[OPEN] eXch Anti-Phishing Campaign

[igebotz]

Are you surprised?  

Of course not, since there is no rule about minimum rank needed to join. Which doesn't mean that it can't be added.  

Oh, i just noticed I am a newbie here. where can I learn about ranks and their benefits?

Newbie account created ~10 minutes after launch of this campaign. Nothing suspicious going on here.  

If exch wants to get organic reports and not spam reports from the same IP addresses, they need to raise the eligibility requirements a bit higher. Multiple reports from same IP are certainly going to get flagged.

[xOrpian]

Are you surprised?  

Of course not, since there is no rule about minimum rank needed to join. Which doesn't mean that it can't be added.  

Oh, i just noticed I am a newbie here. where can I learn about ranks and their benefits?

Newbie account created ~10 minutes after launch of this campaign. Nothing suspicious going on here.  

If exch wants to get organic reports and not spam reports from the same IP addresses, they need to raise the eligibility requirements a bit higher. Multiple reports from same IP are certainly going to get flagged.

I was going to use, premium email for report, call, too, given the necessity. A direct outreach might be better for me given my rank.
Not to mention I've experience in reporting someone, and getting that report filed, too. Given the huge oppression, it was considered, but yes, I should be dropping the idea.

I will apply in the future when my rank is higher, in similar or more tasks, Please count me out. 

[FleurTunisienne]

Great initiative, I would like to participate

BTC adress: bc1q22e2ss0h7va2r3ayk4y78nxrydpkuvsqx6ydpk

[pinggoki]

I will do my due diligence in preventing scammers from getting their payday and I hope that me reporting these website helps a lot in suspending these websites.

BTC Address: bc1qpnlme03wm3uqjq72njrwexklrm8r37r3v3t8l8

[NotATether]

Is there any article on the ranks and their benefits?

https://bitcointalk.org/index.php?topic=178608.0

[DYING_S0UL]

What's the best way of reporting these phishing domains effectively? Anyone any idea? And those who have already done their reporting, can you guys show us some example how you guys did it or what you guys wrote in your reports or the process method you followed? You know what I mean, to give everyone a general idea, those who doesn't know how. Because I don't wanna accidentally make my reports look like spams.

I was going to use, premium email for report, call, too, given the necessity. ...snip...

What's this premium email?
I'm just a regular person using regular email, Lol...

[apogio]

Message:

Code:

name: apogio
date: 16/3/2025
address: bc1qs024u6y0rgffnhwuu0dunr8vfrwucyumg9423f
I am signing this message with my address and will proceed with the reporting process during the next week.

Signature:

Code:

IAyKUP5Mb/PwmO0KyNK0BDcWH7S6DUQWQI7Hy++SocpWaqFnOeUQYKlObjAmc4l11KndKyYyotY19pX5GGiB020=

[Haunebu]

Interesting and unique stuff team. Will gladly try to help y'all out in a mutually beneficial manner. This isn't my first rodeo against scam sites having dealt with 1xbit, Yobit, 1xbet, Betnomi etc over the years.

BTC addy: bc1q0g4eyvrm756c5wvy6lx3kx3ns86ufrr8cnmf98

Edit: Reported all domains earlier. Great organized effort people.

[xOrpian]

I'm just a regular person using regular email, Lol...

Generic?

Is there any article on the ranks and their benefits?

https://bitcointalk.org/index.php?topic=178608.0

Thanks!

I will make the reports anyway, and if it'd be preferable to reward that, that would be great. Otherwise, a reward isn't required.

Code:

Message: I 'xOrpian' bitcointalk newbie, voluntarily making reports of websites phishing 'eXch', to support a good initiative on the forum.
Address: bc1q84eg5qaxzwap2glgzlu74r43dqnx2lcen52d66
Signature: H3AOOKuW3nOIPOO5jawuH2FlG8xW6y1bt41ufhKHdXl7eBS1wLXhqZXeuLUadRjOfGolU0ckQudYs8GCS7eOqps=

I will keep a draft of the emails and likely release them by Monday. I hope this will be helpful.

[joker_josue]

~snip~
Note that reports made over the weekend are more often ignored, so we recommend sending them during the week.

For those who missed this, the weekend is not the best time for reports.

What a bummer... I really didn't realize that. I had some time and made the emails.

Well, I'll try to resend other different emails on the subject, maybe it will help. Not even if I send it from another email.

[NeuroticFish]

For those who missed this, the weekend is not the best time for reports.

Thanks for emphasizing this.

If you want to make reports and to receive a reward, you need first to reply to this thread with your BTC address.

I will try start sending tomorrow (Monday) reports, hence here's a BTC address:

Code:

bc1qkxq3cryfrjhdcj0dm4e6njyssnvlkspfrf2t0h

[GazetaBitcoin]

I reported all the mentioned websites from OP (excepting one -- details below). I hope all will be suspended...

My Bitcoin address is this one: bc1qgnazx6jf5nudz2pdrgrpcw99luzrwljfzl8ll5

Thank you for this initiative, OP and I hope the results will be positive. I will send you my reports during the business week.


I couldn't reach support@nic.cd by email. I tried twice and each time I got this response:

Hello,

Your message was not delivered to one or more recipients. Please check the destination email addresses and errors shown below before retrying.

Recipient(s): support@nic.cd

Error: Rejected by spam filter

[BenCodie]

I've already made some of the reports after being scammed roughly 60 USD by the phishing website exch.cc.
I'll make the others now. Edit - all domains reported.
Lets take them down.

bc1qt0csuy7jyq7w6yxspkh6z8pf77ttfl8act2s8z

[Cheema02]

I have reported all these domains, I hope they will be suspended
BTC address: bc1qdezddun8ydmspy3f6qq69jryuudg4ceczmksdt

[alani123]

BTC: bc1qm8hgpcr89mm56hhmq4dn3842vvhzp4tnsxdsfw

[xOrpian]

Hello,

Your message was not delivered to one or more recipients. Please check the destination email addresses and errors shown below before retrying.

Recipient(s): support@nic.cd

Error: Rejected by spam filter

Many agencies Organizations filter emails from generic emails such as 'gmail' 'hotmail' 'yahoo' etc, many spam report there, fake, and malicious information, too for many reasons and people working there don't want to bother looking into all of that is the reason I can think of.
You can try protonmail. If that doesn't work, then you can purchase a domain name and use an email associated with it to resend the email; it should likely work in that case.

Other generic emails might work, too, if they aren't filtered; I just haven't checked to validate that claim, to be honest.

[GazetaBitcoin]

You can try protonmail. If that doesn't work, then you can purchase a domain name and use an email associated with it to resend the email; it should likely work in that case.

I actually tried with ProtonMail

I will try again in next days... hoping it will work...

[xLays]

I guess I already reported some before, it was posted in eXch ANN thread. I will join this one again.

BTC address: bc1qwe09lhuvlpamhqqp7sfv9qtww68lyuydfp0ddn



Response I received from reporting exch[.]cash:

Hello;

After investigation we have found that Tucows only provides the registration for this domain.

We are not the webhost, internet service provider, or administrator for the reported domain. Given that we are not the webhost for the reported domain, the allegedly infringing material identified in your notification does not reside on Tucows servers. Accordingly, we do not have the technical ability to remove or disable specific items of objectionable content.

Again, due to the limited technical sphere in which Tucows operates, we do not believe that we are the correct party to contact regarding this matter.  In this instance, we suggest that you contact the party operating the website or the party hosting the website to have this matter properly resolved. A "ping" of the website you indicated often reveals the IP address of the party which probably hosts this website.  A "ping" of the website you indicated often reveals the IP address of the party which probably hosts this website. You may then use https://hostingchecker.com, https://search.arin.net/ or another similar tool to identify this party.

As per the implementation of GDPR, we are mandated to remain compliant with data privacy regulations. Therefore, we are no longer displaying whois information publicly and/or forwarding to the listed registrant. You can read more via the following link opensrs.com/the-gdpr/

However, you may contact the owner via the following link  

https://tucowsdomains.com/whois-search/ under registrant email

or via the corresponding registry's whois tool

If this is an issue of trademark, then you may want to review the documentation on how to lodge a formal dispute through the UDRP (www.icann.org/udrp) or a court of competent jurisdiction.


Essentially, we are an administrative body and do not judge or adjudicate issues of dispute.

If the domain does go to arbitration, please send any legal documentation (court filed or filed with an ICANN recognized arbitrator) by email to disputes@opensrs.org, fax 416-531-2516 attn: Disputes or by post to Tucows, Inc, 96 Mowat Ave, Toronto, Ontario, Canada M6K 3M1.


If you would like to find out the whois data, please send a separate email to tieredaccess@tucows.com to find out the process for obtaining whois data

Thank you again for your report, and please do not hesitate to contact us should you have any further questions.

Regards
* Compliance Officer * Tucows Inc/Ascio/Epag/Enom
https://www.tucowsdomains.com/compliance-form/
https://tucowsdomains.com/report-abuse/

A request (5471228) has been created. To add additional comments, reply to this email.

exch.cash is impersonating and phishing the official website https://exch.cx/

All the email I sent:


All the email I received about this campaign:

[ovcijisir]

I plan to report phishing websites tomorrow or day after.

This is my BTC address:
bc1qlt70k2ae8pexss37mdkkce3n32220lret59y2q

[ContentWriter]

What's the best way of reporting these phishing domains effectively? Anyone any idea? And those who have already done their reporting, can you guys show us some example how you guys did it or what you guys wrote in your reports or the process method you followed? You know what I mean, to give everyone a general idea, those who doesn't know how. Because I don't wanna accidentally make my reports look like spams.

I was going to use, premium email for report, call, too, given the necessity. ...snip...

What's this premium email?
I'm just a regular person using regular email, Lol...

See what is required in reporting;

https://www.namecheap.com/blog/how-to-report-a-fraudulent-website-to-a-registrar/

Further updates: Report is better Monday-Friday nd use Bcc instead of Cc to copy eXch support.