Nexious.com WARNING POOL OPERATOR IS NOT PAYING NOR RESPONDING

[Rikim4ru]

Wow... is still for real? 

 this really look like it! This guy run out with my 1btc payout! no way

[1715027457]

1715027457

[1715027457]

1715027457

[1715027457]

1715027457

[1715027457]

1715027457

[1715027457]

1715027457

[1715027457]

1715027457

[jacobmayes94]

From WHOIS on the domain name:

Domain Name: NEXIOUS.COM
Registry Domain ID: 1948593920_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2015-07-23T01:02:21.00Z
Creation Date: 2015-07-23T02:55:00.00Z
Registrar Registration Expiration Date: 2016-07-23T02:55:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: 5A5F7E81DB214E6498C2502C8327DFEB.PROTECT@WHOISGUARD.COM
Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: 5A5F7E81DB214E6498C2502C8327DFEB.PROTECT@WHOISGUARD.COM
Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: 5A5F7E81DB214E6498C2502C8327DFEB.PROTECT@WHOISGUARD.COM
Name Server: DAVE.NS.CLOUDFLARE.COM
Name Server: LADY.NS.CLOUDFLARE.COM
DNSSEC: unSigned
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2015-07-23T01:02:21.00Z


If anyone would like his details, you can contact the abuse part and they will disclose the data (those WHOIS information hiders are not effective) But it was pointed at cloudfare also.

http://www.whoisguard.com/contact-us.asp if shit hits the fan and he does a runner if someone wished to persue further, if he has done a runner. If the coins move and no contact from him and someone wishes to persue him for their losses, this is how to get his actual details. Seems though that it was pointed at cloudfare nameservers.

Pinging the domain name points to these IP details:

General IP Information



IP:
107.27.190.53

Decimal:
1796980277

Hostname:
107.27.190.53

ASN:
3651

ISP:
Sprint PCS

Organization:
Sprint PCS

Services:
None detected

Type:
Wireless Broadband

Assignment:
Static IP

Blacklist:
 

Geolocation Information


Continent:
North America

Country:
United States us flag  

State/Region:
Illinois

City:
Chicago

Latitude:
41.8826  (41° 52′ 57.36″ N)

Longitude:
-87.6292  (87° 37′ 45.12″ W)

Postal Code:
60602

Obviously it wont have the location fully, but time to work out what ISP it is. Searching whois, its a home IP. Sprint wireless: 107.27.190.53


NetRange:       107.24.0.0 - 107.63.255.255
CIDR:           107.32.0.0/11, 107.24.0.0/13
NetName:        SPRINT-WIRELESS

NetHandle:      NET-107-24-0-0-1
Parent:         NET107 (NET-107-0-0-0-0)
NetType:        Direct Allocation
OriginAS:      
Organization:   Sprint Communications, Inc. (SPRIN-86)
RegDate:        2010-11-10
Updated:        2012-03-02
Comment:        PLEASE REPORT ABUSE ISSUES TO mobileabuse@sprint.com.
Comment:        Members of Law Enforcement should contact Sprint Corporate Security Subpoena
Comment:        Compliance and Law Enforcement Assistance at 1-800-877-7330 and press option 1
Comment:        for assistance.
Ref:            http://whois.arin.net/rest/net/NET-107-24-0-0-1

This is his static IP as of 16:05 GMT 18/11/2015 107.27.190.53 if you wish to report to ISP also if he does a runner. But it has been hosted on a home connection, sprint wireless. this is what came up when I pinged nexious.com

Jacob

[Rikim4ru]

Adios my dear mining profit.

With all this not only he owes 25+10 btc overall. All the miners will never come back,even if he show up now. he had a good start tho Block at 53dif...

so bad.. so so bad.

[jonnybravo0311]

From WHOIS on the domain name:

Domain Name: NEXIOUS.COM
Registry Domain ID: 1948593920_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2015-07-23T01:02:21.00Z
Creation Date: 2015-07-23T02:55:00.00Z
Registrar Registration Expiration Date: 2016-07-23T02:55:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: 5A5F7E81DB214E6498C2502C8327DFEB.PROTECT@WHOISGUARD.COM
Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: 5A5F7E81DB214E6498C2502C8327DFEB.PROTECT@WHOISGUARD.COM
Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: 5A5F7E81DB214E6498C2502C8327DFEB.PROTECT@WHOISGUARD.COM
Name Server: DAVE.NS.CLOUDFLARE.COM
Name Server: LADY.NS.CLOUDFLARE.COM
DNSSEC: unSigned
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2015-07-23T01:02:21.00Z


If anyone would like his details, you can contact the abuse part and they will disclose the data (those WHOIS information hiders are not effective) But it was pointed at cloudfare also.

http://www.whoisguard.com/contact-us.asp if shit hits the fan and he does a runner if someone wished to persue further, if he has done a runner. If the coins move and no contact from him and someone wishes to persue him for their losses, this is how to get his actual details. Seems though that it was pointed at cloudfare nameservers.

Pinging the domain name points to these IP details:

General IP Information



IP:
107.27.190.53

Decimal:
1796980277

Hostname:
107.27.190.53

ASN:
3651

ISP:
Sprint PCS

Organization:
Sprint PCS

Services:
None detected

Type:
Wireless Broadband

Assignment:
Static IP

Blacklist:
 

Geolocation Information


Continent:
North America

Country:
United States us flag  

State/Region:
Illinois

City:
Chicago

Latitude:
41.8826  (41° 52′ 57.36″ N)

Longitude:
-87.6292  (87° 37′ 45.12″ W)

Postal Code:
60602

Obviously it wont have the location fully, but time to work out what ISP it is. Searching whois, its a home IP. Sprint wireless: 107.27.190.53


NetRange:       107.24.0.0 - 107.63.255.255
CIDR:           107.32.0.0/11, 107.24.0.0/13
NetName:        SPRINT-WIRELESS

NetHandle:      NET-107-24-0-0-1
Parent:         NET107 (NET-107-0-0-0-0)
NetType:        Direct Allocation
OriginAS:      
Organization:   Sprint Communications, Inc. (SPRIN-86)
RegDate:        2010-11-10
Updated:        2012-03-02
Comment:        PLEASE REPORT ABUSE ISSUES TO mobileabuse@sprint.com.
Comment:        Members of Law Enforcement should contact Sprint Corporate Security Subpoena
Comment:        Compliance and Law Enforcement Assistance at 1-800-877-7330 and press option 1
Comment:        for assistance.
Ref:            http://whois.arin.net/rest/net/NET-107-24-0-0-1

This is his static IP as of 16:05 GMT 18/11/2015 107.27.190.53 if you wish to report to ISP also if he does a runner. But it has been hosted on a home connection, sprint wireless. this is what came up when I pinged nexious.com

Jacob

Pinging which domain name?  when I ping nexious.com, I get a completely different IP address:

Code:

jonnybravo@ubuntu:~/Mining$ ping nexious.com
PING nexious.com (104.27.190.53) 56(84) bytes of data.
64 bytes from 104.27.190.53: icmp_seq=1 ttl=56 time=14.7 ms
64 bytes from 104.27.190.53: icmp_seq=2 ttl=56 time=14.8 ms
64 bytes from 104.27.190.53: icmp_seq=3 ttl=56 time=14.5 ms
64 bytes from 104.27.190.53: icmp_seq=4 ttl=56 time=15.3 ms
^C
--- nexious.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3004ms
rtt min/avg/max/mdev = 14.540/14.880/15.387/0.345 ms

If you look at the underlying details (try pinging stratum.nexious.com), you'll get the following:

Code:

jonnybravo@ubuntu:~/Mining$ ping stratum.nexious.com
PING nexious.cloudapp.net (40.112.147.124) 56(84) bytes of data.
^C
--- nexious.cloudapp.net ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 4999ms

That bit... nexious.cloudapp.net ... is what shows he's running on MS Azure.  Pinging nexious.cloudapp.net shows you the same results as pinging stratum.nexious.com.

I'd like to know how you got the IP address you did, and how you further dove into the details about finding it to be a Sprint PCS-owned ISP.  Share, please

EDIT: coins still haven't moved.

[jacobmayes94]

I pinged the  IP, 104.27.190.53 pinging nexious.com gave me that IP I did not ping the stratum one so that is the base domain name not a subdomain - checked at whatismyipaddress.com and the whois showed was the IP range and provider. If you search the whois database with the IP it will give you all the details on whos it is. If he does a runner you can get the details of him from the WHOIS guard provider by contacting its abuse, that would give you the address and phone number. The forum would also have his real IP if he didn't proxy. His address details provided he was careless would be in the whoisguard and i have found it trivial in the past to have the whois protection services release details. Coins still not moved? If he has indeed run off with $10,000 + then if anyone who mined there is out enough money, I didn't feel guilty about leaving the paper trail of maybe tracking him down to report him or do whatever. This is IF he is guilty, anything can happen so I don't want to point fingers just yet until those coins move without anyone being paid or consulted.

Search any IP in WHOIS and you can get the provider etc.  If you have the time the IP was assigned to that person its enough to report them to ISP, or in the case of thefts, the police or if you wish to take it further and you are able to get an address from whoisguard and validate it as the persons, they can be open to a suit if you have enough evidence, etc. If he has done a runner it sounds like he tried to get everyone to find a block for him then run with the cash, hed be quids in then. But innocent until proven guilty, as he could be ill, or whatever, but I don't get a good vibe from it.

Jacob

[eghigo]

And by any chance, have you heard of the BitClub Network (BitClub Pool). They look to be "trustworthy" but would like to have a more expert opinion from someone who heard about them

Read this:

https://bitcointalk.org/index.php?topic=1152263.0

Mine there at your peril.

Thanks for the advice. Will definitely stay away

[.anto.]

look bottom line is do you know where a pool owner lives?

Most of us don't.

According to his post below, he lives in New Zealand.

So anyway, my name is William and I'm from New Zealand (down the bottom of the world for who don't know) you can contact me on support@nexious.com or on IRC (#Nexious @ freenode) or PM me on here.

[jacobmayes94]

hmmmm maybe contact whoisguard and then see what they have on file.

[jonnybravo0311]

I pinged the  IP, 104.27.190.53 pinging nexious.com gave me that IP I did not ping the stratum one so that is the base domain name not a subdomain - checked at whatismyipaddress.com and the whois showed was the IP range and provider. If you search the whois database with the IP it will give you all the details on whos it is. If he does a runner you can get the details of him from the WHOIS guard provider by contacting its abuse, that would give you the address and phone number. The forum would also have his real IP if he didn't proxy. His address details provided he was careless would be in the whoisguard and i have found it trivial in the past to have the whois protection services release details. Coins still not moved? If he has indeed run off with $10,000 + then if anyone who mined there is out enough money, I didn't feel guilty about leaving the paper trail of maybe tracking him down to report him or do whatever. This is IF he is guilty, anything can happen so I don't want to point fingers just yet until those coins move without anyone being paid or consulted.

Search any IP in WHOIS and you can get the provider etc.  If you have the time the IP was assigned to that person its enough to report them to ISP, or in the case of thefts, the police or if you wish to take it further and you are able to get an address from whoisguard and validate it as the persons, they can be open to a suit if you have enough evidence, etc. If he has done a runner it sounds like he tried to get everyone to find a block for him then run with the cash, hed be quids in then. But innocent until proven guilty, as he could be ill, or whatever, but I don't get a good vibe from it.

Jacob

I had looked up the IP addresses... the one I get from pinging nexious.com is cloud flare in San Fran.  The cloudapp.net IP address I get shows MS in San Fran as well.  That's why I asked you how you got the details you did .

And the coins still haven't moved...

[spiker777]

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=104.27.190.53?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange:       104.16.0.0 - 104.31.255.255
CIDR:           104.16.0.0/12
NetName:        CLOUDFLARENET
NetHandle:      NET-104-16-0-0-1
Parent:         NET104 (NET-104-0-0-0-0)
NetType:        Direct Assignment
OriginAS:       AS13335
Organization:   CloudFlare, Inc. (CLOUD14)
RegDate:        2014-03-28
Updated:        2015-10-01
Comment:        https://www.cloudflare.com
Ref:            http://whois.arin.net/rest/net/NET-104-16-0-0-1


OrgName:        CloudFlare, Inc.
OrgId:          CLOUD14
Address:        101 Townsend Street
City:           San Francisco
StateProv:      CA
PostalCode:     94107
Country:        US
RegDate:        2010-07-09
Updated:        2015-10-08
Comment:        http://www.cloudflare.com/
Ref:            http://whois.arin.net/rest/org/CLOUD14

[.anto.]

Perhaps the admin of this forum could help us querying his PC or mobile IP address that he used to log in to this forum. I don't think investigating the scam is privacy violation. But I am not entire sure about though. I am not a lawyer.

[philipma1957]

Well as of right now it is not a scam.  Funds are not missing.  So admin may make us wait.


The guy may have been using a laptop to run the setup and wrecked his car when the block hit.

Thus no contact. He could be knocked out in a hospital bed.   

I think not.

[xZork]

Not that it really matters because I am pretty sure that account will never log back in, but I went ahead and left Negative Feedback. If he does show up I will revise.

[.anto.]

The guy may have been using a laptop to run the setup and wrecked his car when the block hit.

Yes. The chance for that to happen is very high. The same as the chance to hit a new block with 1 GH/s miner. Sorry. I couldn't resist.

[itsnogood]

Nexious - You are probably reading this thread, so lets just assume you know exactly what is going on by now.

If this is just a scam then you will probably just disappear with the coins and not really give a shit but maybe, just maybe, you have another reason for pulling the plug. I'm sure we would be willing to hear out any other reasons.
At the end of the day I want to be paid what's owed. If you haven't got the money to pay the bonus and rewards then just say and maybe it can be worked out.

[jonnybravo0311]

If he's reading it, he's using a different account.  Nexious still hasn't logged in since his appearance yesterday about 15 minutes before I found the block.  There also hasn't been any response on IRC and emails to support@nexious.com continue to bounce.

Since the coins haven't moved, I'm not whipping out the scammer card just yet.

[spiker777]

https://blockchain.info/ru/address/1GBo1f2tzVx5jScV9kJXPUP9RjvYXuNzV7

[Rikim4ru]

it's gone.

Bye bye.

[.anto.]

Well... now what? The coin has been moved to 2 addresses.

Is there anybody living in New Zealand? According to his profile https://bitcointalk.org/index.php?action=profile;u=532273, he lives in the country with that local time.

[jonnybravo0311]

And the coins have been moved...

The coins are now split into two new wallet addresses.  https://blockchain.info/address/1GBo1f2tzVx5jScV9kJXPUP9RjvYXuNzV7