[OPEN] eXch Anti-Phishing Campaign

[examplens]

Let me join in this action.
BTC address: bc1qfhkvpalg8ngmv03e4kk429lq9f8tp79czefs6s

[d5000]

I'll be participating too, probably in the next 3 days.

bc1q0fdmvjtshvl8x3lvghrrmxusewfn7y9awvzf4w

Edit: Reported monero.forex, darknetbible.info, exch.cash (forwarded request with number), exch.cy and exch.cd. Congrats to exch.cc suspension!

Had the same spam filter problem with nic.cd as @GazetaBitcoin and others, but a second attempt with another email seemingly worked.

[Mia Chloe]

~snip

I reported all 7 domains a day or 2 after this thread was created. They've dropped one of the sites already. I received an email few minutes ago that exch[.]center have been suspended I tried browsing them and their domain is not reachable.

[joker_josue]

~snip

I reported all 7 domains a day or 2 after this thread was created. They've dropped one of the sites already. I received an email few minutes ago that exch[.]center have been suspended I tried browsing them and their domain is not reachable.

I came to report the same.
I just received this email and the site is down.

It seems that the community's joint work is bearing fruit.

[apogio]

~snip

I reported all 7 domains a day or 2 after this thread was created. They've dropped one of the sites already. I received an email few minutes ago that exch[.]center have been suspended I tried browsing them and their domain is not reachable.

I came to report the same.
I just received this email and the site is down.

It seems that the community's joint work is bearing fruit.

We are strong! That’s for sure. In fact I came to report the same as well so sorry for spamming.

[Medusah]

@eXch Support, mail to support@nic.cd is not delivered:

Hello,

Your message was not delivered to one or more recipients. Please check the destination email addresses and errors shown below before retrying.

Recipient(s): support@nic.cd,support@exch.cx

Error: Rejected by spam filter

Subject: Reporting phishing site "exch.cd"

Time sent: Mon, 17 Mar 2025 09:58:29 +0000

Thank you,

The Proton Team

I'm sending from Protonmail.  Does anyone else have similar problem?

Despite that, I have reported exch[.]cash, exch[.]cc, monero[.]forex, darknetbible[.]info and exch[.]cy successfully.  I'm not reporting exch[.]center, because as I can see, it has been successfully taken down already.  Also, I want to report that I could not deliver mail to abuse@web.com via Protonmail either, so I used their form at https://www.newfold.com/abuse.

[Doan9269]

BTC Address: bc1q4x0etagh3v4zvj8c5y92ls45ngyuplyk87seh0

Reports submitted

[Pi$$]

Am active, lets bring those site down.

BTC address: bc1qara9pd653gqce7l9rupdqym8rz6dwfaj70h7hk

[zasad@]

Sent the emails, some reports in the old post
https://bitcointalk.org/index.php?topic=5535260.msg65170652#msg65170652

I was only able to view 1 site darknetbible[.] info and there's no mention of the eXch service. Perhaps the scammers have already taken action.

I have used Proton Mail for messages, very convenient service and doesn't require a phone to register.

[safar1980]

Joining to the Campaign: bc1qdc36a6dq7xuv7dsqqsawqfr0v5nv5h7xq6hc45
I sent in the reports.

[PX-Z]

I got an email from complains@nic.cy from reporting exch[.]cy. The hosting recommends to submit complains too on this URL provided on the mail.

URL: https://cybercrime.police.gov.cy/police/CyberCrime.nsf/subscribe_en/subscribe_en?openform

I assume everyone who reported got an email too.

[Asiska02]

I am joining the campaign💪🏾

BTC Address: bc1q02xdafx35p48ark94s706zd37emaujvr8ha5wm

[bitmover]

I will participate

My bitcoin address
bc1qpa6a2we0ztgjc0fljakjyandkfgajdfer54nsj


Keeping track here of reports.

[Lucius]

@eXch Support, mail to support@nic.cd is not delivered:

Hello,

Your message was not delivered to one or more recipients. Please check the destination email addresses and errors shown below before retrying.

Recipient(s): support@nic.cd,support@exch.cx

Error: Rejected by spam filter

Subject: Reporting phishing site "exch.cd"

Time sent: Mon, 17 Mar 2025 09:58:29 +0000

Thank you,

The Proton Team

I'm sending from Protonmail.  Does anyone else have similar problem?
~snip~

I used the same email provider and I didn't get such a message. Your email address may have been previously marked as bad and is therefore recognized by spam filters.


@PX-Z, I did not receive such a message, in fact the only response I received to all the emails I sent was the one from namecheap in which they confirmed receipt of the message and explained the procedure they would carry out.

[apogio]

I got an email from complains@nic.cy from reporting exch[.]cy. The hosting recommends to submit complains too on this URL provided on the mail.

URL: https://cybercrime.police.gov.cy/police/CyberCrime.nsf/subscribe_en/subscribe_en?openform

I assume everyone who reported got an email too.

Yes I got it too.

For personal reasons I would rather not send an email to the Cypriot police.

Seems legit though.

[PX-Z]

For personal reasons I would rather not send an email to the Cypriot police.

Hmmm, maybe. I didn’t email them, though, I just filled out the form on the URL they provided.

Also, it might be a good idea to report these phishing sites on Google’s phishing report page since some of them appear in search results, especially those with .cc and .cash domains.

https://safebrowsing.google.com/safebrowsing/report_phish/

[Woodie]

Together we can, report WIP.

Bitcoin address: bc1q7fttzw7whwqx4eukvll0jxg698d35cn53fnrwd


4/6 reported will complete in next few hours.

Can we report here too ??
**Anti-Phishing Working Group (APWG):** https://apwg.org/report-phishing/  

[joker_josue]

I got an email from complains@nic.cy from reporting exch[.]cy. The hosting recommends to submit complains too on this URL provided on the mail.

URL: https://cybercrime.police.gov.cy/police/CyberCrime.nsf/subscribe_en/subscribe_en?openform

I assume everyone who reported got an email too.

Confirm. I will have no problem reporting it to the police, because I am not from Cyprus.

Does the eXch administration want us to try to report directly to the authorities? I know, that it rarely gives great success. But if they give the green light, I have no problem helping.

[Amphenomenon]

Nice initiative in fighting against phishing scam
Btc address: bc1q5h3fghn0qs5sa9gvf37l3nyd37x36unldfcpvw

[ovcijisir]

Just tried to report first three domains. With two everything went well but report that had to be sent to web.com is not working, because submit report button is not working.

Anyone had similar issue?