http://www.asic-technologies.com/ http://asic-tech.com

[BecomingPhill]

Hi all,

1st of all, AFRICA IS A CONTINENT. Try to at least speak like y'all got a western education.

These assholes took me for 7.4 BTC a couple of months ago. I assume most of you other victims got the email yesterday talking about refunds? I mailed info@asic-market.com and some guy answered back saying that Asic-Tech is 'blackmailing' him by forwarding their unsatisfied customers to them.

Now I don't know what the hell 'blackmailing' means, but it sure as hell sounds suspect to me. Has anyone managed to find more details on the owner of the site? Whois gives:


Registrar History: 1 registrar NS History: 1 change    on 2 unique name servers    over 0 year. IP History: 1    change on 2 unique IP addresses over 0 years. Whois History: 26 records have been archived since 2013-05-13 . Reverse IP: 1,681 other sites hosted on this server. Join DomainTools to start monitoring this domain name Preview the complete Domain Report for asic-technologies.com

Domain Name: ASIC-TECHNOLOGIES.COM
Registry Domain ID:
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2013-11-29 00:53:23
Creation Date: 2013-05-13 01:02:46
Registrar Registration Expiration Date: 2014-05-13 01:02:46
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Reseller: Fasthosts Internet Limited
Reseller:
Reseller: +44.8445830777
Reseller: http://www.Fasthosts.co.uk
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registry Registrant ID:
Registrant Name: Contact Privacy Inc. Customer 0134664681
Registrant Organization: Contact Privacy Inc. Customer 0134664681
Registrant Street: 96 Mowat Ave
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M6K 3M1
Registrant Country: CA
Registrant Phone: +1.4165385457
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:
Registry Admin ID:
Admin Name: Contact Privacy Inc. Customer 0134664681
Admin Organization: Contact Privacy Inc. Customer 0134664681
Admin Street: 96 Mowat Ave
Admin City: Toronto
Admin State/Province: ON
Admin Postal Code: M6K 3M1
Admin Country: CA
Admin Phone: +1.4165385457
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:
Registry Tech ID:
Tech Name: Contact Privacy Inc. Customer 0134664681
Tech Organization: Contact Privacy Inc. Customer 0134664681
Tech Street: 96 Mowat Ave
Tech City: Toronto
Tech State/Province: ON
Tech Postal Code: M6K 3M1
Tech Country: CA
Tech Phone: +1.4165385457
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:
Name Server: NS2.LIVEDNS.CO.UK
Name Server: NS3.LIVEDNS.CO.UK
Name Server: NS1.LIVEDNS.CO.UK
DNSSEC:
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

Registration Service Provider:
    Fasthosts Internet Limited,
    +44.8445830777
    +44.8708883760 (fax)
    http://www.Fasthosts.co.uk
    http://facebook.com/fasthostsinternet

Phone number is dead or just a long ringer. Has anyone managed to pinpoint where their server is being accessed from? I think with the combined evidence of posts on bitcointalk about this company (and boy there a quite a number of threads on Asic-tech) we can take this guy down if he's found. If I can get an address, I can send somebody there to check it out. There have been nothing but naysayers and pessimists every-time I bring the subject up of tracking this motherfucker down but I think the more he scams the more tracks he's leaving behind.

[1715092077]

1715092077

[1715092077]

1715092077

[1715092077]

1715092077

[BecomingPhill]

Asic Market and ASIC Technologies are the same cunts. Why the hell there isn't a fucking large sticky on the forum root about these assholes is beyond me. Excuse my profanity but the nonchalant way these guys respond to emails and are STILL bagging victims ,on the daily, really busts my chops.

I also think these guys are regularly monitoring the forum to see if anyone is making any headway in finding them.

[BecomingPhill]

So this guy just sent me three emails filled with 'Nigger' Facebook memes. This guy is DEFINITELY a suburban white boy, my money is on Canada. There is no way you will have that kind of cultural influence coming from some African backwater country.

Wow five now! The images provide valuable clues, they're rascist as hell but I'll repost the emails in original if it could help anyone track this puta....or make fun of me, whatever. I just want to catch this thug.

Edit:

Did a trace on the email it originates from 62.205.82.51

IP2location gives:

Sender



IP Address   62.205.82.51
Location    BELGIUM, OOST-VLAANDEREN, SINT-NIKLAAS
Latitude, Longitude   51.16509, 4.1437 (51°9'54"E   4°8'37"N)
Connection through   TELENET N.V. HOTSPOT
Local Time   05 Dec, 2013 08:25 PM (UTC +01:00)
Net Speed   DSL
Area Code   03
IDD Code   32
ZIP Code   9112
Weather Station   SINT-NIKLAAS (BEXX0019)
Mobile Country Code (MCC)   -
Mobile Network Code (MNC)   -
Carrier Name   -
 
Carrier


IP Address   74.125.82.169
Location    UNITED STATES, CALIFORNIA, MOUNTAIN VIEW
Latitude, Longitude   37.405992, -122.078515 (37°24'22"W   -122°4'43"N)
Connection through   GOOGLE INC.
Local Time   06 Dec, 2013 03:25 AM (UTC -08:00)
Net Speed   COMP
Area Code   650
IDD Code   1
ZIP Code   94043
Weather Station   MOUNTAIN VIEW (USCA0746)
Mobile Country Code (MCC)   -
Mobile Network Code (MNC)   -
Carrier Name   -
 


You
You

[Bitcoin Scammer]

100% garbage!  ASIC and everything related to mining has a 90% scam success rate.

[inevertell]

Hi all,

1st of all, AFRICA IS A CONTINENT. Try to at least speak like y'all got a western education.

These assholes took me for 7.4 BTC a couple of months ago. I assume most of you other victims got the email yesterday talking about refunds? I mailed info@asic-market.com and some guy answered back saying that Asic-Tech is 'blackmailing' him by forwarding their unsatisfied customers to them.

Now I don't know what the hell 'blackmailing' means, but it sure as hell sounds suspect to me. Has anyone managed to find more details on the owner of the site? Whois gives:


Registrar History: 1 registrar NS History: 1 change    on 2 unique name servers    over 0 year. IP History: 1    change on 2 unique IP addresses over 0 years. Whois History: 26 records have been archived since 2013-05-13 . Reverse IP: 1,681 other sites hosted on this server. Join DomainTools to start monitoring this domain name Preview the complete Domain Report for asic-technologies.com

Domain Name: ASIC-TECHNOLOGIES.COM
Registry Domain ID:
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2013-11-29 00:53:23
Creation Date: 2013-05-13 01:02:46
Registrar Registration Expiration Date: 2014-05-13 01:02:46
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Reseller: Fasthosts Internet Limited
Reseller:
Reseller: +44.8445830777
Reseller: http://www.Fasthosts.co.uk
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registry Registrant ID:
Registrant Name: Contact Privacy Inc. Customer 0134664681
Registrant Organization: Contact Privacy Inc. Customer 0134664681
Registrant Street: 96 Mowat Ave
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M6K 3M1
Registrant Country: CA
Registrant Phone: +1.4165385457
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:
Registry Admin ID:
Admin Name: Contact Privacy Inc. Customer 0134664681
Admin Organization: Contact Privacy Inc. Customer 0134664681
Admin Street: 96 Mowat Ave
Admin City: Toronto
Admin State/Province: ON
Admin Postal Code: M6K 3M1
Admin Country: CA
Admin Phone: +1.4165385457
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:
Registry Tech ID:
Tech Name: Contact Privacy Inc. Customer 0134664681
Tech Organization: Contact Privacy Inc. Customer 0134664681
Tech Street: 96 Mowat Ave
Tech City: Toronto
Tech State/Province: ON
Tech Postal Code: M6K 3M1
Tech Country: CA
Tech Phone: +1.4165385457
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:
Name Server: NS2.LIVEDNS.CO.UK
Name Server: NS3.LIVEDNS.CO.UK
Name Server: NS1.LIVEDNS.CO.UK
DNSSEC:
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

Registration Service Provider:
    Fasthosts Internet Limited,
    +44.8445830777
    +44.8708883760 (fax)
    http://www.Fasthosts.co.uk
    http://facebook.com/fasthostsinternet

Phone number is dead or just a long ringer. Has anyone managed to pinpoint where their server is being accessed from? I think with the combined evidence of posts on bitcointalk about this company (and boy there a quite a number of threads on Asic-tech) we can take this guy down if he's found. If I can get an address, I can send somebody there to check it out. There have been nothing but naysayers and pessimists every-time I bring the subject up of tracking this motherfucker down but I think the more he scams the more tracks he's leaving behind.

No one ever said Africa wasn't a continent, actually my comments about Africa, which can be referred to as such, as it is a single continent with a single name, were about how big and vast it is and how there are so many differing areas of governance and also none at all, that it would be next to impossible to find him if he was in Africa, anywhere in Africa. Especially if all you knew was "Africa" as being the most information you have to go on. I know its off topic but your simple quick comments that you probably weren't thinking about were misguided, misinformed, and baseless. Unfortunately people who think along these lines usually do fall for scams rather easily, as they don't read the whole of the situation and make educated decisions. My advice would be read things in full before you comment or buy.

[tadillac]

Alright, so asic-tech.com is offline and asic-technologies.com redirects to asictech.info

asictech.info is registered to a gentleman named Mark Niggerson.

According to http://whois.domaintools.com/asictech.info his email-address asictechcontact@gmail.com is associated with one other domain, registered with ENOM INC. (http://reversewhois.domaintools.com/?email=edebdaaedc11e59662fdd65aca241145).

Someone mentioned asic-market.com being the same person as asic-tech.com, and asic-market.com is also registered with ENOM, but with a protected email-address.

domaintools.com only tells us about that second domain in this form: a _ _ _ _ _ _ _ _ _ _ s.com
Both domains were created on Dec, 7th.

By guessing I found asic-markets.com (http://whois.domaintools.com/asic-markets.com) which right now is a fresh wordpress installation without content. But I'm sure it's just a backup domain, in case asic-market.com gets taken down.

His other email-address "more.coffeeee@gmail.com" is also registered with two domains: http://reversewhois.domaintools.com/?email=e205cc57c802e2fab93aa75b7499df90
asic-tech.com, created Nov. 22nd, and a _ _ _ _ _ _ _ _ _ e.net, created June 21st. Both registered with ENOM again.

According to http://who.is/domain-history/asic-technologies.com his older domain asic-technologies.com was also registered with more.coffeeee@gmail.com up until yesterday it seems. Now it's privacy protected.

I tried guessing what "a _ _ _ _ _ _ _ _ _ e.net" could be, I suppose it starts with asic, but then what? machine? service? .... then I found it: asic-online.net
http://whois.domaintools.com/asic-online.net

The Domain itself is offline by now (or taken down), but a quick google search got me this: http://www.kde.ps.pl/dsk0/ftp.ietf.org/ietf-mail-archive/krb-wg/2013-06.mail and this: http://oss.sgi.com/cgi-bin/extract-mesg.cgi?a=pcp&m=2013-06&i=c2e6c0d106b4f6438f8858dd593253ac%40asic-technologies.com

Seems like he was sending some spam mails in June.

Then there's this topic from May: https://bitcointalk.org/index.php?topic=201024.0
Again spam, with the following return addresses:
sales@xrumer-linkslist.com
me@edinburgh-makeupartist.com
sales@blackhat-proxies.com

A quick check for those domains shows, that they are again registered to Scott Davie from Edinburgh.

But that's it, couldn't find more.

So in the end I got nothing much, sorry. Maybe it helps nonetheless.

[Bitcoin Scammer]

We have had over 30+ request to lists these guys so we did it, hopefully more users will come out of the wood work and discuss the ASIC schemes.

[Tron2013]

Hello,

I spend this nice compay before 2 week´s 2 BTC (~ 1200 €) to buy 20 USB Miners. So far no good´s or Email of course.
Try to grab any information about Asic-Tech. to provide this to the German Police. May it helps a littel bit 

Regards Tron2013   
 

[Luror]

Is asicminersoft.com the same scammer? Their claims are too hilarious: "ASIC Miner Software is new developed software bitcoin mining technology. You can turn your computer to ASIC mining with average 100 GH/s mining speed. ASIC software use some special CPU and GPU algorithm to raise maximum capacity of your computer and make bigger mining speed." (screenshot: https://i.imgur.com/SgsOwVg.png)

Warning: the page is suspicious according to virustotal.com:

https://www.virustotal.com/en/url/5df115fd94637a36c51c68b2bb067ce4ed95a7e508abfea7bb70e68eb11ebbc1/analysis/1387046862/

"Detection ratio:    2 / 51
BitDefender    Malware site
Emsisoft    Malware site"

http://quttera.com/detailed_report/asicminersoft.com

"Potentially Suspicious files: 1

/wp-content/themes/mio/js/jquery.carouFredSel-packed.js?ver=6.1.0

Severity:   Potentially Suspicious
Reason:   Detected potentially suspicious content.
Details:   Detected potentially suspicious initialization of function pointer to JavaScript method eval <code> __tmpvar1778231783 = eval; <code/>
Threat dump:   View code"

upd: minersoftware.com has almost the same content

[tadillac]

Hard to say if it's the same scammer. That site has a lot more grammar mistakes.

What about that 7-day trial? https://asicminersoft.com/free-7-days-trial/
Someone brave enough to try it out?

[Luror]

What about that 7-day trial? https://asicminersoft.com/free-7-days-trial/
Someone brave enough to try it out?

Ha, I didn't see it. Ok, I downloaded it, unpacked and checked with virustotal.com:

https://www.virustotal.com/en/file/c3719223dd1bb7828d8fed53eae4c52966ca24b5e2e92a0be9105347529eb34a/analysis/1387190265/
(not detected by major antiviruses)

Checked with Anubis (service for analyzing malware):

http://anubis.iseclab.org/?action=result&task_id=1ebfff9f2128627b48946fa20572b58f5&format=html

So according to Anubis ASICMinerSoftSetup.exe is a self-extracting archive, I unpacked it with WinRar:

5 files inside (with hidden and system attributes): ygF.BQI, Jd.fga, yc.ocf, rm.QCO, jIlL.vbs

jIlL.vbs contents:

Code:

CreateObject("WScript.Shell").Exec "JD.FGA yC.OCF"

Jd.fga VirusTotal results:

https://www.virustotal.com/en/file/fb73a819b37523126c7708a1d06f3b8825fa60c926154ab2d511ba668f49dc4b/analysis/1387190674/

Code:

Product AutoIt v3 Script
Original name AutoIt3.exe
File version 3, 3, 8, 1
Comments http://www.autoitscript.com/autoit3/ 

From comments: "AutoIt macro engine. Clean file by itself, but usually bundled along with malicios macro files when arrives by mail, claiming "shipment information", "invoice", "order" or alike..."

yc.ocf contents (an extract, it's 800kb file):

Code:

;QA
;jqix
;Ip
;RBm
;eKmPZ
;g
;fP
;uvp
;Fml
;gR
;Id
;JN
;VC
;yjj
;OkZN
;T
;iBCdV
;czNK
;QGJCR
;KkmYOC
;MqMIKFeNl

Seems like encrypted AutoIt script or something. If somebody knows how to decrypt/decompile it, pls help.

But I think, it's clear that this is some kind of lame password stealer, I doubt somebody will write "some special CPU and GPU algorithm" in AutoIt script language (lol)!

[Forexperiments]

I guess the demo will only give a fake error 
Tomorrow I want to try it on a virtual machine 

[Luror]

Today there's another ASICMinerSoftSetup.exe file on the same page, now detected by some antiviruses:

https://www.virustotal.com/en/file/754eba41eff62fe2ea01a4e2658ac5d3b131e94f673602400074e4d777076c78/analysis/1387296322/

"Detection ratio:    7 / 49

Antiy-AVL    Trojan/Win32.Agent
DrWeb    Trojan.DownLoader10.64511
Ikarus    AutoIt
Kaspersky    Trojan-PSW.Win32.Fareit.amtz
McAfee    Artemis!20AD9F8C2B83
McAfee-GW-Edition    Artemis!20AD9F8C2B83
TrendMicro-HouseCall    TROJ_GEN.F47V1216"

I was wrong about "lame password stealer" btw, read a few articles about recent trend of AutoIt-based malware, some of which is quite complex:

http://blogs.mcafee.com/mcafee-labs/bitcoin-miners-use-autoit-complied-programs-with-antianalysis-code (stealth bitcoin miner, anti-VMware code)
http://blogs.mcafee.com/mcafee-labs/andromeda-botnet-hides-behind-autoit (botnet)
https://blogs.mcafee.com/mcafee-labs/vertexnet-botnet-hides-behind-autoit (botnet)

Don't run that shit!

upd: And here is the file from minersoftware.com (minersoftware.com/wp-content/uploads/2013/12/BitcoinMinerSoftware.rar):

https://www.virustotal.com/en/file/7451e81453842bc6f894ed5a797efa3431e84faea2443876f9f4c39f0f3c7f3b/analysis/1387374239/

"Detection ratio:    32 / 49"

[Luror]

Another clone of asic-market.com: bitcoin-world.net

[Anddos]

Wow great detective work guys,this is why you never trust a company with no proper address to go and see the product,it always seems to be people trying to hide behind webservers taking peoples money,i am sure they are now well aware bitcoin miner customers are well aware what to look out for when buying from a new company.

[bertig]

Hi

I've been also screwed by this so called "Mark Niggerson" (see post https://bitcointalk.org/index.php?topic=231645.msg3736230#msg3736230)
and had e-mail communication with him.

Look like he is in UK ... i know UK is big but maybe someone have better knowledge than me to find people ...

Mail 1)
Wed, 20 Nov 2013 14:30:09 -0800 (PST)
Return-Path: <more.coffeeee@gmail.com>
Received: from [127.0.0.1] (dab-far1-h-65-1.dab.02.net. [82.132.220.197])

Mail 2)
Wed, 20 Nov 2013 14:37:29 -0800 (PST)
Return-Path: <more.coffeeee@gmail.com>
Received: from [127.0.0.1] (dab-far1-h-65-6.dab.02.net. [82.132.222.130])

Mail 3)
Wed, 20 Nov 2013 15:07:34 -0800 (PST)
Return-Path: <more.coffeeee@gmail.com>
Received: from [127.0.0.1] (dab-far1-h-65-4.dab.02.net. [82.132.221.208])

Mail 4)
Wed, 20 Nov 2013 15:13:27 -0800 (PST)
Return-Path: <more.coffeeee@gmail.com>
Received: from [127.0.0.1] (dab-far1-h-65-6.dab.02.net. [82.132.222.130])

if it can help ...

[ninjaboon]

Looking at their wallet, looks like they scammed a few customers:
https://blockchain.info/address/1MkhmrurHpCQkFK5UtuU1xHKnUZYeRhdhw

[bertig]

I'm wondering if there is a system that can block a Bitcoin address? (Blockchain blacklist)

If for example, 100 bad report to community... so that no one can use the address to get BTC or to send BTC, sort of BTC black list ?

[tadillac]

I'm wondering if there is a system that can block a Bitcoin address? (Blockchain blacklist)

If for example, 100 bad report to community... so that no one can use the address to get BTC or to send BTC, sort of BTC black list ?

they would just change the address. and freezing an address so that the owner can't retrieve his coins goes against the whole decentralized concept of bitcoin. It would require a central bank or institution, which would have the power to freeze accounts. Governments would love it.

[cheetah3]

That's just madness all of that!

And they catched me too. I made an order at asic-market.com too
After "order confirmation" no one reply and no delivery notification too.
Tried to ask about delivery information, nothing, tried to ask about refund- no one reply.

in my email headers i see that mail/provider (came from info@asic-market.com)

Authentication-Results: mx.google.com;
       spf=neutral (google.com: 188.165.209.119 is neither permitted nor denied by best guess record for domain of asic@maserati.soluxion.be) smtp.mail=asic@maserati.soluxion.be
Received: from asic by maserati.soluxion.be with local (Exim 4.82)
   (envelope-from <asic@maserati.soluxion.be>)
   id 1VvCJq-0001cT-11
   for xxxx@gmail.com; Mon, 23 Dec 2013 21:41:42 +0100
To: xxxxx@gmail.com
Subject: Your Asic Market order from December