[Exit Scam] RoyalMix.io

[Z-tight]

I can confirm that RoyalMix clearnet site is up now and working, no error at all when i try to access it. I think the team should consider implementing what a lot of us have suggested, so we would know when they are going on a routine maintenance and when the site will possibly be online again.

[NotATether]

I have discovered a critical error in the letter of guarantee format.

The current format, the way it downloads for you right now, does not verify with the official RoyalMix PGP key - gpg says bad signature. Here is an example:

Code: [Select]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Service Address: bc1qa0lyfn722x0x8d94d5navw4w34gmn9c67pzyxk

Mixing mode: Complete anonymity.

Cleansed coins will be sent to the forwarding address:

1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa

Maximum service fee is: 7.5%.

Maximum mixing time is 12 hours + delay time set by the user.

Time: 2024-08-04 05:18:36

Confirmation required -

Less than 12 bts - 1 transaction

Less than 50 bts - 2 transactions

Less than 100 bts - 3 transactions

Less than 250 bts - 4 transactions

ONLY 1 TRANSACTION ALLOWED!

PGP fingerprint: ECFEBB0B364BC347A59A6FF6CA22E2750AFAA10E.
-----BEGIN PGP SIGNATURE-----
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=lI11
-----END PGP SIGNATURE-----
                       

Code: [Select]

gpg: Signature made Sun 04 Aug 2024 07:03:17 AM CEST
gpg:                using RSA key ECFEBB0B364BC347A59A6FF6CA22E2750AFAA10E
gpg: BAD signature from "Royal <[email protected]>" [unknown]

The specific error I got from GPG on deeper analysis is "hash mismatch". You can see it on pgptool.org for example.

The hash mismatch error means that the SHA512 digest of the cleartext message does not match what is encoded, and expected, inside the pgp signature.

That is because RoyalMix is putting too many blank lines inside the message text.

I suspect this is because of the fact that the letter of guarantee is transmitted in the HTML file when you go to your mixing session, so the blank lines are added there.

The correct letter of guarantee should be this:

Code: [Select]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Service Address: bc1qa0lyfn722x0x8d94d5navw4w34gmn9c67pzyxk
Mixing mode: Complete anonymity.
Cleansed coins will be sent to the forwarding address:
1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa
Maximum service fee is: 7.5%.
Maximum mixing time is 12 hours + delay time set by the user.
Time: 2024-08-04 05:18:36
Confirmation required -
Less than 12 bts - 1 transaction
Less than 50 bts - 2 transactions
Less than 100 bts - 3 transactions
Less than 250 bts - 4 transactions
ONLY 1 TRANSACTION ALLOWED!
PGP fingerprint: ECFEBB0B364BC347A59A6FF6CA22E2750AFAA10E.
-----BEGIN PGP SIGNATURE-----
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=lI11
-----END PGP SIGNATURE-----
                       
This message verifies successfully:

Code: [Select]

gpg: Signature made Sun 04 Aug 2024 07:18:36 AM CEST
gpg:                using RSA key ECFEBB0B364BC347A59A6FF6CA22E2750AFAA10E
gpg: Good signature from "Royal <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: ECFE BB0B 364B C347 A59A  6FF6 CA22 E275 0AFA A10E

I advise the RoyalMix team to fix this as soon as possible.

[ZAINmalik75]

Thanks for sharing this👍 because with it I won't be able to know that royal mixer is giving away $45, although I read about it somewhere a few day ago but did not put in interest until I read this comments tonight and I am going to give my luck a try.

Wishing everyone good luck and thank to the royal mixer team for bringing this one up here to spice of the space with some freebies.

I also almost forget about it thanks for sharing it here. I did not participate yet but now I will be taking part as well. The chances are very rare and for me, I rarely win such raffles. I never won a raffle before but I won some money in some contests in the local community. I also wish good luck to myself only    so that I could win:

Indeed this is so true buddy as we know that these fraudsters keep changing their ways to scam users in the market as when they come to know about the implementation of new technologies, they start to make another way for their easiness so that they can do more scams with people and we all know that sometimes real things looks too legit in the crypto space so here one has to think before making any of his/her action on any task.

I agree with all of your statements scammers are always finding new ways to scam newbies in crypto but not many newbies care about privacy only the rich ones care about privacy. They need proper guidance and if the team will also educate users on how they can save themselves from scammers then it will be a great feature. We can add all the features we want but a person is exposed to a scam if he takes scams light in crypto.

[JunaidAzizi]

Thanks for sharing this👍 because with it I won't be able to know that royal mixer is giving away $45, although I read about it somewhere a few day ago but did not put in interest until I read this comments tonight and I am going to give my luck a try.

Wishing everyone good luck and thank to the royal mixer team for bringing this one up here to spice of the space with some freebies.

I also almost forget about it thanks for sharing it here. I did not participate yet but now I will be taking part as well. The chances are very rare and for me, I rarely win such raffles. I never won a raffle before but I won some money in some contests in the local community. I also wish good luck to myself only    so that I could win:

Well, this is the beauty of this thread: we know these things that we almost forget, or we hear them for the first time. If I can say the truth, then honestly, I myself didn't know that Royal Mix took such a good step to make their project more profitable and attractive. I hope I can win, but as I am too hard on destiny, winning these 45 dollars will be a tough task for me.

I agree with all of your statements scammers are always finding new ways to scam newbies in crypto but not many newbies care about privacy only the rich ones care about privacy. They need proper guidance and if the team will also educate users on how they can save themselves from scammers then it will be a great feature. We can add all the features we want but a person is exposed to a scam if he takes scams light in crypto.

Bro, the world is going to be more advanced, and that's why scammers and hackers are also making themselves smarter in order to handle these things. They not only hunt newbies but also those who are more experienced and have a large capital. For example, exchanges are more commonly hacked or scammed from time to time.

[SamReomo]

Well, this is the beauty of this thread: we know these things that we almost forget, or we hear them for the first time.

Yes, that's true, the thread always helps to remind us about the things that we have forgot. Same as you, I was also not sure about any such contest of giveaway but after reading the posts I got information about it. I hope someone might win that amount, btw can anyone share the giveaway's link to me so I might also try my luck.

[Z-tight]

btw can anyone share the giveaway's link to me so I might also try my luck.

I thought you read the post on this thread reminding users about the free raffle? Notwithstanding, here^[1] is the link to RoyalMix round 1 free raffle, hurry and join, because there are only a few slots left, goodluck.

[1] https://www.altcoinstalks.com/index.php?topic=323156.msg1596971#msg1596971

[SamReomo]

Notwithstanding, here^[1] is the link to RoyalMix round 1 free raffle, hurry and join, because there are only a few slots left, goodluck.

[1] https://www.altcoinstalks.com/index.php?topic=323156.msg1596971#msg1596971

Thanks for sharing the link with me. I picked my numbers and successfully participated in that the event sponsored by RoyalMix. Thanks once again! +1 for you.

[Cantsay]

Less than 10 slots available

6 more slots to go - I’m bringing this here so that those who haven’t applied yet can take their slots before they get occupied.

[Z-tight]

6 more slots to go - I’m bringing this here so that those who haven’t applied yet can take their slots before they get occupied.

The raffle is full now, so we have to now wait for the draw to see who wins, goodluck to everyone. This is just round one and i am sure there would be more raffles after this one, so if you don't win now, there are other chances to try your luck. Thank you to RoyalMix.

[Jating]

A small update... Since cases of phishing attempts by copying the RoyalMix website have become more frequent, the Royal team decided to purchase consonant, similar domain names (and redirected to the original website). ROYALMIX.IO

p.s. List of purchased domains (the list is larger than I listed.. about 50 domains). Below are some of the redirect domains.

Code: [Select]

royallmix.com
royallmix.io
royallmix.online
royallmix.website
royallmix.xyz
royalmiix.com
royalmiix.io
royalmiix.xyz
royalmix.net
royalmix.online
royalmix.pro
royalmix.website
royalmix.xyz

Great, and I think we have this kind of arguments in other mixers as well to buy those domains and then there are arguments by some that it's not feasible or it might cause big money to do it. But RoyalMix.io proved otherwise. Although I might suggest to look at this websites as well for for possible homograph attack using cyrillic characters:

Code: [Select]

ṛoyalmix.io - (xn--oyalmix-853c.io)
ṙoyalmix.io - (xn--oyalmix-s53c.io)
ṟoyalmix.io - (xn--oyalmix-563c.io)
ńoyalmix.io - (xn--oyalmix-2jb.io)
rọyalmix.io - (xn--ryalmix-cx4c.io)
rỏyalmix.io - (xn--ryalmix-sx4c.io)
rȯyalmix.io - (xn--ryalmix-t2c.io)
róyalmix.io - (xn--ryalmix-l0a.io)
rơyalmix.io - (xn--ryalmix-d5b.io)


[Z-tight]

Great, and I think we have this kind of arguments in other mixers as well to buy those domains and then there are arguments by some that it's not feasible or it might cause big money to do it. But RoyalMix.io proved otherwise. Although I might suggest to look at this websites as well for for possible homograph attack using cyrillic characters:

We have already discussed this extensively, RoyalMix cannot buy all similar domains, the cost will be so much, and they already did great by buying ~ 50 similar domains. Customers also have their own part to play in securing their funds, and doing so will reduce the victims of the cloned and phishing websites.

[famososMuertos]

This is a rhetorical question, well... maybe, but this mixer has something to do with coinroyale, they have what I call intangible brand resemblance, something of the name and the similarity of colors and even the crown...

[Z-tight]

This is a rhetorical question, well... maybe, but this mixer has something to do with coinroyale, they have what I call intangible brand resemblance, something of the name and the similarity of colors and even the crown...

CoinRoyale is a BTC casino, while RoyalMix is a mixer. As far as i know, CoinRoyale was created in 2013, while RoyalMix was created in 2024. The resemblance you noticed could just be a coincidence, but i don't think we should speculate about two different services, except there is a tangible reason to.

[examplens]

This is a rhetorical question, well... maybe, but this mixer has something to do with coinroyale, they have what I call intangible brand resemblance, something of the name and the similarity of colors and even the crown...

CoinRoyale is a BTC casino, while RoyalMix is a mixer. As far as i know, CoinRoyale was created in 2013, while RoyalMix was created in 2024. The resemblance you noticed could just be a coincidence, but i don't think we should speculate about two different services, except there is a tangible reason to.

However, you have to admit that it is quite strange that two businesses have the same word in their name. At the same time, Royal is a relatively unknown term, which makes it even more confusing why many services decided to make it part of their brand name. 

[Yamane_Keto]

This is a rhetorical question, well... maybe, but this mixer has something to do with coinroyale, they have what I call intangible brand resemblance, something of the name and the similarity of colors and even the crown...

Coinroyale won't risk running a mixer or at least they won't advertise it, the similarity in fonts and design might be because the #DevelopmentTeam  was part of Coinroyale just like it was with JokerMixer.