Pages:
Author

Topic: eXch - instant exchange BTC / LN / XMR / LTC / ETH / ERC20 (Read 27576 times)

legendary
Activity: 3472
Merit: 3507
Crypto Swap Exchange
My only complaint is that they are sometimes low on stablecoins in situations where I need them, and they don't support them on other networks other than Ethereum. I would also prefer paying less exchange fees when swapping for monero. Other than that, it's pretty great.
Lately, there have been dissatisfied users because there was not enough XMR or ETH in the reserves. At times almost all eXch reserves were in BTC, obviously day traders also used this exchange.
We can only guess what kind of mess it would be if there were more different coins and networks. On that side, I understand the exch team more clear that they are not expanding the list of supported coins.
legendary
Activity: 2730
Merit: 7065
This eXch.cx exchange is flawless in every way I have noticed. It is extremely low cost, extremely reliable, and fast. It is respectful of privacy, and extremely easy to use. I really don't understand why it isn't the #1 exchange platform by a wide margin.
Welcome to the club. People can be skeptical of eXch, but all that skepticism goes out the window the first time they try it. My only complaint is that they are sometimes low on stablecoins in situations where I need them, and they don't support them on other networks other than Ethereum. I would also prefer paying less exchange fees when swapping for monero. Other than that, it's pretty great.

Complaints I have include that it isn't easy to find on the internet by searching for exchanges. Ranking pages in top search results don't include this website in their exchange rankings.
I wouldn't bother too much about what ranking websites list. They go for the popular brands and copy from one another with a few changes. If you check a source like KYCnot.me, you will find eXch among the best-rated exchanges.
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
Should bitcointalk forum also remove favicoin?  Wink
I don't think so. This is a bitcoin forum, not a privacy oriented forum. Bitcointalk is doing ok imo, balancing usability and privacy.
Even if the favicon.ico (not "coin") can be used for tracking, that doesn't matter for sites where you use an account.
legendary
Activity: 1568
Merit: 6660
bitcoincleanup.com / bitmixlist.org
If you are correct and eXch is the number one non-KYC exchange, then it means scammers will keep up their attempts at regularly churning out duplicate websites in the hope they can scam as many people as possible. When one is closed down another will open therefore people have to be vigilant they do not end up on the wrong (scammers) URL.

It's pump season for Bitcoin, which also means it's phishing season. So everyone should be very careful about which websites they visit.
legendary
Activity: 2352
Merit: 6089
bitcoindata.science
A good idea would be just to remove it enterily in privacy oriented projects.
Should bitcointalk forum also remove favicoin?  Wink

I don't think so. This is a bitcoin forum, not a privacy oriented forum. Bitcointalk is doing ok imo, balancing usability and privacy.
legendary
Activity: 3906
Merit: 6249
Decentralization Maximalist
The favicon attack discussion is interesting, but to my knowledge, it would not be very relevant for exch (correct me if I'm wrong!).

I've read the page about the supercookie attack and the idea seems to be that a website could redirect users (on their own site, of course) across different favicons to assign it an unique user ID and then re-check the ID every time the website is visited via checking which ones of these favicons have been stored. But only the website itself can, at later visits, re-check that user ID. Thus the method is useful if a webmaster wants to know if an user has already visited the site, and what they're doing on the site. Of course this would mainly make sense inside of ads or iframes, or on large sites like social networks.

Now of course in theory if exch adds a favicon it could perform this attack too and track users even if they don't log the IP address. But it would be probably easily detectable if I'm not wrong. And I heavily doubt that they would like to destroy their excellent reputation that way Wink

AFAIK with this attack it is not possible to enable another website to know that you visited exch if exch is not cooperating (and adding such a "tracker favicon iframe" which installs the "supercookie" to their website).
legendary
Activity: 2212
Merit: 7064
A good idea would be just to remove it enterily in privacy oriented projects.
Should bitcointalk forum also remove favicoin?  Wink
I wouldn't worry about favicons so much, but this sounds something similar like tiny pixels sent with email to track receiver and notify sender if he opened email.
And I really don't think that eXch needs to have any favicon, short domain name is enough to look unique.

Firefox also has this special cache features for favicons. This is what I use. But you are using a customized version of it, like Tor Browser, which doesnt.
Librewolf is the best fork of Firefox browser I know, but recently there was new browser called Zen as another interesting fork.
hero member
Activity: 714
Merit: 1010
Crypto Swap Exchange
If you don't have an Onion site please PM me to have me try to find a consultant or programmer for you.
It's nice that you had a good experience with exch.cx and that you share your satisfaction. Same for me and I say this from first hand experience and not because I wear their signature campaign.

I wonder how and why you missed their onion link at the bottom right near their link to their Terms of Service?
legendary
Activity: 2534
Merit: 1713
Top Crypto Casino
I've reported both to Google Safe Browsing, so I hope they'll be blacklisted and blocked in most browsers as soon as possible.
If action is taken, it is good the scammers are going through the inconvenience of having their websites blacklisted. It will probably not stop them but should slow them down at last for a while.

If I'm not wrong, eXch is #1 non-KYC exchange actually. (even if not listed on CMC by the way)
If you are correct and eXch is the number one non-KYC exchange, then it means scammers will keep up their attempts at regularly churning out duplicate websites in the hope they can scam as many people as possible. When one is closed down another will open therefore people have to be vigilant they do not end up on the wrong (scammers) URL.
hero member
Activity: 504
Merit: 1065
Crypto Swap Exchange
It seems someone keeps being tenacious about trying to impersonate eXch... And the website found by SFR10 with the extension .cy reminded me of a similar site, discovered by Baadcaptain111 a while back... That one had the extension .ch. Maybe it's the same person behind these 2 clones...?

Indeed, someone is very persistent..
However I have the impression that the .xyz is more amateurish than the other copies I've seen so far, and seems to have been created by another author. Usually there are no such omissions or changes on the page:

    Or in the menu at the top:

Usually they don't bother to change anything to the page (except some phishing copies of .onion domain that remove the "phishing warning" banner, and even not always). On a side note, I see that the other .cy changed the company name at the bottom of the page and modified the hyperlink, something unusual compared to the other copies of the site.

Also, while thanking SFR10 for his alertness and to Lucius for his reporting, I was wondering if our dear padawan lookingtobuyhissecondvillagewithBTCtoo paid2 would like to give a hand of help...? paid2, your expertise is well known in taking websites down... can you do some more magic...? Smiley

Yeah, many thanks to SFR10 and to Lucius! Smiley
I've also reported the sites and to Google Safe Browsing too! I hope our reports will soon be considered by their respective team!
Lol, as SFR10 said, Namecheap's support is terrible, and extremely unqualified...

By the way, Google Safe Browsing gives me good results less and less often recently.. Undecided  The last sites I reported were never blacklisted, despite numerous reports, while some months ago it was always done in a few days. I hope this is only temporary.
legendary
Activity: 1680
Merit: 6524
Fully-fledged Merit Cycler|Spambuster'23|Pie Baker
I just found two more phishing websites...
I've reported both to Google Safe Browsing, so I hope they'll be blacklisted and blocked in most browsers as soon as possible.

It seems someone keeps being tenacious about trying to impersonate eXch... And the website found by SFR10 with the extension .cy reminded me of a similar site, discovered by Baadcaptain111 a while back... That one had the extension .ch. Maybe it's the same person behind these 2 clones...?

Also, while thanking SFR10 for his alertness and to Lucius for his reporting, I was wondering if our dear padawan lookingtobuyhissecondvillagewithBTCtoo paid2 would like to give a hand of help...? paid2, your expertise is well known in taking websites down... can you do some more magic...? Smiley
hero member
Activity: 504
Merit: 1065
Crypto Swap Exchange
This eXch.cx exchange is flawless in every way I have noticed. It is extremely low cost, extremely reliable, and fast. It is respectful of privacy, and extremely easy to use. I really don't understand why it isn't the #1 exchange platform by a wide margin.

If I'm not wrong, eXch is #1 non-KYC exchange actually. (even if not listed on CMC by the way)

If you don't have an Onion site please PM me to have me try to find a consultant or programmer for you.

http://hszyoqwrcp7cxlxnqmovp6vjvmnwj33g4wviuxqzq47emieaxjaperyd.onion/
member
Activity: 25
Merit: 0
This eXch.cx exchange is flawless in every way I have noticed. It is extremely low cost, extremely reliable, and fast. It is respectful of privacy, and extremely easy to use. I really don't understand why it isn't the #1 exchange platform by a wide margin.

Complaints I have include that it isn't easy to find on the internet by searching for exchanges. Ranking pages in top search results don't include this website in their exchange rankings. I hope this website never sells out at any price because it is run so well. Please train your children how to run the website.

If you don't have an Onion site please PM me to have me try to find a consultant or programmer for you.
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
I just found two more phishing websites...
~snip~


I've reported both to Google Safe Browsing, so I hope they'll be blacklisted and blocked in most browsers as soon as possible.
legendary
Activity: 2968
Merit: 3406
Crypto Swap Exchange
I just found two more phishing websites... One of them is new while the other one is a few months old and a victim of "another phishing website" briefly mentioned their domain name before editing his/her post [unedited version]:

Code:
cxch.xyz
Creation Date: 2024-11-08
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.4805240066

Code:
exch.cy
Domain Name : exch.cy
sri.ns.cloudflare.com   
millie.ns.cloudflare.com

There's an empty website that I hope it'd never go live due to who their registrar is [Name...cough...Cheap...cough (incompetent support staff)]:

Registrar URL: http://www.namecheap.com
Creation Date: 2024-11-03T17:56:53.88Z
legendary
Activity: 2352
Merit: 6089
bitcoindata.science
To put it this way: if you're not using Firefox, or a fork of Firefox, then you're short on privacy. Users accessing eXch via Chrome or Edge should already assume their in-browser activities are being tracked. Removing the favicon would do anything essential to enhance their privacy.

Firefox also has this special cache features for favicons. This is what I use. But you are using a customized version of it, like Tor Browser, which doesnt.
legendary
Activity: 1512
Merit: 7340
Farewell, Leo
Firefox,  Chrome, edge,  safari, etc all those keep favicon and 99% of the users use them.
I presume that the problem is designated towards individuals who are concerned about their privacy. If someone's using closed-source Chrome or Edge to access eXch, then their last concern should be the cached favicon.

To put it this way: if you're not using Firefox, or a fork of Firefox, then you're short on privacy. Users accessing eXch via Chrome or Edge should already assume their in-browser activities are being tracked. Removing the favicon would do nothing essential to enhance their privacy.
legendary
Activity: 2352
Merit: 6089
bitcoindata.science
There many discussions in the web about it
My Mullvad browser, which is a fork of Tor, deletes favicons after closure. I just tried it on a private window in Firefox, and it also clears them. (Network tab displays transferred bytes, as opposed to "cached".) Could you verify in non-private Firefox (if you have it), as well? At the moment, I cannot clear my browser's cache, because I'm working.


You are using a very privacy oriented browser which is not nearly common...

Firefox,  Chrome, edge,  safari, etc all those keep favicon and 99% of the users use them.
legendary
Activity: 1512
Merit: 7340
Farewell, Leo
There many discussions in the web about it
My Mullvad browser, which is a fork of Tor, deletes favicons after closure. I just tried it on a private window in Firefox, and it also clears them. (Network tab displays transferred bytes, as opposed to "cached".) Could you verify in non-private Firefox (if you have it), as well? At the moment, I cannot clear my browser's cache, because I'm working.

Edit: It also clears favicon cache in Tor.

Quote
I think something like this is the best anwser
The best answer is to not use spyware browser Chrome.
legendary
Activity: 3472
Merit: 3507
Crypto Swap Exchange
It doesn`t work.

As a web developer I have seen favicon remains in the cache even if you change the file, use Ctrl F5, browser cache, etc....

There many discussions in the web about it
I found some other solutions, on the server side, which might be a solution for eXch in this case.

Something like this should be in the .htaccess file
Code:

    Header set Cache-Control "no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires 0
Pages:
Jump to: