Altcoins Talks - Cryptocurrency Forum

Further Discussions => Reputation, Scams & Phishing => Topic started by: Freemind on January 17, 2025, 04:37:15 PM

Title: A website that links to various mixers but uses phishing links
Post by: Freemind on January 17, 2025, 04:37:15 PM
I found a website (written in Spanish) that uses the names of some well-known mixers in the community, but that "casually" links the names of those mixers to phishing sites.

The website is this: https://ecuador-btc-mixers.com/ and the last update is from the 12th of this month.

Some links are:

UniJoin: which links with http://unijoin.org/. Scam.

Coinomize: which links with http://coinmixer.app/. Scam.

Mixero: which links with http://mixeru.io/. Scam.

I haven't read much else, but it's possible that the admin of that website updates the links with new phishing links.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Mia Chloe on January 17, 2025, 09:50:46 PM
I found a website (written in Spanish) that uses the names of some well-known mixers in the community, but that "casually" links the names of those mixers to phishing sites.
It's actually quite common to come across links and sites like this. Basically speaking almost all big websites with reputation usually have fakes and that is one of the reasons why most of them try their best to make sure that they make their original sites stand out. Basically they make their domains more formal because most of the fake domains are usually have informal and odd extensions.

Mixero and Even coinomize have made it very public about differentiateing their real sites from the fake they have it on their Ann thread too.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on January 18, 2025, 04:30:39 PM
Knowing how slow Google is when it comes to reporting a website that contains malware or phishing, as is the case, the only thing that can help other users is for the maximum number of people to report such sites. If this is not done, the process becomes much longer than normal, and during that time more people may fall into the trap.
Title: Re: A website that links to various mixers but uses phishing links
Post by: dkbit98 on January 24, 2025, 05:01:25 PM
Thanks for reporting this OP.
Interesting how they are using real names and fees for mixers on their website, but domain names are using different domains.
I would recommend people to use two proven services made by our community members to find the list of legit mixers and other privacy related services:

1. Bitlist
https://bitlist.co/

2. BitMix List
https://bitmixlist.org/
Title: Re: A website that links to various mixers but uses phishing links
Post by: philipma1957 on January 25, 2025, 07:08:38 PM
Yeah I am much more into mining with some buying and hodling mixed in.  I have found so many bad mining sites with a one letter or a period or a comma different than bitmain as they look for you to deposit btc and never send any gear. This is something you need to watch for time and time again.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on January 26, 2025, 01:36:52 PM
The website I referred to in the OP was updated on the 22nd of this month (4 days ago) with new fraudulent domains with the intention of scamming users.

https://mixtum.pro - Scam.

Code: [Select]
Expires On 2025-10-26
Registered On 2024-10-26
Updated On 2024-10-31

http://smartmixer.ai - I didn't know this mixer existed, so I don't know if it may be authentic or not. If anyone has more information I will edit this line of the post.

Code: [Select]
Expires On 2026-07-15
Registered On 2024-07-15
Updated On 2024-07-20

https://bitcloak.me - I didn't know this mixer existed, so I don't know if it may be authentic or not. If anyone has more information I will edit this line of the post.

Code: [Select]
Updated Date: 2024-03-23T09:39:34Z
Creation Date: 2024-03-18T09:39:00Z

http://chipmixer.online - Scam.

Code: [Select]
Expires On 2025-03-18
Registered On 2024-03-18
Updated On 2025-01-13

http://mixers.money  - Scam.

Code: [Select]
Expires On 2025-11-25
Registered On 2024-11-25
Updated On 2024-11-30

https://coinjoin.cash - I didn't know this mixer existed, so I don't know if it may be authentic or not. If anyone has more information I will edit this line of the post.

Code: [Select]
Expires On 2025-08-14
Registered On 2021-08-14
Updated On 2024-12-05

https://yomix.me - Scam.

Code: [Select]
Updated Date: 2024-12-05T06:50:02Z
Creation Date: 2023-10-21T06:49:16Z



~snip~
Thanks for reporting this OP.

As you can see, unfortunately there are new domains.



Yeah I am much more into mining with some buying and hodling mixed in.  I have found so many bad mining sites with a one letter or a period or a comma different than bitmain as they look for you to deposit btc and never send any gear. This is something you need to watch for time and time again.

That's precisely why I made this separate thread. It seems that the website I reference in the OP is updated every few days with new phishing links.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on January 29, 2025, 10:26:06 AM
Right now I just found another scam site:

unijoin.me - Scam.

Code: [Select]
Domain: unijoin.me
Registered On: 2024-11-26
Expires On: 2025-11-26

Always be very careful and check several times where you are going to send your funds.
Title: Re: A website that links to various mixers but uses phishing links
Post by: bitterguy28 on January 29, 2025, 11:51:00 AM
I found a website (written in Spanish) that uses the names of some well-known mixers in the community, but that "casually" links the names of those mixers to phishing sites.
if you are not careful enough you are definitely going to fall victim to this kinds of scams being irresponsible and excessively confident will lead you to this kind of path because when you think you are immune to scams or any malware then that is actually when you are the most vulnerable so always be careful and always exhibit precautionary measures
Title: Re: A website that links to various mixers but uses phishing links
Post by: robelneo on January 29, 2025, 10:54:39 PM
Mixers are the most targeted of scammers to clone and phish, so if you often use mixers, better bookmark your favorite phishing links and get updated if new phishing links.
I remember Sinbad before it was taken down.
It has over 15 phishing links. Scammers and hackers are active during the bull run; they know that this is the time when traders are very active in using mixers.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on January 30, 2025, 01:47:27 PM
~snip~
...better bookmark your favorite phishing links and get updated if new phishing links.

Although doing what you say would be the most logical and the first thing that would occur to most users, it does not prevent the problem 100% either due to several vulnerabilities.

There are many malicious extensions and other things that can modify the URLs that we have stored

Understanding Bookmark Manipulation with PhishMark (https://sobhan.hashnode.dev/understanding-bookmark-manipulation-with-bookmarkphisher).
Title: Re: A website that links to various mixers but uses phishing links
Post by: hugeblack on January 30, 2025, 03:58:53 PM
This may indicate that the success of sites that list mixers and similar services is an incentive for these scammers to create such services. This scammer may be present here or active on BTT/ALTT.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on February 02, 2025, 09:11:53 AM
This may indicate that the success of sites that list mixers and similar services is an incentive for these scammers to create such services. This scammer may be present here or active on BTT/ALTT.

There may be scammers on the forums, yes, and it is surely very lucrative for them. One of the last wallets I saw had over 2 BTC accumulated, and that amount was just from one of the phishing sites. The more fraudulent sites like the ones I expose in this thread exist, the more money they can scam users.

Unfortunately, many users do not learn good practices on how to use a mixer, and by the time they do, it is too late.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on February 08, 2025, 09:12:58 AM
The administrator of that website updated the list again just two days ago.

The new site added is:

mixtum-io.com - Scam.

Code: [Select]
Domain: mixtum-io.com
Registered On: 2025-01-31
Expires On: 2026-01-31

Please always be very careful and check several times where you are going to send your funds.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on February 14, 2025, 09:31:49 PM
Once again the web administrator has updated his list of scams:

The new site added is:

https://bitcloak.io/ - Scam.

Code: [Select]
Domain: bitcloak.io
Registered On: 2025-01-31
Expires On: 2026-01-30
Updated On: 2025-02-05

Be very careful.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on February 19, 2025, 08:54:39 PM
New update (February 19) from the website administrator we talked about in this thread:

The new site added is:

chipmixer.cx - Scam.

Code: [Select]
Domain: chipmixer.cx
Registered 2023-11-16
Expires On: 2025-11-16
Updated On: 2024-11-05

I know I always say the same thing, but always verify in every way possible that you are accessing the correct URL. And remember that it is not always enough to have the URL saved.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on March 02, 2025, 08:32:13 AM
Another update (February 26) from this scammer's website.

The new site added is:

crypto-mixer-io.net - Scam.

Code: [Select]
Expires On 2025-11-14
Registered On 2023-11-14
Updated On 2025-01-27

I keep this thread updated whenever I can, with the intention of preventing some users from being scammed.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on March 09, 2025, 09:52:08 AM
Unfortunately, we have another update available (March 9) from this scammer's website.

The new site added is:

yomix.io - Scam.

Code: [Select]
Expires On 2026-08-23
Registered On 2022-08-23
Updated On 2024-09-18

Please share this thread or the information it contains whenever you can, we could help many users avoid scams.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on March 10, 2025, 08:26:58 PM
Another update appeared on that website yesterday (March 9).

The new site added is:

bitcloak43blmhmn.online - Scam.

Code: [Select]
Expires On 2025-11-16
Registered On 2023-11-16
Updated On 2024-11-10

Scammers will try to trick us in many ways, some of them are even very creative. You should always check things before using the services.
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on March 16, 2025, 08:57:06 AM
The latest update this week is as follows.

The new site added is:

cryptomixer-io-bitcoin-mixer.com/ - Scam.

Code: [Select]
Expires On 2025-11-14
Registered On 2023-11-14
Updated On 2024-11-03

I wonder how many times this website has been reported and also why nothing happens.
Title: Re: A website that links to various mixers but uses phishing links
Post by: DYING_S0UL on March 18, 2025, 08:02:35 AM
These site/domains below were marked phishing by the real https://exch.cx/

Source: eXch Anti-Phishing Campaign (https://bitcointalk.org/index.php?topic=5535260.0)

Phishing Domain

monero[.]forex - fraudant site redirecting phishing links
darknetbible[.]info - fraudant site redirecting phishing links
exch[.]cash - fraudant phishing site
exch[.]cc - fraudant phishing site
exch[.]cd - fraudant phishing site
exch[.]cy - fraudant phishing site
Title: Re: A website that links to various mixers but uses phishing links
Post by: Freemind on March 18, 2025, 08:44:32 PM
These site/domains below were marked phishing by the real https://exch.cx/

Source: eXch Anti-Phishing Campaign (https://bitcointalk.org/index.php?topic=5535260.0)

Phishing Domain

monero[.]forex - fraudant site redirecting phishing links
darknetbible[.]info - fraudant site redirecting phishing links
exch[.]cash - fraudant phishing site
exch[.]cc - fraudant phishing site
exch[.]cd - fraudant phishing site
exch[.]cy - fraudant phishing site

That's right. I reported some of those domains in January in this thread: Phishing sites impersonating eXch (https://www.altcoinstalks.com/index.php?topic=327417.0).



After several days of trying to access it from different devices and browsers (including Tor), it appears the website is no longer accessible. I'd like to think the administrator is trying to eliminate all traces of their scams and won't add any more malicious links.

(https://i.ibb.co/0pw3LZrv/dow.png) (https://imgbb.com/)

More info: https://www.isitdownrightnow.com/ecuador-btc-mixers.com.html.