eXch - instant exchange BTC / LN / XMR / LTC / ETH / ERC20 - page 9.

Cricktor

hero member

Activity: 714

Merit: 1010

Crypto Swap Exchange

Quote from: caroasi on November 20, 2024, 06:37:50 AM

If you don't have an Onion site please PM me to have me try to find a consultant or programmer for you.

It's nice that you had a good experience with exch.cx and that you share your satisfaction. Same for me and I say this from first hand experience and not because I wear their signature campaign.

I wonder how and why you missed their onion link at the bottom right near their link to their Terms of Service?

JollyGood

legendary

Activity: 2534

Merit: 1713

Top Crypto Casino

Quote from: Lucius on November 20, 2024, 06:13:21 AM

I've reported both to Google Safe Browsing, so I hope they'll be blacklisted and blocked in most browsers as soon as possible.

If action is taken, it is good the scammers are going through the inconvenience of having their websites blacklisted. It will probably not stop them but should slow them down at last for a while.

Quote from: paid2 on November 20, 2024, 06:59:36 AM

If I'm not wrong, eXch is #1 non-KYC exchange actually. (even if not listed on CMC by the way)

If you are correct and eXch is the number one non-KYC exchange, then it means scammers will keep up their attempts at regularly churning out duplicate websites in the hope they can scam as many people as possible. When one is closed down another will open therefore people have to be vigilant they do not end up on the wrong (scammers) URL.

paid2

hero member

Activity: 504

Merit: 1065

Crypto Swap Exchange

Quote from: GazetaBitcoin on November 20, 2024, 09:40:43 AM

It seems someone keeps being tenacious about trying to impersonate eXch... And the website found by SFR10 with the extension .cy reminded me of a similar site, discovered by Baadcaptain111 a while back... That one had the extension .ch. Maybe it's the same person behind these 2 clones...?

Indeed, someone is very persistent..
However I have the impression that the .xyz is more amateurish than the other copies I've seen so far, and seems to have been created by another author. Usually there are no such omissions or changes on the page:

Or in the menu at the top:

Usually they don't bother to change anything to the page (except some phishing copies of .onion domain that remove the "phishing warning" banner, and even not always). On a side note, I see that the other .cy changed the company name at the bottom of the page and modified the hyperlink, something unusual compared to the other copies of the site.

Quote from: GazetaBitcoin on November 20, 2024, 09:40:43 AM

Also, while thanking SFR10 for his alertness and to Lucius for his reporting, I was wondering if our dear padawan ~~lookingtobuyhissecondvillagewithBTCtoo~~ paid2 would like to give a hand of help...? paid2, your expertise is well known in taking websites down... can you do some more magic...?

Yeah, many thanks to SFR10 and to Lucius!

I've also reported the sites and to Google Safe Browsing too! I hope our reports will soon be considered by their respective team!
Lol, as SFR10 said, Namecheap's support is terrible, and extremely unqualified...

By the way, Google Safe Browsing gives me good results less and less often recently.. Undecided

The last sites I reported were never blacklisted, despite numerous reports, while some months ago it was always done in a few days. I hope this is only temporary.

GazetaBitcoin

legendary

Activity: 1680

Merit: 6524

Fully-fledged Merit Cycler|Spambuster'23|Pie Baker

Quote from: Lucius on November 20, 2024, 06:13:21 AM

Quote from: SFR10 on November 19, 2024, 02:58:51 PM

I just found two more phishing websites...

I've reported both to Google Safe Browsing, so I hope they'll be blacklisted and blocked in most browsers as soon as possible.

It seems someone keeps being tenacious about trying to impersonate eXch... And the website found by SFR10 with the extension .cy reminded me of a similar site, discovered by Baadcaptain111 a while back... That one had the extension .ch. Maybe it's the same person behind these 2 clones...?

Also, while thanking SFR10 for his alertness and to Lucius for his reporting, I was wondering if our dear padawan ~~lookingtobuyhissecondvillagewithBTCtoo~~ paid2 would like to give a hand of help...? paid2, your expertise is well known in taking websites down... can you do some more magic...?

paid2

hero member

Activity: 504

Merit: 1065

Crypto Swap Exchange

Quote from: caroasi on November 20, 2024, 06:37:50 AM

This eXch.cx exchange is flawless in every way I have noticed. It is extremely low cost, extremely reliable, and fast. It is respectful of privacy, and extremely easy to use. I really don't understand why it isn't the #1 exchange platform by a wide margin.

If I'm not wrong, eXch is #1 non-KYC exchange actually. (even if not listed on CMC by the way)

Quote from: caroasi on November 20, 2024, 06:37:50 AM

If you don't have an Onion site please PM me to have me try to find a consultant or programmer for you.

http://hszyoqwrcp7cxlxnqmovp6vjvmnwj33g4wviuxqzq47emieaxjaperyd.onion/

caroasi

member

Activity: 99

Merit: 18

This eXch.cx exchange is flawless in every way I have noticed. It is extremely low cost, extremely reliable, and fast. It is respectful of privacy, and extremely easy to use. I really don't understand why it isn't the #1 exchange platform by a wide margin.

Complaints I have include that it isn't easy to find on the internet by searching for exchanges. Ranking pages in top search results don't include this website in their exchange rankings. I hope this website never sells out at any price because it is run so well. Please train your children how to run the website.

If you don't have an Onion site please PM me to have me try to find a consultant or programmer for you.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: SFR10 on November 19, 2024, 02:58:51 PM

I just found two more phishing websites...
~snip~

I've reported both to Google Safe Browsing, so I hope they'll be blacklisted and blocked in most browsers as soon as possible.

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

I just found two more phishing websites... One of them is new while the other one is a few months old and a victim of "another phishing website" briefly mentioned their domain name before editing his/her post ^{[unedited version]}:

Code:

cxch.xyz

Quote from: https://www.namecheap.com/domains/whois/result?domain=cxch.xyz

Creation Date: 2024-11-08
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.4805240066

Code:

exch.cy

Quote from: https://registry.nic.cy/cy-ui/home/84e1b951-723f-4ca9-9d4c-816f77b36ec9;ending=cy

Domain Name : exch.cy
sri.ns.cloudflare.com
millie.ns.cloudflare.com

There's an empty website that I hope it'd never go live due to who their registrar is ^{[Name...cough...Cheap...cough (incompetent support staff)]}:

Quote from: https://www.namecheap.com/domains/whois/result?domain=exch.bid

Registrar URL: http://www.namecheap.com
Creation Date: 2024-11-03T17:56:53.88Z

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Quote from: BlackHatCoiner on November 19, 2024, 09:50:32 AM

To put it this way: if you're not using Firefox, or a fork of Firefox, then you're short on privacy. Users accessing eXch via Chrome or Edge should already assume their in-browser activities are being tracked. Removing the favicon would do anything essential to enhance their privacy.

Firefox also has this special cache features for favicons. This is what I use. But you are using a customized version of it, like Tor Browser, which doesnt.

BlackHatCoiner

legendary

Activity: 1512

Merit: 7340

Farewell, Leo

Quote from: bitmover on November 19, 2024, 09:21:56 AM

Firefox, Chrome, edge, safari, etc all those keep favicon and 99% of the users use them.

I presume that the problem is designated towards individuals who are concerned about their privacy. If someone's using closed-source Chrome or Edge to access eXch, then their last concern should be the cached favicon.

To put it this way: if you're not using Firefox, or a fork of Firefox, then you're short on privacy. Users accessing eXch via Chrome or Edge should already assume their in-browser activities are being tracked. Removing the favicon would do nothing essential to enhance their privacy.

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Quote from: BlackHatCoiner on November 19, 2024, 07:44:41 AM

Quote from: bitmover on November 19, 2024, 07:19:14 AM

There many discussions in the web about it

My Mullvad browser, which is a fork of Tor, deletes favicons after closure. I just tried it on a private window in Firefox, and it also clears them. (Network tab displays transferred bytes, as opposed to "cached".) Could you verify in non-private Firefox (if you have it), as well? At the moment, I cannot clear my browser's cache, because I'm working.

You are using a very privacy oriented browser which is not nearly common...

Firefox, Chrome, edge, safari, etc all those keep favicon and 99% of the users use them.

BlackHatCoiner

legendary

Activity: 1512

Merit: 7340

Farewell, Leo

Quote from: bitmover on November 19, 2024, 07:19:14 AM

There many discussions in the web about it

My Mullvad browser, which is a fork of Tor, deletes favicons after closure. I just tried it on a private window in Firefox, and it also clears them. (Network tab displays transferred bytes, as opposed to "cached".) Could you verify in non-private Firefox (if you have it), as well? At the moment, I cannot clear my browser's cache, because I'm working.

Edit: It also clears favicon cache in Tor.

Quote

I think something like this is the best anwser

The best answer is to not use spyware browser Chrome.

examplens

legendary

Activity: 3514

Merit: 3585

Crypto Swap Exchange

Quote from: bitmover on November 19, 2024, 07:19:14 AM

It doesn`t work.

As a web developer I have seen favicon remains in the cache even if you change the file, use Ctrl F5, browser cache, etc....

There many discussions in the web about it

I found some other solutions, on the server side, which might be a solution for eXch in this case.

Something like this should be in the .htaccess file

Code:


    Header set Cache-Control "no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires 0

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Quote from: BlackHatCoiner on November 19, 2024, 07:11:43 AM

Quote from: Lucius on November 19, 2024, 07:03:49 AM

1. Where is that supercookie usually found in browsers and how to delete it manually?

Not sure what you mean by "where", it is stored in the same way as other cookies. You can delete it by clearing the cache.

It doesn`t work.

As a web developer I have seen favicon remains in the cache even if you change the file, use Ctrl F5, browser cache, etc....

There many discussions in the web about it

https://stackoverflow.com/questions/37997070/why-are-favicons-cached-longer
https://superuser.com/questions/375321/how-to-refresh-bookmark-favicons-in-chrome
https://stackoverflow.com/questions/2208933/how-do-i-force-a-favicon-refresh
https://www.stirtingale.com/guides/2018/01/how-to-favicon-flush-2/

I think something like this is the best anwser:

Quote

Close Chrome
Open your User Data folder
Delete the Favicons file
Run Chrome
Visit sites to force the icons to be re-downloaded

BlackHatCoiner

legendary

Activity: 1512

Merit: 7340

Farewell, Leo

Quote from: Lucius on November 19, 2024, 07:03:49 AM

1. Where is that supercookie usually found in browsers and how to delete it manually?

Not sure what you mean by "where", it is stored in the same way as other cookies. You can delete it by clearing the cache.

Quote

2. Does this supercookie have any effect on the Tor browser and does it remain in it after we close the browser?

Unless specified otherwise, nothing related to your previous browsing remains in Tor, after you've closed it. It clears cache on closure.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Honestly, I didn't even know that icon had an official name, much less that it could be used to track users. What is particularly worrying is that it cannot be deleted in the usual way, and I have two questions about that :

1. Where is that supercookie usually found in browsers and how to delete it manually?

2. Does this supercookie have any effect on the Tor browser and does it remain in it after we close the browser?

examplens

legendary

Activity: 3514

Merit: 3585

Crypto Swap Exchange

Quote from: bitmover on November 19, 2024, 05:33:51 AM

Quote from: Cricktor on November 18, 2024, 04:03:40 PM

Most browsers allow to search for a specific tab which might be faster than scrolling through all your tabs and finding one by icon. Next option is to search in bookmarks or put a favorite on your new tab page, whatever suits your needs.

Could a favicon be a privacy issue, maybe on other pages? (Maybe I confuse a few things; the favicon topic is a bit blurry from the top of my head. I have some sort of vage memory of something I read in the past where a site could exploit somehow the existance of a favicon in the browser's cache to obtain ... whatever...).

I guess I wouldn't mind a nifty favicon either... Wink

I didn't know about this .

I researched about it, and it is true. Websites can really track users uaing a script under the favicon.

I honestly didn't even know about this until now. (I never even researched this topic) Although now that I think about it, the favicon often remains for a long time, even if I remove it from a site I manage.

Quote from: LoyceV on November 19, 2024, 03:57:24 AM

Quote from: ABCbits on November 19, 2024, 03:26:32 AM

But favicon addition would be great, since people who take their privacy seriously probably use Tor Browser anyway to visit eXch.

Easy privacy fix: don't add the favicon icon to the .onion site.

I would accept this option.

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Quote from: Cricktor on November 18, 2024, 04:03:40 PM

Quote from: examplens on November 18, 2024, 06:29:49 AM

~~~

Most browsers allow to search for a specific tab which might be faster than scrolling through all your tabs and finding one by icon. Next option is to search in bookmarks or put a favorite on your new tab page, whatever suits your needs.

Could a favicon be a privacy issue, maybe on other pages? (Maybe I confuse a few things; the favicon topic is a bit blurry from the top of my head. I have some sort of vage memory of something I read in the past where a site could exploit somehow the existance of a favicon in the browser's cache to obtain ... whatever...).

I guess I wouldn't mind a nifty favicon either... Wink

I didn't know about this .

I researched about it, and it is true. Websites can really track users uaing a script under the favicon.

Favicon is basically a supercookie which persists over cleaning browser cache and crosses incognito mode of browsers.
However, to be used like this, the website must be willing to do it.

A good idea would be just to remove it enterily in privacy oriented projects.

https://www.schneier.com/blog/archives/2021/02/browser-tracking-using-favicons.html

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: ABCbits on November 19, 2024, 03:26:32 AM

But favicon addition would be great, since people who take their privacy seriously probably use Tor Browser anyway to visit eXch.

Easy privacy fix: don't add the favicon icon to the .onion site.

ABCbits

legendary

Activity: 2870

Merit: 7490

Crypto Swap Exchange

Quote from: Cricktor on November 18, 2024, 04:03:40 PM

Could a favicon be a privacy issue, maybe on other pages? (Maybe I confuse a few things; the favicon topic is a bit blurry from the top of my head. I have some sort of vage memory of something I read in the past where a site could exploit somehow the existance of a favicon in the browser's cache to obtain ... whatever...).

Yes, it's one of less-known privacy issue.

Quote from: https://privacytests.org/

favicon cache

A favicon is an icon that represents a website, typically shown in browser tab and bookmarks menu. If the favicon cache is not partitioned, it can be used to track users across websites.

But favicon addition would be great, since people who take their privacy seriously probably use Tor Browser anyway to visit eXch.

Topic: eXch - instant exchange BTC / LN / XMR / LTC / ETH / ERC20 - page 9. (Read 31108 times)