a full page. Tor browser is used to access the darknet, and I heard there is a lot of malware on the darknet.

Those fears are unfounded...
Sure, if you download the tor bundle from some shady site instead of their official page, you can get your pc infected by malware (but that goes for *any* piece of software). And sure, a lot of shady stuff is offered via tor hidden services, but ONLY if you search for it.

If you download tor from your official repository (in case you use linux), or download it from the official page and then use it to visit specific hidden services you actually want to visit, not much can go wrong... Unless offcourse using the tor proxy is illegal in your country/job/isp/...

[AnotherAlt]

--snip--
Thanks for the guide, guys. I am scared of the Tor browser because I heard many bad things about Tor. People say that hackers can access your PC if you use the Tor browser with a full page. Tor browser is used to access the darknet, and I heard there is a lot of malware on the darknet.

Those fears are unfounded...
Sure, if you download the tor bundle from some shady site instead of their official page, you can get your pc infected by malware (but that goes for *any* piece of software). And sure, a lot of shady stuff is offered via tor hidden services, but ONLY if you search for it.

If you download tor from your official repository (in case you use linux), or download it from the official page and then use it to visit specific hidden services you actually want to visit, not much can go wrong... Unless offcourse using the tor proxy is illegal in your country/job/isp/...

I had downloaded the Tor browser before. But, I forgot why I have uninstalled it. I know that if I download something from an untrusted website, I can get affected by malware. I also heard that the Tor browser is too slow because it uses random IPs. Still, I guess I can use it to access some special websites like chip mixer for special needs. But, I am okay with the chrome browser for everyday use.

[NeuroticFish]

People say that hackers can access your PC if you use the Tor browser with a full page. Tor browser is used to access the darknet, and I heard there is a lot of malware on the darknet.

The dangers on darknet are in most cases exactly the same as on clearnet. If you download and run all the things, you'll get - sooner or later - malware.
So you have to be careful with that in both "worlds" the same.

Let me say a bit more: Tor browser is basically a Firefox. If you download the official one, the browser alone won't do harm.
If you visit only the ChipMixer onion website there's nothing you have to download and run from there, so your system will be fine.

[mocacinno]

--snip--

The dangers on darknet are in most cases exactly the same as on clearnet. If you download and run all the things, you'll get - sooner or later - malware.
So you have to be careful with that in both "worlds" the same.

Let me say a bit more: Tor browser is basically a Firefox. If you download the official one, the browser alone won't do harm.
If you visit only the ChipMixer onion website there's nothing you have to download and run from there, so your system will be fine.

I'm going to one-up this one
If you really want to, you can run the tor proxy in the background and configure your actual firefox (or chrome, or chromium, or ie, or...) to use the tor proxy as your browser's proxy... That way you can visitor tor using your actual browser.

That being said, working this way might decrease your privacy, but in this case you're not after this extra little bit of privacy but rather use tor to access chipmixer.

[NeuroticFish]

If you really want to, you can run the tor proxy in the background and configure your actual firefox (or chrome, or chromium, or ie, or...) to use the tor proxy as your browser's proxy... That way you can visitor tor using your actual browser.

That being said, working this way might decrease your privacy, but in this case you're not after this extra little bit of privacy but rather use tor to access chipmixer.

Yes, you can. But I think that @AnotherAlt is not knowledgeable enough for this (no offense!) and, even more, this may confuse him. So I'll simplify it:
it's an interesting example, which shows that Tor browser is not "a browser from hell", it's just a normal browser that can set up a little more things (which advanced users can pretty much do themselves for any browser!) so anybody can visit darknet/onion sites easily.

[dkbit98]

Thanks for the guide, guys. I am scared of the Tor browser because I heard many bad things about Tor. People say that hackers can access your PC if you use the Tor browser with a full page. Tor browser is used to access the darknet, and I heard there is a lot of malware on the darknet.

You should watch less tv mainstream media and not listen their tor-boogeyman stories.
Browsing internet with Tor browser can be slower than with Firefox or Chrome, but it's not true that evil hackers can magically access your computer if you use full page, or that it's full of malware.
Journalists and normal people who care about privacy use Tor browser every day, and this network is created by military, so your fears are irrational.
It's actually much safer and better to use Chipmixer with Tor browser than with normal browser on clearnet.