Cricktor
Legendary
Offline
Activity: 868
Merit: 1253
Crypto Swap Exchange
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 11, 2024, 09:34:37 PM Merited by SFR10 (1), paid2 (1) |
|
At first I thought the new copycat doesn't work or won't load but after a painfully long delay it finally pops up. Reported to provided registrar abuse email...
The more report, the better!
|
|
|
|
JollyGood
Legendary
Offline
Activity: 2646
Merit: 1770
Top Crypto Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 11, 2024, 09:40:27 PM |
|
One thing to say about the scammers is they clearly find the eXch website appealing (probably because of their reputation) and that is why they keep cloning it. They seem to be making one after another akin to a production line. I think we will probably see more of these clone with various similar domains appearing now and again especially if it is one group that is targetting them. Just spotted another phishing website that managed to stay under the radar for the past couple of weeks [please take a minute guys to also report it]: - BTW, the first few characters of its onion link are exactly the same as the original one!
|
|
|
|
hosseinimr93
Legendary
Offline
Activity: 2506
Merit: 5564
|
Here is another clone of eXch that should be reported. According to who.is, this clone has been registered more than 3 months ago and unfortunately it's still up now.
|
|
|
|
Lucius
Legendary
Offline
Activity: 3346
Merit: 5939
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 12, 2024, 03:09:11 PM |
|
Just spotted another phishing website that managed to stay under the radar for the past couple of weeks [please take a minute guys to also report it]: - BTW, the first few characters of its onion link are exactly the same as the original one!
~snip~ Here is another clone of eXch that should be reported.
~snip~ I have reported both to Google Safebrowsing (phishing), so I hope that it will help potential users to be warned about the deceptive site before they even visit it. In any case, I hope that they will be offline or blocked in any other way as soon as possible. https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en
|
|
|
|
d5000
Legendary
Offline
Activity: 4018
Merit: 7125
Decentralization Maximalist
|
The certificate of the clearnet site (exch.cx including two other sites: exch.pw and exch.bz) seems to have expired a couple of hours ago, at least my browser is showing this.
Edit: Solved on my side (Aug 13 somewhen during the morning).
|
|
|
|
nc50lc
Legendary
Online
Activity: 2520
Merit: 5960
Self-proclaimed Genius
|
The certificate of the clearnet site seems to have expired a couple of hours ago, at least my browser is showing this.
A reputable certificate search website confirms it: https://crt.sh/?q=e97b33d2bb1710d4cdc2158ac3890e50070ccb0d9cfd3d0e59d168c6979baa93I've sent a PM to " eXch Support" to raise this issue in case he prioritizes PMs than posts. PMs are checked at least twice a day in all cases.
|
|
|
|
joker_josue
Legendary
Offline
Activity: 1764
Merit: 4808
**In BTC since 2013**
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 13, 2024, 06:55:55 AM |
|
The certificate of the clearnet site (exch.cx including two other sites: exch.pw and exch.bz) seems to have expired a couple of hours ago, at least my browser is showing this.
Yes, it looks like the certificate has expired. It appears that the automatic renewal system was not turned on or failed, meaning the renewal was not carried out. I believe that within a few hours, I will have this issue resolved.
|
|
|
|
JollyGood
Legendary
Offline
Activity: 2646
Merit: 1770
Top Crypto Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 13, 2024, 07:54:08 AM |
|
It is unfortuante the clone website could have been operating for up to three months but thankfully it seems nobody knew about otherwise we would probably have had some report about it in the scam accusation board by now. The website you reported does not open, it is showing an Internal Server Error therefore safe to conclude it no longer poses any form of threat. Here is another clone of eXch that should be reported. According to who.is, this clone has been registered more than 3 months ago and unfortunately it's still up now.
|
|
|
|
Lucius
Legendary
Offline
Activity: 3346
Merit: 5939
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 13, 2024, 09:10:52 AM |
|
It is unfortuante the clone website could have been operating for up to three months but thankfully it seems nobody knew about otherwise we would probably have had some report about it in the scam accusation board by now. ~snip~
Considering how easy it is to clone any web site, it is not surprising that every service that can generate profit has its own clones, and no matter how many are detected, there are always at least two undetected for every detected one. The biggest problem is with hosting providers who simply don't care about such things (and they should). As for a possible scam report, very few people will do something like that even if they become victims of a scam, some because they don't even know this forum exists, others because they feel embarrassed that something like that happened to them and would rather keep it to themselves than share with the public.
|
|
|
|
examplens
Legendary
Offline
Activity: 3388
Merit: 3380
Crypto Swap Exchange
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 13, 2024, 09:56:34 AM |
|
Considering how easy it is to clone any web site, it is not surprising that every service that can generate profit has its own clones, and no matter how many are detected, there are always at least two undetected for every detected one.
The design of almost any site can be obtained very easily, It is enough just to ask ChatGPT to print the .css code from a specific page. The biggest problem is with hosting providers who simply don't care about such things (and they should).
It is a very large-scale job and it is difficult to make a model that would work reliably, and it can easily be bypassed. In the end, hosting services do not need to deal with content control (except for illegal things like terrorism, drugs, weapons...) on their servers.
|
|
|
|
JollyGood
Legendary
Offline
Activity: 2646
Merit: 1770
Top Crypto Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 13, 2024, 10:15:15 AM |
|
As for a possible scam report, very few people will do something like that even if they become victims of a scam, some because they don't even know this forum exists, others because they feel embarrassed that something like that happened to them and would rather keep it to themselves than share with the public. Now that you have mentioned them, I guess the biggest two obstacles to reporting would first be the awareness of this forum (and the scam accusation board) and secondly embarrassment. Having said that, in any case if just one victim came forward with a cloned website domain it would help to stop at least some others from becoming victims. I sincerely hope there were no victims in the months while the website was active. It is a very large-scale job and it is difficult to make a model that would work reliably, and it can easily be bypassed. In the end, hosting services do not need to deal with content control (except for illegal things like terrorism, drugs, weapons...) on their servers. I agree, it would be very difficult for hosting providers to monitor every aspect of activity on their servers therefore they can be unaware of clone/scam websites but the real negligence would be if they refused to take action (or delayed taking action) after scams running on their servers were reported to them.
|
|
|
|
hosseinimr93
Legendary
Offline
Activity: 2506
Merit: 5564
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 13, 2024, 11:29:27 AM |
|
The website you reported does not open, it is showing an Internal Server Error therefore safe to conclude it no longer poses any form of threat.
About an hour ago, when I first saw your post, I checked that and I got the same error as you. I just checked it again and unfortunately that clone is working now. By the way, the issue with the certificate has been solved.
|
|
|
|
|
JollyGood
Legendary
Offline
Activity: 2646
Merit: 1770
Top Crypto Casino
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 13, 2024, 04:55:58 PM |
|
I checked the website a short while ago following your post, it is a shame it is still active. The part I find the most disappointing is that if it has been reported to the domain registrar the onus is on them to suspend the domain and if it has been reported to the web hosting company the onus is on them to suspend the account. At the moment neither has acted. The website you reported does not open, it is showing an Internal Server Error therefore safe to conclude it no longer poses any form of threat. About an hour ago, when I first saw your post, I checked that and I got the same error as you. I just checked it again and unfortunately that clone is working now.
|
|
|
|
Lucius
Legendary
Offline
Activity: 3346
Merit: 5939
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 14, 2024, 10:22:26 AM |
|
Considering how easy it is to clone any web site, it is not surprising that every service that can generate profit has its own clones, and no matter how many are detected, there are always at least two undetected for every detected one.
The design of almost any site can be obtained very easily, It is enough just to ask ChatGPT to print the .css code from a specific page. I honestly didn't know that AI could do such things, but as much as this technology brought some good, it also enabled scammers and hackers to do their dirty work more easily. The biggest problem is with hosting providers who simply don't care about such things (and they should).
It is a very large-scale job and it is difficult to make a model that would work reliably, and it can easily be bypassed. In the end, hosting services do not need to deal with content control (except for illegal things like terrorism, drugs, weapons...) on their servers.If AI already exists, then such companies should use it for some good purposes, and why not to check possible clones and phishing and try to stop them (if not all, at least part). I personally don't think that they couldn't do it, but they obviously don't care, considering that they have no responsibility for such things.
|
|
|
|
joker_josue
Legendary
Offline
Activity: 1764
Merit: 4808
**In BTC since 2013**
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 14, 2024, 12:37:13 PM |
|
The biggest problem is with hosting providers who simply don't care about such things (and they should).
It is a very large-scale job and it is difficult to make a model that would work reliably, and it can easily be bypassed. In the end, hosting services do not need to deal with content control (except for illegal things like terrorism, drugs, weapons...) on their servers.If AI already exists, then such companies should use it for some good purposes, and why not to check possible clones and phishing and try to stop them (if not all, at least part). I personally don't think that they couldn't do it, but they obviously don't care, considering that they have no responsibility for such things. This is tricky because a service can have the same name and be legal and not a scam. I'm not saying AI can't help, but it's still very complicated. Because having a similar name and providing the same service is not enough to know whether it is a fraud or not. In fact, by putting a machine to do this type of assessment, the probability of false positives was greater than catching fraud.
|
|
|
|
NotATether
Legendary
Offline
Activity: 1708
Merit: 7179
In memory of o_e_l_e_o
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 15, 2024, 09:19:55 AM |
|
Considering how easy it is to clone any web site, it is not surprising that every service that can generate profit has its own clones, and no matter how many are detected, there are always at least two undetected for every detected one.
The design of almost any site can be obtained very easily, It is enough just to ask ChatGPT to print the .css code from a specific page. I honestly didn't know that AI could do such things, but as much as this technology brought some good, it also enabled scammers and hackers to do their dirty work more easily. I call BS on this, because many times I have ChatGPT to design me a website or to make a website that looks like XYZ followed by a screenshot, and all it can do is write some basic HTML with a white background and a few bounding boxes and regular fonts. It's really not designed to replace web development at all. Now if someone actually wanted to clone a website then it is enough to just download the entire website with wget. No AI tools required.
|
|
|
|
|
Lucius
Legendary
Offline
Activity: 3346
Merit: 5939
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 16, 2024, 09:58:02 AM |
|
~snip~ In fact, by putting a machine to do this type of assessment, the probability of false positives was greater than catching fraud.
You are probably right, AI is still "stupid" to be able to correctly detect such things, although every day we can hear and read that it is becoming more and more advanced and that it is only a matter of time when it will completely surpass humans in some things. It just occurred to me that when we already have such technology, why not try to use it for good purposes.
@paid2, thank you for another raffle, I will definitely participate ![Wink](https://bitcointalk.org/Smileys/default/wink.gif)
|
|
|
|
GazetaBitcoin
Legendary
Offline
Activity: 1806
Merit: 7239
Fully-fledged Merit Cycler|Spambuster'23|Pie Baker
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
August 16, 2024, 11:58:31 AM |
|
Everyone is welcome to join the 16 th Free Raffle to try to win a nice Custom eXch Cryptosteel Capsule! ![Grin](https://bitcointalk.org/Smileys/default/grin.gif) Thanks again paid2 & eXch! I just joined the raffle. I also posted raffle in the Romanian translation of OP and also inside the Romanian thread dedicated for contests.
Thanks for aggregating all these links GazetaBitcoin, I'm going to send out emails right now, hoping for quick feedback! exch.ch is already down Padawan, you move so fast, OMG! I knew it was a good thought tto summon you here... as your expertise precedes you! I also wanted to ask paid2 if he managed to make some more progress with reporting the remaining websites impersonating eXch... Also, meanwhile the list became bigger...
|
|
|
|
|