<FAKE>Clone Chipmixer Website

[borovichok]

Scunbags are impersonating a reputable bitcoin mixer @ChipMixer in order to defraud innocent mixers and portray Chipmixer as a scam mixer. It is a complete clone of the original chipmixer website, down to the design, name, and logo; the only difference between the two is the url. ::

Scammers Profile Link: https://www.chipmixer.online/

Reference Link: N/A
Amount Scammed: N/A
Payment Method: BTC
Proof of Payment: N/A



The clone site URL (Fake)


The legit chipmixer Url ( https://chipmixer.com) ^{posted the onion link}



Domain Information

Domain:chipmixer.online
Registrar:Tucows.com Co.
Registered On:2022-10-24
Expires On:2023-10-24
Updated On:2022-10-24

https://www.whois.com/whois/chipmixer.online

time to shoot it down? @Darkstar_

[examplens]

unfortunately, this is nothing new. ChipMixer is a very often cloned site and only the onion page is officially operational.
You can join the discussion in their ANN thread although I think that the site chipmixer.online is already known to them.

[NeuroticFish]

It was discussed back in April that .online is probably owned by the same scammer as .one.
Unfortunately everybody who wants to use ChipMixer should learn to check the links from the bitcointalk ANN and use the Tor (currently chipmixorfly) link.

Probably both .online and .one malicious clones should be added (blocked) in the hosts file, together with the .xyz:

Code:

0.0.0.0 chipmixer.xyz
0.0.0.0 chipmixer.online
0.0.0.0 chipmixer.one

[Lucius]

time to shoot it down? @Darkstar_

Why do you think a campaign manager should or could do something about one of probably hundreds of CM phishing websites? What you can do is report it to google safe browsing, although I doubt that it will help, or try to report abuse to the hosting service that the site in question uses.

In the meantime, look here under C -> https://bitcointalk.org/index.php?topic=5381839

[JollyGood]

There are so many clones out there it would be hard to track but at last the OP highlighted it. Even if saves just one person from being scammed then it is something that deserves credit.

unfortunately, this is nothing new. ChipMixer is a very often cloned site and only the onion page is officially operational.
You can join the discussion in their ANN thread although I think that the site chipmixer.online is already known to them.

[dkbit98]

time to shoot it down? @Darkstar_

He can't shut down other websites like this... unless he has some secret ddos task force.  
Reporting this to google or server providers doesn't guarantee anything will be shut down, and we know other fake CM websites exists for very long time.

Probably both .online and .one malicious clones should be added (blocked) in the hosts file, together with the .xyz:

This should work, but I would like to see someone creating uBlock filter would add and maintain all fake CM websites.

[DarkStar_]

time to shoot it down? @Darkstar_

He can't shut down other websites like this... unless he has some secret ddos task force.  
Reporting this to google or server providers doesn't guarantee anything will be shut down, and we know other fake CM websites exists for very long time.

I wish I had this option 

It's a shame that there's so many clones of scam mixers out there. Does anyone know how successful reporting to service providers usually is? I think I've heard of maybe one or two success stories in the past but it seems like most of these scammers pick service providers/registrars that don't really care.

[NotATether]

I wish I had this option  

It's a shame that there's so many clones of scam mixers out there. Does anyone know how successful reporting to service providers usually is? I think I've heard of maybe one or two success stories in the past but it seems like most of these scammers pick service providers/registrars that don't really care.

I guess maybe report the domains to ICANN and that might trigger a collateral investigation into whether the WHOIS contact information for the domains is legit and then they might order the registrar to shut it down.

[BitcoinGirl.Club]

I wish I had this option  

It's a shame that there's so many clones of scam mixers out there. Does anyone know how successful reporting to service providers usually is? I think I've heard of maybe one or two success stories in the past but it seems like most of these scammers pick service providers/registrars that don't really care.

I guess maybe report the domains to ICANN and that might trigger a collateral investigation into whether the WHOIS contact information for the domains is legit and then they might order the registrar to shut it down.

I have cases to report a domain to their service provider. If the domain is bought from namecheap or godaddy then anyone can report the abuse of the domain to them and they will take it down.
Some instructions will be found https://www.namecheap.com/support/knowledgebase/article.aspx/9196/5/how-and-where-can-i-file-abuse-complaints/

Looking up at domain details this is what I found: tucows.com and my guess is the tucows are their domain register service.

[stompix]

I have cases to report a domain to their service provider. If the domain is bought from namecheap or godaddy then anyone can report the abuse of the domain to them and they will take it down. .

If you're extremely lucky! One year since I posted in here:
[Warning] Fake Chipmixer website

is even worse, Namecheap was at one point taking off Ponzi schemes in a matter of days, disabling mining gear shops (probably for internal investigation) and then erasing the domain altogether, especially when I (and probably others) mentioned they were using a copyrighted name but after a period, nothing.

And even if they suspend the account, the domain just pops-up back again once it expires, brand new

ChipMixer.one
Registrar   Hosting Concepts B.V. d/b/a Registrar.eu
Registrar Status   clientTransferProhibited
Dates   33 days old
Created on 2022-10-02
Expires on 2023-10-02
Updated on 2022-10-07

[BitcoinGirl.Club]

And even if they suspend the account, the domain just pops-up back again once it expires, brand new

ChipMixer.one
Registrar   Hosting Concepts B.V. d/b/a Registrar.eu
Registrar Status   clientTransferProhibited
Dates   33 days old
Created on 2022-10-02
Expires on 2023-10-02
Updated on 2022-10-07

I think it's the subscription period they can only control. Once the period is over then they obviously release it for others. It will be interesting to see if the same account owner can buy that domain later. Sure there will be some system in place to avoid the old owner from buying it again.

[JollyGood]

When users here have posted about scams I have in the past advised them to contact the domain registrar and I still think it is something can do while they also continue to warn others about scams and potential scams but looking at what you said I can understand if there is reluctance.

Even after more than 18 months since that chipmixer.one website was reported, it is still there available for anybody to visit if they find it. It must be highly frustrating that even when someone take steps to inform domain registrars about scams they literally take little or no action.

If Namecheap and others simply allows renewals then maybe there is more to it than simply being about them making money. They all should have a report function where domains that being used for scam purposes are looked in to by their fraud department within hours of being reported, surely they have amassed enough money to be able facilitate such a small service.

If you're extremely lucky! One year since I posted in here:
[Warning] Fake Chipmixer website

is even worse, Namecheap was at one point taking off Ponzi schemes in a matter of days, disabling mining gear shops (probably for internal investigation) and then erasing the domain altogether, especially when I (and probably others) mentioned they were using a copyrighted name but after a period, nothing.

And even if they suspend the account, the domain just pops-up back again once it expires, brand new

ChipMixer.one
Registrar   Hosting Concepts B.V. d/b/a Registrar.eu
Registrar Status   clientTransferProhibited
Dates   33 days old
Created on 2022-10-02
Expires on 2023-10-02
Updated on 2022-10-07

[stompix]

When users here have posted about scams I have in the past advised them to contact the domain registrar and I still think it is something can do while they also continue to warn others about scams and potential scams but looking at what you said I can understand if there is reluctance.
Even after more than 18 months since that chipmixer.one website was reported, it is still there available for anybody to visit if they find it. It must be highly frustrating that even when someone take steps to inform domain registrars about scams they literally take little or no action.

Just to make sure that I don't get misunderstood because of the previous post.

Yes, it's damn frustrating to not see action taken, and it's frustrating to not even get a reply on your ticket/report, but at least for me this won't be a stop in sending a few emails, after all, it's a 3-minute thing that could prevent somebody losing years of his earned money to a piece of something scammer. And a ton of frustration comes from the lack of feedback, at least if they would deny it, if they would say like Twitter did that they haven't found any problem with an account promising double the money, but the silence is worse than this.

It will be interesting to see if the same account owner can buy that domain later. Sure there will be some system in place to avoid the old owner from buying it again.

Since the .one is now redirecting to the .xyz I don't know if it's the same guy, but for certain it landed in the hand of the worst one to date, the owner of the xyz that now tops the search results because of his fake complaints to Google.

[BitcoinGirl.Club]

It will be interesting to see if the same account owner can buy that domain later. Sure there will be some system in place to avoid the old owner from buying it again.

Since the .one is now redirecting to the .xyz I don't know if it's the same guy, but for certain it landed in the hand of the worst one to date, the owner of the xyz that now tops the search results because of his fake complaints to Google.

Time to report .xyz. The resister service is nicenic.net.
Here is the the explains for them https://nicenic.net/customer/reportabuse.php

However, it's really hard to check every time who is coming with a new idea and report them. Hopefully Chipmixer team have some people to protect their brand.

[JollyGood]

You were perfectly clear in your post.

It can be as you said frustrating when tickets are not replied to when they are opened. If someone can take the time out (even a few minutes) to make the report then at the very least a reply should be given. Many people have fallen victim to all sorts of scams therefore if domain registrars take fraud seriously they would take action when domains registered via their websites are being used for scams or for nefarious purposes.

No matter how large any business will be, they will never admit to allowing their websites to be used for scams therefore yes the silence is deafening and frustrating for those hoping to close down scam websites.

Just to make sure that I don't get misunderstood because of the previous post. Twitter on the other hand with the new owner have shown what will happen when their free speech mantra collides with a barrage of scam accusations.

Yes, it's damn frustrating to not see action taken, and it's frustrating to not even get a reply on your ticket/report, but at least for me this won't be a stop in sending a few emails, after all, it's a 3-minute thing that could prevent somebody losing years of his earned money to a piece of something scammer. And a ton of frustration comes from the lack of feedback, at least if they would deny it, if they would say like Twitter did that they haven't found any problem with an account promising double the money, but the silence is worse than this.

[dkbit98]

Does anyone know how successful reporting to service providers usually is? I think I've heard of maybe one or two success stories in the past but it seems like most of these scammers pick service providers/registrars that don't really care.

It's more likely they will ban phishing and scam domains if they receive larger number of reports from people, or if some high profile institution makes a report.
This also depends on what server and domain provider they use, some have more strict and others more relaxed policy, but it's worth trying to report them.
Maybe bitcointalk community can somehow help to fight this scammers.

Fake CM website with .xyz domain is using nicenic.net provider, .online is using tucows.com, and .co is using namecheap.com.