Ninjastic
PostEdited versionsQuotes to this post
Next scheduled rescrape ... never
Version 1
Last scraped
Scraped on 07/04/2025, 15:57:06 UTC
Quote from: joker_josue on April 05, 2025, 08:04:32 AM
Quote from: eXch Support on April 05, 2025, 06:45:31 AM
Absolutely. We invite you to multiply your reports.

Also, for monero[.]forex and darknetbible[.]info, we invite you to add a screenshot of their respective page from Virustotal in your reports, to mention to the registrar that they are flagged as malicious/suspicious by threat intelligence providers.

Again, we would also like to add that the most motivated and active members will receive nice bonuses.

A question about the approaches we are/can take.

monero[.]forex
In this case, looking at the website's content, what we see is a "news portal" - probably fake, as I didn't even check it. So saying that it is a scam and against the real "eXch" may not make sense. In this case, the approach has to be different, we have to look for evidence that he is spreading phishing and creating scams. The only indication that leads to eXch (that I found) is a link they have to a certain "exch[.]best". Shouldn't we be going after that domain?

darknetbible[.]info
The same happens with this domain. The content of the site has nothing to do with the real eXch, and I couldn't even find any links to any similar fake site. In fact, I didn't even find external links, does it have external links!?
So how can I contact the domain registrar and tell them it is a fake website from "eXch"? Logically, when the company analyzes the websites and sees nothing similar, it will ignore the complaint. In fact, we may even run the risk of giving the impression that eXch is trying to take down these sites.


So what would be the most appropriate approach? It is perhaps that at this moment, it may be complicated for us to repeat the complaints, taking into account that many already talk about eXch without any "copy" between these sites.


Maybe I'm the one who isn't able to relate everything, but more information is needed to be more efficient. If anyone can share, I would appreciate it.


Just one more note, from what I noticed, in both domains, VirusTotal only records a "Security vendors' analysis" as it has identified them to be fakes. So, just one indication, I think it's not enough, to give weight to our complaints. So what else can we do, how can we reinforce these points?



Using an alt because I don't want to be dragged into this... darknetbible[Suspicious link removed.]info isn't a phishing site.


/bible/darknetmarkets/choosing_a_market]Choosing a Darknet Market: "Daunt.Link is the only recommend source of darknet market links now. But as always, links should be verified!" - then it explains how to PGP verify a site.

This is good information.
Original archived Re: [OPEN] eXch Anti-Phishing Campaign
Scraped on 07/04/2025, 15:51:47 UTC
Quote from: joker_josue on April 05, 2025, 08:04:32 AM
Quote from: eXch Support on April 05, 2025, 06:45:31 AM
Absolutely. We invite you to multiply your reports.

Also, for monero[.]forex and darknetbible[.]info, we invite you to add a screenshot of their respective page from Virustotal in your reports, to mention to the registrar that they are flagged as malicious/suspicious by threat intelligence providers.

Again, we would also like to add that the most motivated and active members will receive nice bonuses.

A question about the approaches we are/can take.

monero[.]forex
In this case, looking at the website's content, what we see is a "news portal" - probably fake, as I didn't even check it. So saying that it is a scam and against the real "eXch" may not make sense. In this case, the approach has to be different, we have to look for evidence that he is spreading phishing and creating scams. The only indication that leads to eXch (that I found) is a link they have to a certain "exch[.]best". Shouldn't we be going after that domain?

darknetbible[.]info
The same happens with this domain. The content of the site has nothing to do with the real eXch, and I couldn't even find any links to any similar fake site. In fact, I didn't even find external links, does it have external links!?
So how can I contact the domain registrar and tell them it is a fake website from "eXch"? Logically, when the company analyzes the websites and sees nothing similar, it will ignore the complaint. In fact, we may even run the risk of giving the impression that eXch is trying to take down these sites.


So what would be the most appropriate approach? It is perhaps that at this moment, it may be complicated for us to repeat the complaints, taking into account that many already talk about eXch without any "copy" between these sites.


Maybe I'm the one who isn't able to relate everything, but more information is needed to be more efficient. If anyone can share, I would appreciate it.


Just one more note, from what I noticed, in both domains, VirusTotal only records a "Security vendors' analysis" as it has identified them to be fakes. So, just one indication, I think it's not enough, to give weight to our complaints. So what else can we do, how can we reinforce these points?



Using an alt because I don't want to be dragged into this... [Suspicious link removed] isn't a phishing site.


/bible/darknetmarkets/choosing_a_market]Choosing a Darknet Market: "Daunt.Link is the only recommend source of darknet market links now. But as always, links should be verified!" - then it explains how to PGP verify a site.

This is good information.