Author

Topic: [Warning] Phishing Mixing Website (Read 108 times)

legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
March 18, 2020, 03:16:54 PM
#2
Yup i can confirm this is indeed a fake review campaign on behalf of [banned mixer]

The link shared is his self-moderated topic where you have to "Register" is leading towards a phishing website. The said link was used before for a fake airdrop

I've reported the thread and tagged the user.

http://archive.fo/yDExX

Code:
http://www.martynparry.com.au/register

https://www.virustotal.com/gui/url/891aaa18e272ee37d1636f5a49b5b89587ebf89c2430c69353d1e70483b44ed5/detection



legendary
Activity: 2772
Merit: 1028
Duelbits.com
March 18, 2020, 03:07:10 PM
#1
What happened:
The newbie user has opened a new thread with a fake mixing website and he offers 0.005BTC per review. The phishing link is inserted in the text and the collected info will be used for data mining.

Scammers Profile Link: https://bitcointalksearch.org/user/stoon89-2782997


Reference Link
: https://bitcointalksearch.org/topic/--5233798

Proofs
:





I sent an email to Mixtum's official mail address but the mail has been returned to the sender. The mail address of Mixtum doesn't work and it is a bit suspicious why the scam attempt was first done with the original URL of Mixtum. Maybe the attacker has gained access to the site and later decided to change the inserted link to a phishing site for registering new users. I contacted the site owner and asked the same questions there.

Since the thread is inactive and there is no update after the last post, I tried to contact the official mail of [banned mixer]. The sent mail was returned to the sender and it looks like the service mail is not used for a long time. I checked the other mail addresses under the same mail service provider and everything is ok except [email protected]. Please confirm both clearnet and onion mixing service work normally. There is no alternative option to contact with developers for confirming such cases.



Will update later.

Jump to: