# mmixtum.io — SUSPICIOUS

> mmixtum.io is an active domain linked to low-level phishing risk. Exercise caution when interacting with this site to avoid potential scams.

## Summary
PhishDestroy identifies mmixtum.io as an active domain associated with a low risk of generic phishing activity. The domain's classification suggests limited threat potential but still warrants vigilance from users.

The domain was registered recently on October 26, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.96.3. While VirusTotal flagged it by only one out of 95 security vendors, this minimal detection indicates emerging suspicion rather than confirmed widespread malicious use.

Given its status and modest risk, users are advised to approach communications or links involving mmixtum.io cautiously. Organizations should monitor traffic for signs of phishing attempts and update filtering rules accordingly. PhishDestroy will continue to track the domain's activity and threat landscape to provide timely updates.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: MixTum.io | Bitcoin Mixer | Bitcoin Tumbler - Mix Your Coins Now!

## Domain Intelligence
- Registered: 2026-03-05 23:07:01
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: indie.ns.cloudflare.com ned.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: MixTum.io is a Bitcoin Tumbler which uses an innovative mixing algorithm to uplevel money cleansing and clients anonymity.

### Page Text
MixTum.io | Bitcoin Mixer | Bitcoin Tumbler - Mix Your Coins Now! TOR: mixtumjztnbfhlegbmv3bkf2np37x3h4zl3olfkoc3bhcfdk2jgmpxid.onion Solution How does it work? Benefits FAQ Contacts Terms of Use Privacy Policy Reviews Videos Official TOR Mirror: mixtumjztnbfhlegbmv3bkf2np37x3h4zl3olfkoc3bhcfdk2jgmpxid.onion DE (Deutsch) RU (Русский) Premium Bitcoin Mixer Unsurpassable level of anonymity Mix My Coins Try Now For Free Check out the new mixing mode Precise
								Payment Big Brother Is Watching You! Using crypto is not that safe: Bitcoin is pseudo-anonymous Your entire transaction history is recorded in blockchain. Know Your Transaction (KYT) blockchain
						monitoring tools by Elliptic, Bitfury and Chainalysis already know a lot more about you than you can
						imagine. The risk of having your money stolen is real There are plenty of bad guys in the network who are taking advantage of blockchain’s lack of financial
						privacy, watching your Bitcoin transactions, and waiting for the opportune moment to rip you off. Deanonymization algorithms are rapidly evolving Intelligence agencies of the world’s most powerful countries invest heavily in the development of
						Bitcoin
						deanonymization algorithms, accelerating the evolution of cluster, taint, volume analyses, etc. “Classical” mixers are no silver bullet The use of the so-called classical mixers with their traditional architecture increases the chance of
						getting the same coins back or money of questionable origin. These tumblers are vulnerable to modern
						deanonymization tools. Your Privacy Matters We offer a fundamentally different approach to
				mixing that entails the highest level of anonymity We do not mix your money in one or multiple pools. There is no need in using mixer-codes We do not attribute ID tracking numbers to your orders We do not let users manually set the ratios of the output amount going to forward-to addresses We do not allow clients to set mixing time frames What has more value for you: Flexibility In Mixing Settings Or Your Confidentiality? It is your choice to make. How Does It Work? 1. A request for mixing We operate over Clearnet and Tor, giving our clients the freedom to determine their safety
								priorities.
								We offer the ability to set up to two forwarding addresses but, if the client requires more, we are
								happy to offer a custom option. 2. Buying Bitcoins from stock exchanges We continuously top up our isolated intermediary wallets with funds from hundreds of
								independent investors who have their accounts at cryptocurrency stock exchanges like Binance, OKEx,
								DigiFinex, Cryptonex and others. 3. Quality scoring of incoming transactions We run a thorough background check of incoming funds through a proprietary algorithm. 4. Selecting optimal mixing options Each mixing request makes the system look for unique processing parameters. The mixer
								randomly sets cleansing time values (from 1 to 6 hours), determine

### External Links
- https://jambler.io
- http://mixtumjztnbfhlegbmv3bkf2np37x3h4zl3olfkoc3bhcfdk2jgmpxid.onion
- https://www.altcoinstalks.com/index.php?topic=314446.0
- https://reddit.com/user/mixtum_bitcoin_mixer
- https://bitcointalk.org/index.php?topic=5476120.msg63249316#msg63249316
- https://t.me/mixtum_bot

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc00c-a1db-7408-8f59-57ffdab5026b.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/1633fa4f-64b6-4084-adc9-4f4bf416f3f2
- Wayback Machine: https://web.archive.org/web/https://mmixtum.io
- PhishDestroy: https://phishdestroy.io/domain/mmixtum.io/
- LLM endpoint: https://phishdestroy.io/domain/mmixtum.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mmixtum.io/
Last updated: 2026-03-16