eXch - instant exchange BTC / LN / XMR / LTC / ETH / ERC20

[Cricktor]

At first I thought the new copycat doesn't work or won't load but after a painfully long delay it finally pops up. Reported to provided registrar abuse email...

The more report, the better!

[JollyGood]

One thing to say about the scammers is they clearly find the eXch website appealing (probably because of their reputation) and that is why they keep cloning it. They seem to be making one after another akin to a production line. I think we will probably see more of these clone with various similar domains appearing now and again especially if it is one group that is targetting them.

Just spotted another phishing website that managed to stay under the radar for the past couple of weeks ^{[please take a minute guys to also report it]}:
^{- BTW, the first few characters of its onion link are exactly the same as the original one!}

[hosseinimr93]

Here is another clone of eXch that should be reported.

Code:

ecxh.cx

According to who.is, this clone has been registered more than 3 months ago and unfortunately it's still up now.

[Lucius]

Just spotted another phishing website that managed to stay under the radar for the past couple of weeks ^{[please take a minute guys to also report it]}:
^{- BTW, the first few characters of its onion link are exactly the same as the original one!}

Code:

exch.exchange

~snip~

Here is another clone of eXch that should be reported.

Code:

ecxh.cx

~snip~

I have reported both to Google Safebrowsing (phishing), so I hope that it will help potential users to be warned about the deceptive site before they even visit it. In any case, I hope that they will be offline or blocked in any other way as soon as possible.

Code:

https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[d5000]

The certificate of the clearnet site (exch.cx including two other sites: exch.pw and exch.bz) seems to have expired a couple of hours ago, at least my browser is showing this.

Edit: Solved on my side (Aug 13 somewhen during the morning).

[nc50lc]

The certificate of the clearnet site seems to have expired a couple of hours ago, at least my browser is showing this.

A reputable certificate search website confirms it: https://crt.sh/?q=e97b33d2bb1710d4cdc2158ac3890e50070ccb0d9cfd3d0e59d168c6979baa93

I've sent a PM to "eXch Support" to raise this issue in case he prioritizes PMs than posts.

PMs are checked at least twice a day in all cases.

[joker_josue]

The certificate of the clearnet site (exch.cx including two other sites: exch.pw and exch.bz) seems to have expired a couple of hours ago, at least my browser is showing this.

Yes, it looks like the certificate has expired. It appears that the automatic renewal system was not turned on or failed, meaning the renewal was not carried out.

I believe that within a few hours, I will have this issue resolved.

[JollyGood]

It is unfortuante the clone website could have been operating for up to three months but thankfully it seems nobody knew about otherwise we would probably have had some report about it in the scam accusation board by now. The website you reported does not open, it is showing an Internal Server Error therefore safe to conclude it no longer poses any form of threat.

Here is another clone of eXch that should be reported.

Code:

ecxh.cx

According to who.is, this clone has been registered more than 3 months ago and unfortunately it's still up now.

[Lucius]

It is unfortuante the clone website could have been operating for up to three months but thankfully it seems nobody knew about otherwise we would probably have had some report about it in the scam accusation board by now.
~snip~

Considering how easy it is to clone any web site, it is not surprising that every service that can generate profit has its own clones, and no matter how many are detected, there are always at least two undetected for every detected one. The biggest problem is with hosting providers who simply don't care about such things (and they should).

As for a possible scam report, very few people will do something like that even if they become victims of a scam, some because they don't even know this forum exists, others because they feel embarrassed that something like that happened to them and would rather keep it to themselves than share with the public.

[examplens]

Considering how easy it is to clone any web site, it is not surprising that every service that can generate profit has its own clones, and no matter how many are detected, there are always at least two undetected for every detected one.

The design of almost any site can be obtained very easily, It is enough just to ask ChatGPT to print the .css code from a specific page.

The biggest problem is with hosting providers who simply don't care about such things (and they should).

It is a very large-scale job and it is difficult to make a model that would work reliably, and it can easily be bypassed. In the end, hosting services do not need to deal with content control (except for illegal things like terrorism, drugs, weapons...) on their servers.

[JollyGood]

As for a possible scam report, very few people will do something like that even if they become victims of a scam, some because they don't even know this forum exists, others because they feel embarrassed that something like that happened to them and would rather keep it to themselves than share with the public.

Now that you have mentioned them, I guess the biggest two obstacles to reporting would first be the awareness of this forum (and the scam accusation board) and secondly embarrassment. Having said that, in any case if just one victim came forward with a cloned website domain it would help to stop at least some others from becoming victims. I sincerely hope there were no victims in the months while the website was active.

It is a very large-scale job and it is difficult to make a model that would work reliably, and it can easily be bypassed. In the end, hosting services do not need to deal with content control (except for illegal things like terrorism, drugs, weapons...) on their servers.

I agree, it would be very difficult for hosting providers to monitor every aspect of activity on their servers therefore they can be unaware of clone/scam websites but the real negligence would be if they refused to take action (or delayed taking action) after scams running on their servers were reported to them.

[hosseinimr93]

The website you reported does not open, it is showing an Internal Server Error therefore safe to conclude it no longer poses any form of threat.

About an hour ago, when I first saw your post, I checked that and I got the same error as you.
I just checked it again and unfortunately that clone is working now.


By the way, the issue with the certificate has been solved.

[GazetaBitcoin]

a Pidgin translation of OP was made by Nheer: eXch - instant exchange BTC / LN / XMR / LTC / ETH / ERC20.

An Urdu translation was made recently by ThemePen and it can be found here: eXch - فوری تبادلہ BTC/LN/XMR/LTC/ETH/ERC20.
paid2 told me that he also translated this thread a while ago. His French translation can be found here: eXch - échangez instantanément BTC / LN / XMR / LTC / ETH / ERC20.

I would like to announce that a Turkish translation was just made by mela65: eXch - Hızlı Borsa BTC / LN / XMR / LTC / ETH / ERC20.
As a plus, Peanutswar also realized a Filipino translation for OP: eXch - mabilisang nag papalit ng BTC / LN / XMR / LTC / ETH / ERC20.

So in this moment there are 10 translations existent for eXch. I would like to thank to all translators for their efforts!

[JollyGood]

I checked the website a short while ago following your post, it is a shame it is still active.

The part I find the most disappointing is that if it has been reported to the domain registrar the onus is on them to suspend the domain and if it has been reported to the web hosting company the onus is on them to suspend the account. At the moment neither has acted.

The website you reported does not open, it is showing an Internal Server Error therefore safe to conclude it no longer poses any form of threat.

About an hour ago, when I first saw your post, I checked that and I got the same error as you.
I just checked it again and unfortunately that clone is working now.

[Lucius]

Considering how easy it is to clone any web site, it is not surprising that every service that can generate profit has its own clones, and no matter how many are detected, there are always at least two undetected for every detected one.

The design of almost any site can be obtained very easily, It is enough just to ask ChatGPT to print the .css code from a specific page.

I honestly didn't know that AI could do such things, but as much as this technology brought some good, it also enabled scammers and hackers to do their dirty work more easily.

The biggest problem is with hosting providers who simply don't care about such things (and they should).

It is a very large-scale job and it is difficult to make a model that would work reliably, and it can easily be bypassed. In the end, hosting services do not need to deal with content control (except for illegal things like terrorism, drugs, weapons...) on their servers.

If AI already exists, then such companies should use it for some good purposes, and why not to check possible clones and phishing and try to stop them (if not all, at least part). I personally don't think that they couldn't do it, but they obviously don't care, considering that they have no responsibility for such things.

[joker_josue]

The biggest problem is with hosting providers who simply don't care about such things (and they should).

It is a very large-scale job and it is difficult to make a model that would work reliably, and it can easily be bypassed. In the end, hosting services do not need to deal with content control (except for illegal things like terrorism, drugs, weapons...) on their servers.

If AI already exists, then such companies should use it for some good purposes, and why not to check possible clones and phishing and try to stop them (if not all, at least part). I personally don't think that they couldn't do it, but they obviously don't care, considering that they have no responsibility for such things.

This is tricky because a service can have the same name and be legal and not a scam.
I'm not saying AI can't help, but it's still very complicated. Because having a similar name and providing the same service is not enough to know whether it is a fraud or not.

In fact, by putting a machine to do this type of assessment, the probability of false positives was greater than catching fraud.

[NotATether]

Considering how easy it is to clone any web site, it is not surprising that every service that can generate profit has its own clones, and no matter how many are detected, there are always at least two undetected for every detected one.

The design of almost any site can be obtained very easily, It is enough just to ask ChatGPT to print the .css code from a specific page.

I honestly didn't know that AI could do such things, but as much as this technology brought some good, it also enabled scammers and hackers to do their dirty work more easily.

I call BS on this, because many times I have ChatGPT to design me a website or to make a website that looks like XYZ followed by a screenshot, and all it can do is write some basic HTML with a white background and a few bounding boxes and regular fonts.

It's really not designed to replace web development at all.

Now if someone actually wanted to clone a website then it is enough to just download the entire website with wget. No AI tools required.

[paid2]

Everyone is welcome to join the 16^th Free Raffle to try to win a nice Custom eXch Cryptosteel Capsule! 

[FREE RAFFLE] - Custom eXch Cryptosteel Capsule (#16)!

[Lucius]

~snip~
In fact, by putting a machine to do this type of assessment, the probability of false positives was greater than catching fraud.

You are probably right, AI is still "stupid" to be able to correctly detect such things, although every day we can hear and read that it is becoming more and more advanced and that it is only a matter of time when it will completely surpass humans in some things. It just occurred to me that when we already have such technology, why not try to use it for good purposes.


@paid2, thank you for another raffle, I will definitely participate

[GazetaBitcoin]

Everyone is welcome to join the 16^th Free Raffle to try to win a nice Custom eXch Cryptosteel Capsule! 

Thanks again paid2 & eXch! I just joined the raffle.

I also posted raffle in the Romanian translation of OP and also inside the Romanian thread dedicated for contests.

Thanks for aggregating all these links GazetaBitcoin, I'm going to send out emails right now, hoping for quick feedback!
exch.ch is already down

Padawan, you move so fast, OMG! I knew it was a good thought tto summon you here... as your expertise precedes you!

I also wanted to ask paid2 if he managed to make some more progress with reporting the remaining websites impersonating eXch... Also, meanwhile the list became bigger...