Bitcoin Forum

Economy => Scam Accusations => Topic started by: opticbit on August 10, 2013, 09:22:07 PM



Title: Phishing site: mtQCx.com
Post by: opticbit on August 10, 2013, 09:22:07 PM
A friend was up late, he made a few mistakes last night... Searched for mtgox, instead of type it in to URL Clicked on Google Ad, instead of correct link. Didn't see the difference between mtqcx and mtgox. Didn't have 2 step set authentication set up..

I contacted Mike H. At Google and he quickly took the ad down...

Not sure of other actions he took.
I got him to add two factor today after an expensive lesson

64btc stolen from MTGox acct, sitting here. 12U4EvYfcMQXJD6okRLUWBaaeq8h3GN8X3
Any suggestions on getting it back, or catching the guy?


Title: Re: Phishing site: [phishing]
Post by: opticbit on August 14, 2013, 04:12:53 AM
Monday, Google flagged site as phishing.

Complaint filed with ic3.

Called godaddy a few times, site taken down today.

Thinking about a reward for return of funds/arrest of phishing site admin


Title: Re: Phishing site: [phishing]
Post by: ITsTanked on August 17, 2013, 01:01:00 AM
Now site is down admin never to come back.  There is no chance now.  Phishers use proxy and other to make anonymous the site anyway.  Only way to fight such is with fire to fire.  Phishing site usually poorly made security and easy to hack and install java drive by in admin panel to track real owner but now because site is gone, he get away 100%   You did the responisble way, not everyone like my way. 

Here is whois, but probably fake name

      

Domain Name: MTQCX.COM
Registrar URL: http://www.godaddy.com
Updated Date: 2013-08-09 17:44:32
Creation Date: 2013-08-09 17:44:32
Registrar Expiration Date: 2014-08-09 17:44:32
Registrar: GoDaddy.com, LLC
Registrant Name: qing yang
Registrant Organization:
Registrant Street: xionghuaxiaoqu 3-193, huayuanlu
Registrant City: hongqiao
Registrant State/Province: tianjin
Registrant Postal Code: 301023
Registrant Country: China
Admin Name: qing yang
Admin Organization:
Admin Street: xionghuaxiaoqu 3-193, huayuanlu
Admin City: hongqiao
Admin State/Province: tianjin
Admin Postal Code: 301023
Admin Country: China
Admin Phone: 02293817381
Admin Fax:
Admin Email: nolaygs312l@gmail.com
Tech Name: qing yang
Tech Organization:
Tech Street: xionghuaxiaoqu 3-193, huayuanlu
Tech City: hongqiao
Tech State/Province: tianjin
Tech Postal Code: 301023
Tech Country: China
Tech Phone: 02293817381
Tech Fax:
Tech Email: nolaygs312l@gmail.com
Name Server: NS25.DOMAINCONTROL.COM
Name Server: NS26.DOMAINCONTROL.COM


Title: Re: Phishing site: [phishing]
Post by: Bitcoin Scammer on August 17, 2013, 01:14:11 AM
A simple google search would have brought up these guys as frauds. These damn phishing sites pop up quicker then zits on a teenager.


Title: Re: Phishing site: [phishing]
Post by: DiamondCardz on August 20, 2013, 05:54:01 PM
probably fake name

Wouldn't be surprised.


Title: Re: Phishing site: [phishing]
Post by: opticbit on August 26, 2013, 09:47:45 AM
Mtpcx.com has similar who is info.


Title: Re: Phishing site: [phishing]
Post by: opticbit on September 12, 2013, 08:33:53 AM
Its been 1 month.

The coins are sitting jin the same account still

Google and GoDaddy have been served.
Need to look up mailing address for MtGox.

No response from Google or Godaddy.

Mtgox support: "Sorry for your inconvenience."


Title: Re: Phishing site: [phishing]
Post by: b!z on September 12, 2013, 01:09:11 PM
Sorry about your loss. Google really needs to do something about the phishing links in ads.


Title: Re: Phishing site: [phishing]
Post by: grue on September 12, 2013, 01:54:58 PM
Mtgox support: "Sorry for your inconvenience."
what do you expect them to do about it?