WARNING: I would advise people to be extremely careful with this mixer. They were one of the random mixers that were being suggested by a shady user from a random "mixing review website". Their website is pretty basic and looks like it was done by someone after watching a few PHP + HTML tutorials in the internet.
You don't actually even need to input your receiving address to start mixing. There is no verification whatsoever. Extremely amateur job. And too many scam mixers are appearing out from nowhere these days.
You don't actually even need to input your receiving address to start mixing. There is no verification whatsoever. Extremely amateur job. And too many scam mixers are appearing out from nowhere these days.
To build onto this:
- The site uses Google Analytics
- The site uses Cloudflare
- The site loads CDN content without integrity checks (ok,doable)
- If, and that's a big IF the status page (https://atobmixer.com/status/) would accurately display mixing statuses, it could easily be bruteforced.
The code is 6 characters long, and i don't think there's a rate limit. (Ok, maybe cloudflare would step in?
)Considering you only use letters and 0-9
Code:
~~~36^6 = 2176782336
Considering a speed of 1 million tries per second (and that's One would have access to your entire mixing process in what? 2000 seconds?
Code:
2176782336/10^6 = 2176.782336
(Unless i'm missing something here. I'd happily be corrected.)But that's not to mention that you don't even check if the user has even copy & pasted a receiving adress.
And you use cloudflare...
wow guys ,
yes use google analytics to rank on google search, you cant have a service on clearnet without those for marketing
cloudflare to avoid bots and DDos attacks
Status page is just stating fund received and any errors, then the logs are deleted in 24 hours , our database is clean every 24 hours
how we mix ? we receive from one pool and with the instructions received on our database, we send out using another pool. we send out using a pool from legal gambling site funds deposits. so u will receive clean funds.
ATOBMIXER ADMIN