Topic: [Warning] Fake Chipmixer website (Read 489 times)
Sometimes the one character of a domain name makes us a victim of these sites So try to include in your bookmarks the websites that you visit on a daily basis. And if you search for a site, look at its domain There are two things to keep in mind, one is not to rush and the other is greed Some people don't see the domain properly and some people greedily click on the e-mail links and later they fall prey.
Up
All of the fake/clone chipmixer websites posted in the OP are all active. And all of them are hosted through namecheap which is notorious for not doing any kind of action with regards to scam and fake websites. You'll just be wasting your time trying to spam report these websites and you won't see any action from the host. I would recommend you to just spread awareness to the forum such fake websites exists instead and to the ones who you know are using mixers as this could really mess people up since those websites are awfully similar to anyone new.
This is actually pretty dangerous. The only way for someone to verify that he/she mixes on the legit ChipMixer is by having an account on bitcointalk and observe the difference. I'm pretty sure that lots of money have been lost since that man keeps creating more ChipMixers. Generally, mixing coins on the internet without having legit reviews is difficult. There aren't many ways to ensure that the reviews are real.
Although there are still three left. keep reporting.
Even if I don't believe that the solution for this case is reporting the website, there aren't many things you can do to help so... reported by BlackHatCoiner too.
chipmixer.shop is offline now. 
Actually chipmixer.shop was being promoted through Google ads. hope, it will save some people's money... Thank you stompix , Lucius . and thanks to everyone who reported these phishing websites.
Although there are still three left. keep reporting.
Actually chipmixer.shop was being promoted through Google ads. hope, it will save some people's money... Thank you stompix , Lucius . and thanks to everyone who reported these phishing websites.
Although there are still three left. keep reporting.
Google has always been a let down exactly when it mattered but speaking of hosting namecheap abuse department has gone deaf completely...
I had the impression that Google was doing this pretty well considering I had personally seen the results in a browser that showed a deceptive site for at least 90% of what I personally reported (like many others of course). Either they have introduced some new criteria by which they work, or they have trouble understanding what it is all about - I put a link to the original site in each report, so I don't understand how intelligent someone needs to be to see what is original and what is false.
And when it comes to hosting, I have the same experiences as you - I never even got feedback from them about anything - so I think their message is pretty clear - profit comes first, everything else is less important.
I will try again, but I will also contact the hosting service and send a ticket to their abuse support.
Google has always been a let down exactly when it mattered but speaking of hosting namecheap abuse department has gone deaf completely, I don't know what their plan is, trying to build a reputation of safe haven and anonymity or what but lately they went from being slow to not even responding to emails, and I'm not using the same email to say they just got tired of my reports and blacklisted me.
I have reported a few mixing clones, fake mining gear shops, ponzi schemes, and from all of my reports in the last 3 months or so the most I got from them was a reply they are investigating...and investigating and silence while topics about people getting scammed pile up every day.
Anyhow, did a fresh new round of reports for those 4, different IP, different device, who knows, maybe one more would finally trigger the alarm bells.
I checked all the fake links from OP and none were blocked and marked as a deceptive site, really weird because I personally reported each of them to Google a little less than 2 months ago. What else to say but that someone is not doing their job, or that reports stay unhandled because they don’t understand what a mixer is and what the difference is between a legitimate and a fake version.
I will try again, but I will also contact the hosting service and send a ticket to their abuse support.
I will try again, but I will also contact the hosting service and send a ticket to their abuse support.
They're still doing this kind of thing even though their other site was already caught and reported, hopefully there is less or no victim that is going to fall for it because I don't know what to say about this people falling for this because mixing services is a niche part of crypto and I don't think that a newbie is going to fall for this.
We have already seen many reports that Newbies have been scammed while using the mixing service. Since we have heard of such scams before, it is not possible to say for sure that no one will be a victim of this website. Scammers often use Google's ads in these fake websites to get first results, so that inexperienced users can easily fall into their trap.
What happened: Another chipmixer phishing website
Website Link:
(Archive link)
Reported: https://www.google.com/safebrowsing/static/submit_malware.html?hl=en
They're still doing this kind of thing even though their other site was already caught and reported, hopefully there is less or no victim that is going to fall for it because I don't know what to say about this people falling for this because mixing services is a niche part of crypto and I don't think that a newbie is going to fall for this. Website Link:
Code:
https://chipmixer.xyz
(Archive link)
Quote
Registrar Status clientTransferProhibited
Dates 63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08
Dates 63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08
Reported: https://www.google.com/safebrowsing/static/submit_malware.html?hl=en
I don't know what the ideal solution is but one thing could be easily done from the main service's side - Buy all the secondary domains which are the most identical to the primary one. That way, scammers will not be able to access that "chipmixer" part at least. They will use something like "ch1pmixer.com" or "chimiKer.com" that is faking the primary domain but it is much easier to spot compared to "chipmixer.xyz". Also, the secondary domains are fairly cheap.
Got two more chipmixer phishing websites.
Website Link: https://chipmixer.shop
Archive Link: https://archive.ph/yhDyI
Domain information:
Quote
Domain Name: CHIPMIXER.SHOP
Registry Domain ID: DO5597313-GMO
Registrar WHOIS Server: whois.porkbun.com
Registrar URL: http://porkbun.com
Updated Date: 2021-03-29T19:53:19.0Z
Creation Date: 2021-03-29T19:52:11.0Z
Registry Expiry Date: 2022-03-29T23:59:59.0Z
Registrar: Porkbun LLC
Registrar IANA ID: 1861
Registry Domain ID: DO5597313-GMO
Registrar WHOIS Server: whois.porkbun.com
Registrar URL: http://porkbun.com
Updated Date: 2021-03-29T19:53:19.0Z
Creation Date: 2021-03-29T19:52:11.0Z
Registry Expiry Date: 2022-03-29T23:59:59.0Z
Registrar: Porkbun LLC
Registrar IANA ID: 1861
Website Link:
Code:
https://chipmixer.me/
Archive Link: https://archive.ph/HaQQMDomain information:
Quote
DDomain Name: CHIPMIXER.ME
Registry Domain ID: D425500000333922063-AGRS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-07-05T21:15:43Z
Creation Date: 2020-05-06T08:28:13Z
Registry Expiry Date: 2021-05-06T08:28:13Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registry Domain ID: D425500000333922063-AGRS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2020-07-05T21:15:43Z
Creation Date: 2020-05-06T08:28:13Z
Registry Expiry Date: 2021-05-06T08:28:13Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Please report all these phishing websites.
https://chipmixer.me/ [ Active ]
https://chipmixer.xyz [ Active ]
https://chipmixer.cm/ [ Active ]
https://chipmixer.shop [ Offline ]
If you do not know how to report to any phishing website, then read this post : https://bitcointalksearch.org/topic/how-to-report-the-scammers-to-registrar-5281378 - By:
Leviathan.007
Report submitted from my end.
Thanks for your reporting. I hope that soon Google will take action against this website.The fake website you reported is still online and despite reporting it to Google it's still considered safe for browsing!!:
Maybe it will take some time. But eventually, it will look something like [ this ]. 
The fake website you reported is still online and despite reporting it to Google it's still considered safe for browsing!!:
I noticed that the receiving address does not change even if you start a new session and that address already has been used before. I believe a vigilant person would notice this too.
Current status
No unsafe content found
No unsafe content found
I noticed that the receiving address does not change even if you start a new session and that address already has been used before. I believe a vigilant person would notice this too.
Quote
Registrar Status clientTransferProhibited
Dates 63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08
Dates 63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08
Reported: https://www.google.com/safebrowsing/static/submit_malware.html?hl=en
If i am not wrong then its pretty much easy to say that all these phishing and clone sites are running by the same group of scammers who are taking all chipmixer related domains.
If you just check on domain providers available list you will see why i am talking this. They have already taken most domains and using one by one to complete their scam game. Whenever they get caught with one they shift their common script to another domain and continue their activities.
In a situation like this make the habit of bookmarking real website url is so effective which can save lots of new crypto users from losing their crypto assets.
What happened: Another chipmixer phishing website
Website Link:
(Archive link)
Reported: https://www.google.com/safebrowsing/static/submit_malware.html?hl=en
Website Link:
Code:
https://chipmixer.xyz
(Archive link)
Quote
Registrar Status clientTransferProhibited
Dates 63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08
Dates 63 days old
Created on 2020-12-27
Expires on 2021-12-28
Updated on 2021-01-08
Reported: https://www.google.com/safebrowsing/static/submit_malware.html?hl=en
~
How are you going to catch a professional hacker who knows how to hide his tracks? If he uses Tor and a mixer for all the stolen coins, then only the top secret services of the world could be of help, as was the case here.Those who could help prevent things like this are certainly the ones who provide hosting and domain registration services - but have they ever shown that they care about anything but profit?
I do not see that page, not even on the second page of search - even when I turn off ad blocker all results are legitimate and there are no ads from Google AdWords. This suggests that the SEO campaign is targeted at specific countries where scammers assume they will have more success.
How are you going to catch a professional hacker who knows how to hide his tracks? If he uses Tor and a mixer for all the stolen coins, then only the top secret services of the world could be of help, as was the case here.
Those who could help prevent things like this are certainly the ones who provide hosting and domain registration services - but have they ever shown that they care about anything but profit?
The best approach is to catch the people behind and not the website because crippling the source is the best way to win this war.
How are you going to catch a professional hacker who knows how to hide his tracks? If he uses Tor and a mixer for all the stolen coins, then only the top secret services of the world could be of help, as was the case here.
Those who could help prevent things like this are certainly the ones who provide hosting and domain registration services - but have they ever shown that they care about anything but profit?
For me, I don't really need to pay attention to the website that I am visiting as long as I know their full domain name, I can guarantee that I will not be on a spoofed website. Tried to catch and report this kind of websites a long time ago but they are a Hydra, destroy one and another three will pop up. The best approach is to catch the people behind and not the website because crippling the source is the best way to win this war.
Too bad that you stopped fighting the good fight but I'm telling you every head the we kill is a victory for us, it doesn't matter how many heads it takes as long as we can destroy them little by little, this is a battle of attrition. I do agree with you catching the people behind all of this but it is a difficult situation and not every user can do that, you need to have some sort of coding and networking skills to track the ones behind this. I respect your decision but it doesn't sit well with me that you have given up. I would like to add that we also should educate the people about this kinds of websites so as to destroy the demand thus with low demand and a high supply, the supply will stop eventually. ~
Yes. Scammers have used search engine optimization to bring the website to the first page. It is also a fact that many groups of scammers are active and continuously creating such fake websites. And we can say that almost every popular website is being targeted. Therefore, we need to report them so that Google can block them and add them to the blacklist.
Always bookmark your favorite websites so you don't have to search on Google. And always pay attention to the domain name of the website as you said.
Please report here: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en
Jump to: