C-CEX.com Trusted, Secure & Friendly Exchange Since 2013. 200+ Alts,USD,Low Fees - page 20.

Saulich_Fedorovich

newbie

Activity: 9

Merit: 0

Quote from: milewilda on September 09, 2018, 11:11:25 AM

I cant tell a thing but we can always presume. Sorry for those who lost up DOGE and LTC. Luckily they havent able bypass BTC withdrawals.

Though they can.

Informations on the alleged IPs: they aren't tor nodes and one of them is used by a cellular network so it's unlikely behind a proxy. They are all from the same country. So it give an idea about where the attack does come from.

Code:

$ whois 196.221.127.186
% This is the AfriNIC Whois server.

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '196.221.49.0 - 196.221.255.255'

% No abuse contact registered for 196.221.49.0 - 196.221.255.255

inetnum: 196.221.49.0 - 196.221.255.255
netname: ADSL-Customers
descr: RT-ADSL-project
country: eg
admin-c: RT864-AFRINIC
tech-c: RT864-AFRINIC
status: Assigned PA
mnt-by: RAYA-MNT
source: AFRINIC # Filtered
parent: 196.221.0.0 - 196.221.255.255

role: Raya Telecom
address: RAYA Telecom
address: 23 Nahda St.,off Saad-el-aali st.,Maadi
address: 11431, Cairo, Egypt
phone: tel:+20-2-7680900
fax-no: tel:+20-2-7680901
admin-c: MG4315-AFRINIC
tech-c: SB1-AFRINIC
nic-hdl: RT864-AFRINIC
remarks: For any abuse complaint contact [email protected]
mnt-by: RAYA-MNT
source: AFRINIC # Filtered

$ whois 156.161.167.35

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
# Copyright 1997-2018, American Registry for Internet Numbers, Ltd.
#

NetRange: 156.161.0.0 - 156.161.255.255
CIDR: 156.161.0.0/16
NetName: AFRINIC-ERX-156-161-0-0
NetHandle: NET-156-161-0-0-1
Parent: NET156 (NET-156-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under AFRINIC responsibility.
Comment: Please see http://www.afrinic.net/ for further details,
Comment: or check the WHOIS server located at whois.afrinic.net.
Ref: https://rdap.arin.net/registry/ip/156.161.0.0

ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net

OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC

ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query

OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN

OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
# Copyright 1997-2018, American Registry for Internet Numbers, Ltd.
#

Found a referral to whois.afrinic.net.

% This is the AfriNIC Whois server.

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '156.161.128.0 - 156.161.191.255'

% No abuse contact registered for 156.161.128.0 - 156.161.191.255

inetnum: 156.161.128.0 - 156.161.191.255
netname: EM-3
descr: Etisalat-Misr 2G/3G subscribers
country: EG
org: ORG-EM1-AFRINIC
admin-c: SMM2-AFRINIC
tech-c: SMM2-AFRINIC
status: ASSIGNED PA
remarks: For any abuse, please direct your queries to [email protected]
mnt-by: Sherif-Magdy-MNT
mnt-lower: Sherif-Magdy-MNT
source: AFRINIC # Filtered
parent: 156.160.0.0 - 156.191.255.255

organisation: ORG-EM1-AFRINIC
org-name: ETISALAT MISR
org-type: LIR
country: EG
address: Etisalat Misr
address: S4, Down Town, 90th Street,
address: 5th Compound,
address: New Cairo, Egypt.
address: Cairo 11835
phone: tel:+20-2-35381889
phone: tel:+20-2-35381889
phone: tel:+20-2-35381889
phone: tel:+20-2-35381889
fax-no: tel:+20-2-35381072
admin-c: AFE1-AFRINIC
tech-c: AFE1-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: etisalat-mnt
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered

person: Sherif Magdy Mohamed
address: Etisalat Misr
address: S4, Down Town, 90th Street,
address: 5th Compound,
address: New Cairo, Egypt.
address: Cairo 11835
address: Egypt
phone: tel:+20-2-35381000
fax-no: tel:+20-2-35381072
nic-hdl: SMM2-AFRINIC
mnt-by: GENERATED-BDVY6DBBH98KLPSUIXSD5SUX8WDCVXTF-MNT
source: AFRINIC # Filtered

$ whois 156.218.142.74

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
# Copyright 1997-2018, American Registry for Internet Numbers, Ltd.
#

NetRange: 156.218.0.0 - 156.218.255.255
CIDR: 156.218.0.0/16
NetName: AFRINIC-ERX-156-218-0-0
NetHandle: NET-156-218-0-0-1
Parent: NET156 (NET-156-0-0-0-0)
NetType: Transferred to AfriNIC
OriginAS:
Organization: African Network Information Center (AFRINIC)
RegDate: 2010-11-03
Updated: 2010-11-17
Comment: This IP address range is under AFRINIC responsibility.
Comment: Please see http://www.afrinic.net/ for further details,
Comment: or check the WHOIS server located at whois.afrinic.net.
Ref: https://rdap.arin.net/registry/ip/156.218.0.0

ResourceLink: http://afrinic.net/en/services/whois-query
ResourceLink: whois.afrinic.net

OrgName: African Network Information Center
OrgId: AFRINIC
Address: Level 11ABC
Address: Raffles Tower
Address: Lot 19, Cybercity
City: Ebene
StateProv:
PostalCode:
Country: MU
RegDate: 2004-05-17
Updated: 2015-05-04
Comment: AfriNIC - http://www.afrinic.net
Comment: The African & Indian Ocean Internet Registry
Ref: https://rdap.arin.net/registry/entity/AFRINIC

ReferralServer: whois://whois.afrinic.net
ResourceLink: http://afrinic.net/en/services/whois-query

OrgAbuseHandle: GENER11-ARIN
OrgAbuseName: Generic POC
OrgAbusePhone: +230 4666616
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/GENER11-ARIN

OrgTechHandle: GENER11-ARIN
OrgTechName: Generic POC
OrgTechPhone: +230 4666616
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/GENER11-ARIN

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/whois_reporting/index.html
#
# Copyright 1997-2018, American Registry for Internet Numbers, Ltd.
#

Found a referral to whois.afrinic.net.

% This is the AfriNIC Whois server.

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '156.218.0.0 - 156.218.255.255'

% No abuse contact registered for 156.218.0.0 - 156.218.255.255

inetnum: 156.218.0.0 - 156.218.255.255
netname: All-39
descr: TE Data
country: EG
admin-c: TDCR1-AFRINIC
tech-c: TDCR2-AFRINIC
status: ASSIGNED PA
remarks: ====================================================
remarks: For Internet Abuse & Spam reports : [email protected]
remarks: ====================================================
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered
parent: 156.192.0.0 - 156.223.255.255

role: TE Data Contact Role
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: tel:+20-2-33320700
fax-no: tel:+20-2-33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
nic-hdl: TDCR1-AFRINIC
abuse-mailbox: [email protected]
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

role: TE Data Contact Role-2
address: 94 Tahrir Street, Dokki, 12311, Giza, Egypt
phone: tel:+20-2-33320700
fax-no: tel:+20-2-33320800
admin-c: TDCR2-AFRINIC
tech-c: MH7-AFRINIC
nic-hdl: TDCR2-AFRINIC
abuse-mailbox: [email protected]
mnt-by: TE-Data-MNT
source: AFRINIC # Filtered

% Information related to '156.218.128.0/18AS8452'

route: 156.218.128.0/18
descr: Telecom-Egypt-Data
origin: AS8452
mnt-lower: GEGA-MNT
mnt-by: AFRINIC-HM-MNT
source: AFRINIC # Filtered

$

milewilda

legendary

Activity: 3094

Merit: 1127

Quote from: sevendust777 on September 08, 2018, 10:20:56 PM

So after maintenance they got attacked!?, Are we not getting back our DOGE? That was the last coin i have on C-Cex and now its gone...
I also have friends where they cannot open their Ccex accounts anymore! They still have their ETH, LTC and DOGE..
This exchange really sux!

What a nice comeback huh?

They have a vacation and now they're back with a hacking incident news? I dont know if i would believe that its indeed a hacker or just an another way- you know what i mean.
I cant tell a thing but we can always presume. Sorry for those who lost up DOGE and LTC. Luckily they havent able bypass BTC withdrawals.I would really hesitate on using up this exchange again.

Saulich_Fedorovich

newbie

Activity: 9

Merit: 0

Quote from: LTU_btc on September 09, 2018, 05:59:53 AM

After long time I tried to login to my C-CEX account, but got "user not found message". Seems that they deleted my account, as I see more people have same problem like me. At least I didn't had money on my C-CEX account. I also tried to open new account, but guess what happened - confirmation message didn't arrived to my email. Now when I read this thread I feel that it would be better to avoid this exchange...

Their usual tactics in stoling user money: closing accounts without even an automated notice. Also with BitcoinZ, they would make a lot of money if they upgrade (or maybe they did already). Something helpfull for recovering the amounts stolen.

zac123

newbie

Activity: 114

Merit: 0

Quote from: MinerVGA1 on September 09, 2018, 09:09:48 AM

Quote from: zac123 on September 09, 2018, 06:50:36 AM

C-cex you disgust me.

Why don't you initiate the transfer of my burst coin like I have already instructed you to do so via the control panel.
Please do this before my burst coin mysteriously gets hacked as well.

I don't understand why they delist burst and xtra-bytes then put wallets on maintenance so we can't withdraw? I am a hodl kinda of guy .... If I sell it's into the panic selling I'd prefer to hodl till the end of time lol.
I remember dumping huge huge piles of DogecoinDark when it got delisted now it's worth lots as it rebranded to verge.

Please consider keeping the coins till you have working wallets. I run wallets 24/7 on my other system and both chains are working.

Alot of the coins Ccex like to list are clear scams Loyal, XID, XOM, XOT, XBP, Lux, Mlm, Pai, EBH, ADCN, BEE, ETHG, SFI, mcap and more!. Why List this sh*t!?!? Just to delist.
I actually like using Ccex as I have since Jan 2015. It would be nice if you list only real projects forget the shitty tokens and keep the real projects.

You have some real solid projects Like Burst, Linda, Uno, TRC, BBP, Dash, Etc, Eth, Doge, Ltc, BTC where there are active communities and the coins have been around for years.
Lets keep them and bring in more honest coin's. That have active trading volumes, Devs and communities, like reddcoin, XMR, BCH or tokens like SALT or BAT things that are real.

Please reconsider the delist of UNO, XBY, BURST as these are REAL coin with huge stable networks and hashrates (XBY is POS) (Burst has Tbytes of miners).

If you don't want to keep them at least open wallets so we can withdraw!!!

Thank you.

i now use bittrex as my exchange. c-cex is not run like a proper company. c-cex needs to go. i recommend everyone to withdraw their coins and go to a different exchange

Saulich_Fedorovich

newbie

Activity: 9

Merit: 0

Quote from: gEMx on September 08, 2018, 09:16:28 PM

poor ccex. always a target for hackers. very unfortunate. hopefully trade will pick up so these balances can be paid. need more info on hack. only hot wallets empty? was any doge + ltc stored cold?

Not really. Every action from transfering funds to trashing balances is vulnerable to CSRF, even with 2FA enabled. This was something pending to happen, there are also many more unfixed server side issues waiting for getting user's funds robbed.

Even their scripts for transferrring funds from cold wallets are vulnerable (they are only triggered manually but the process is automatic). it's really impressing nobody logged-in remotely yet (though this part is unlikely thanks to cloudflare) or got access to private keys (also unlikely).

Outside vulnerabilities, there are risky but still secure practices like using MD5 for session cookies without regenerating or being able to confirm withdrawals links sent to emails from a different ɪᴘ. Or using a single hot wallet for some coins.

But getting those errors fixed will only lead to to get more money robbed by them, so I won't speak about those issues. The more this exchange get hacked, the less the peoples are likely to get robbed by the bigger robber: c-cex.com staff.
I also won't reaveal more publicly or it would be first-in best-dressed on everything listed!

But their level of security practices isn't comparable to anything I saw on other exchanges though.

MinerVGA1

jr. member

Activity: 38

Merit: 1

Quote from: zac123 on September 09, 2018, 06:50:36 AM

C-cex you disgust me.

Why don't you initiate the transfer of my burst coin like I have already instructed you to do so via the control panel.
Please do this before my burst coin mysteriously gets hacked as well.

I don't understand why they delist burst and xtra-bytes then put wallets on maintenance so we can't withdraw? I am a hodl kinda of guy .... If I sell it's into the panic selling I'd prefer to hodl till the end of time lol.
I remember dumping huge huge piles of DogecoinDark when it got delisted now it's worth lots as it rebranded to verge.

Please consider keeping the coins till you have working wallets. I run wallets 24/7 on my other system and both chains are working.

Alot of the coins Ccex like to list are clear scams Loyal, XID, XOM, XOT, XBP, Lux, Mlm, Pai, EBH, ADCN, BEE, ETHG, SFI, mcap and more!. Why List this sh*t!?!? Just to delist.
I actually like using Ccex as I have since Jan 2015. It would be nice if you list only real projects forget the shitty tokens and keep the real projects.

You have some real solid projects Like Burst, Linda, Uno, TRC, BBP, Dash, Etc, Eth, Doge, Ltc, BTC where there are active communities and the coins have been around for years.
Lets keep them and bring in more honest coin's. That have active trading volumes, Devs and communities, like reddcoin, XMR, BCH or tokens like SALT or BAT things that are real.

Please reconsider the delist of UNO, XBY, BURST as these are REAL coin with huge stable networks and hashrates (XBY is POS) (Burst has Tbytes of miners).

If you don't want to keep them at least open wallets so we can withdraw!!!

Thank you.

BitPotus

hero member

Activity: 1050

Merit: 604

I can't believe so many idiots are still using this scam exchange.

If you still have money on there, then you're fucking retards.

Sorry for being a cunt but it is what it is.

zac123

newbie

Activity: 114

Merit: 0

C-cex you disgust me.

Why don't you initiate the transfer of my burst coin like I have already instructed you to do so via the control panel.
Please do this before my burst coin mysteriously gets hacked as well.

LTU_btc

legendary

Activity: 3262

Merit: 1376

Slava Ukraini!

After long time I tried to login to my C-CEX account, but got "user not found message". Seems that they deleted my account, as I see more people have same problem like me. At least I didn't had money on my C-CEX account. I also tried to open new account, but guess what happened - confirmation message didn't arrived to my email. Now when I read this thread I feel that it would be better to avoid this exchange...

ionbb

newbie

Activity: 41

Merit: 0

C-cex? Where can I contact you about a tip? Contact me.

ableh

sr. member

Activity: 498

Merit: 251

CryptoTalk.Org - Get Paid for every Post!

Quote from: sevendust777 on September 08, 2018, 10:20:56 PM

So after maintenance they got attacked!?, Are we not getting back our DOGE? That was the last coin i have on C-Cex and now its gone...
I also have friends where they cannot open their Ccex accounts anymore! They still have their ETH, LTC and DOGE..
This exchange really sux!

same with me..i can't access my account Angry

sevendust777

hero member

Activity: 806

Merit: 503

So after maintenance they got attacked!?, Are we not getting back our DOGE? That was the last coin i have on C-Cex and now its gone...
I also have friends where they cannot open their Ccex accounts anymore! They still have their ETH, LTC and DOGE..
This exchange really sux!

Dima2006

newbie

Activity: 5

Merit: 0

c-cex.com scam exchange. They brazenly steal our coins!

Aleksandr O.

newbie

Activity: 11

Merit: 0

I can not even imagine what a terrible situation, my money just disappeared, I burned C-CEX.com in hell, two weeks did not respond to a letter in support of

LCpool

newbie

Activity: 47

Merit: 0

scam exchange...they are not sending BTC withdrawals......

gEMx

newbie

Activity: 89

Merit: 0

poor ccex. always a target for hackers. very unfortunate. hopefully trade will pick up so these balances can be paid. need more info on hack. only hot wallets empty? was any doge + ltc stored cold?

Nexu$

full member

Activity: 144

Merit: 100

Quote from: crypto_curious on September 08, 2018, 09:03:52 PM

This exchange is complete garbage. It's been coming for months. Maybe take more "vacation" time to enjoy "happy automn" this time.

it may be but they have to reimburse us. I do not believe in this attack. Being that they went into maintenance mode and still they were not releasing loot.after they suspended the looting. I want to know about our refund they have to return us. bad all automated, do not pay attention do not respond and now go with our money.Devolve our funds CCEX

k0er

legendary

Activity: 1134

Merit: 1068

Quote from: c-cex on September 08, 2018, 08:38:52 PM

DOGE and LTC balances stolen

We regret to inform that there was a breach discovered by hackers in our withdrawal procedures. They was able to repeat same withdrawals several times. Our DOGE and LTC completely depleted. As DOGE and LTC withdrawals of current user balances are no more possible - we transfered them to "Hold" balances. So now you can see your past DOGE and LTC balance as "DOGE on hold" and "LTC on hold".

Important! Do not send DOGE or LTC to old addresses! You need to get new address for new deposits!

The breach is already fixed. All other balances including BTC are fine.

We welcome everybody to report hackers. We are open for authorities to collaborate. Here some info about hackers:

They used lots of different accounts to perform this attack.

~snip

Here is one of the DOGE addresses used to repeat withdrawals:
https://dogechain.info/address/DQuZ3f1kxWrrbTZYfc7d92Xrk6YRpcv1EE

Here is one of the LTC addresses used to repeat withdrawals:
https://chainz.cryptoid.info/ltc/address.dws?LQkk1ChBmu3zes9NUeBbXE7czFDMKMCLuc.htm

Dejavu

Quote from: c-cex on March 04, 2014, 07:38:48 AM

It's time to put all information to one place:

1. What happened 23/02/14?
We developed new system to make withdrawals more secure by confirming it by e-mail. But there was made unforgivable mistake in code allowing to customer to increase it's coins amount by clicking confirmation link again and again in case of withdrawal failure (reason could be wrong wallet address). That mistake was quickly fixed, all security revised but harm was made by one of our customers with user name "Mairusu" displayed in chat as "Darkman" with e-mail address "[email protected]" and IP address "23.29.119.226". He made our BTC hot wallet empty. When I saw it is empty - I just thought that it's just normal withdrawals and put cold wallet's BTC to hot wallet - it was withdrawed in seconds. That was second mistake. In 2 days "Darkman" responded to my e-mail and promiced to refund all he has by the moment. He indeed made some refunds. In total it was: DRK:14380, 15000,08999991 Total: 29380,08999991 / MINT: 2500000, 22516984,55385500, 4999999,99, Total: 30016984,543855 / 0.40072620 BTC. He also promiced to refund 76 BTC but it never happens.

2. What we had to do.
We had to create special account "BTC on hold" to memorize customer's BTC amount for future refund and put BTC. We also reversed all DRK to BTC transactions only made with "Darkman". We credited DRK to users's accounts and substracted BTC. But there was another one mistake: we did not prohibit users to withdraw BTC and DRK when we put their BTC to negative because of reversed transactions. Almost everybody withdrew DRK + BTC not giving us back BTC. That made additional harm to us.

3. What we do now.
We work hard to pick-up trade volumes we lost, making exchange better every day. We pay very big attention to security, check, verify everything every several hours.

4. How we will refund customers and how long it takes?
We owe 149 BTC to 96 our customers. (11.21068002 refunded by Apr, 2015) Yes, we already refunded about 500 customers, but the total amount was about 3 BTC. (they all had <0.1 balance in BTC). We are going to refund everybody, but we need time. Aproximately up to 3 months. But it depends on how good we will work - I hope it happens faster.

5. Why we continue to work after such hard accident?
I personally beleive c-cex will become Big exhange. We get much of positive feedback and people continue to trust us their funds by increasing the total ammount of exchange's wallets every day. By the day of accident we had lot's of customer's funds in altcoins. Everybody start to withdraw - and they withdraw to about 10% of the balance we had on wallets before accident. We let them do it with no problem because it is their funds an we respect it. We learned hard lesson by that mistake in withdrawals about development culture in implementing new features. We also made full revision of our security procedures, made additional checks, verifications. We had noting bad happened after accident and continue to work good.

I personally apologizes to our customers because of this accident.

crypto_curious

full member

Activity: 933

Merit: 175

This exchange is complete garbage. It's been coming for months. Maybe take more "vacation" time to enjoy "happy automn" this time.

Nexu$

full member

Activity: 144

Merit: 100

Quote from: c-cex on September 08, 2018, 08:38:52 PM

DOGE and LTC balances stolen

We regret to inform that there was a breach discovered by hackers in our withdrawal procedures. They was able to repeat same withdrawals several times. Our DOGE and LTC completely depleted. As DOGE and LTC withdrawals of current user balances are no more possible - we transfered them to "Hold" balances. So now you can see your past DOGE and LTC balance as "DOGE on hold" and "LTC on hold".

Important! Do not send DOGE or LTC to old addresses! You need to get new address for new deposits!

The breach is already fixed. All other balances including BTC are fine.

We welcome everybody to report hackers. We are open for authorities to collaborate. Here some info about hackers:

They used lots of different accounts to perform this attack.

Here is one of the DOGE addresses used to repeat withdrawals:
https://dogechain.info/address/DQuZ3f1kxWrrbTZYfc7d92Xrk6YRpcv1EE

Here is one of the LTC addresses used to repeat withdrawals:
https://chainz.cryptoid.info/ltc/address.dws?LQkk1ChBmu3zes9NUeBbXE7czFDMKMCLuc.htm

I do not see my balance doge.where to see? my balance is empty

Topic: C-CEX.com Trusted, Secure & Friendly Exchange Since 2013. 200+ Alts,USD,Low Fees - page 20. (Read 254705 times)