Mooncoin taken over by the feds?

[Fakeman]

Dammit, how am I going to replace the 6.XX solidcoins I had on there?

[1713989074]

1713989074

[joulesbeef]

there might be a way to get your coins back, but for right now, it is best to wait and see how things turn out.

[pekv2]

Another scam & run, scam pops up. Busted red handed by the looks of those certificates.

[BitcoinPorn]

And you cry about them when they are enforced...

The intent behind it.  I am not a believer of 'by any means necessary' or other quips that would make BitcoinExpress' actions okay, if the accusations are true that is.

[hightax]

You can't have a "free market" and then cry when the free market kicks you in the crotch and takes your lunch money.

[FreeMoney]

You can't have a "free market" and then cry when the free market kicks you in the crotch and takes your lunch money.

Um, part of the free market involves figuring out what happened and who is good and bad to deal with. It isn't magic paste.

[iamzill]

Serial No. of the SSL certificate used on
moonco.in: 01:00:00:00:00:01:2C:EC:30:35:8B
ice.gov 01:00:00:00:00:01:2C:EC:30:35:8B
(the sha1 and md5 fingerprints are also the same)

Hahahahaha  That's pathetic enough to make me laugh.

OP can you update your title and first post with this information please. I came in here expecting government thugs but all I got was a scammer who is about to be taken in by gover... oh wait.

[Fjordbit]

If you whois he IP of his site, it says it is owned by ice.gov

All the ICE takedowns have been at the domain only. If you put the IP and hostname in your /etc/hosts or %WINDIR%/system32/drivers/etc/hosts file, you can still access the sites. There is even a Mozilla plugin (MafiaaFire) that automatically works around it.

My bet is this is faked.

[bitfoo]

All the ICE takedowns have been at the domain only. If you put the IP and hostname in your /etc/hosts or %WINDIR%/system32/drivers/etc/hosts file, you can still access the sites. There is even a Mozilla plugin (MafiaaFire) that automatically works around it.

My bet is this is faked.

Are you talking about this moonco.in specifically or ICE takedowns in general? Does anyone know the original IP address of moonco.in?

[Nagle]

This doesn't look like a Government takeover.  Those are done by serving a court order on the domain registrar, forcing a domain transfer.  That didn't happen here.  WHOIS still shows the registrant as "Drake Moon", with a bogus street address. The DNS server for "moonco.in" is DNSEXIT.COM, which is a dynamic DNS service.  DNSEXIT has been told to route the domain to "a184-86-115-26.deploy.akamaitechnologies.com" [184.86.115.26].  This is part of Akamai's caching server farm for big sites.

This doesn't mean that "moonco.in" is hosted by Akamai.  It looks more like the owner of "moonco.in" pointed it to an Akamai server used for some part of "www.ice.gov". So the SSL cert returned doesn't match.

The basic possibilities are 1) the owner is trying to confuse people, or 2) they signed up for Akamai service to handle a huge amount of traffic. (Many of the top 100 sites on the Internet use Akamai. Few if any low traffic sites do.)

[aq]

SolidCoin and Mr Moon are not the same person nor thing.

How do you know that Mr Moon and Coinhunter is not the same person?

Well actually I made a thread warning them over a week ago about the phony whois, which he openly admitted to, his gmail address, .IN TLD, blatantly illegal online gambling in the USA....amongst several other major bas signs.

Maybe it's just me, but when an exchange owner will not disclose his real location or name and is dealing with tens of thousands of USD, that's a huge red flag for me.

Actually it is even more simple: any exchange trading SolidCoins (or some other shitcoins) should be a huge red flag for everyone. Well, one can use it for the usually early investor ripoff - only risking shitcoins in doing that.

[rainingbitcoins]

Um, part of the free market involves figuring out what happened and who is good and bad to deal with.

And then they change their username and do the whole thing over again.


The free market: it can move mountains*


*offer only valid if you already own mountain moving equipment. If you do not own such equipment, you are probably a parasite and received this message in error

[worldinacoin]

Thank goodness I withdraw every little coins I had the moment it was up.

[the founder]

doesnt make sense that ice would close his gmail and especially his reddit account (wtf?). Definitely smells of scam imo

Fairly amazing...  people do such crap...  if he got hacked then scream I got hacked...  if he's just a con artist then we'll add it to the long list that came before him and most likely will come after.

Tards like that do nothing to help us.

[Splirow]

Hey guys....

I had deposited 34BTC on moonco for trading. The address that was given to me for the deposit was:

1B6egk2RjiHRnZKjj7aoT89ZtqiQCEQrhL

as you can track on block explorer all the way, he moved them multiple times. Look like he had a total of 896 Bitcoins. maybe more.

Is there any way to get this back? or are am I screwed?

any info will be helpful

[devs @ btfuture.com]

Truly sad and amazing these things happens. Sucks that it happened the same day our site https://btfuture.com went live because now everyone is skeptical; however, if anyone wants to continue to participate in a prediction market run on bitcoins to join our site.

If you question whether you can trust us, we will gladly verify our identities with a trusted member/s of the bitcointalk community. Thanks for those of you who have joined now, just need more so we can get our market up and running!

[Dunbar]

Did anyone contact the immigration and customs enforcement? Stealing bitcoins etc is a pretty arbitrary crime because the value is arbitrary and I doubt any agency would commit resources to tracking down BTC thiefs but people scamming other people by impersonating a federal officer is known territory to them.

[johnj]

Did anyone contact the immigration and customs enforcement? Stealing bitcoins etc is a pretty arbitrary crime because the value is arbitrary and I doubt any agency would commit resources to tracking down BTC thiefs but people scamming other people by impersonating a federal officer is known territory to them.

Hmm, I guess one could draw a line between putting up a fake ICE seizure, and impersonating a federal officer/agency.


It'll be interesting to see how this plays out.

[doublec]

An IP Address that Mr Moon used was 24.7.158.162. This list of wikipedia pages edited by this IP address are here. This list includes namecoin related edits. It also includes edits to Christian Verdun and a disambiguation page for 'Paradox', an art piece by Christian Verdun. There are a lot of edits associated with that. Christian Verdun sells artwork for bitcoins and solid coins here. Maybe Mr Moon knows him? Or he knows Mr Moon? Christian goes to UC Davis, not far from Sacramento where Mr Moon's IP address is geolocated.

Christian Verdun appears to be upisdown on the bitcointalk forums here. He has posted as being a user of moonco.in.

Mr Moon's Wikipedia page edits include plant related pages, a topic that Christian indicates as being interested in studying at UC Davis in this interview.

Christian/Uptown, if you read this, have you had any contact with Mr Moon since the closing of his site?

[doublec]

Following up to my last post. Christian Verdun lurked in irc as 'upisdown' in #bitcoin-otc. His OTC rating is here. Doing a '/msg nickserv info upisdown' on Freenode I get:

NickServ(NickServ@services.)- Information on upisdown (account upisdown):
NickServ(NickServ@services.)- Registered : Jun 20 16:10:19 2011 (13 weeks, 3 days, 23:18:38 ago)
NickServ(NickServ@services.)- Last addr  : ~upisdown@c-24-7-158-162.hsd1.ca.comcast.net
NickServ(NickServ@services.)- Last seen  : Jun 22 15:20:33 2011 (13 weeks, 2 days, 00:08:24 ago)
NickServ(NickServ@services.)- Flags      : HideMail
NickServ(NickServ@services.)- *** End of Info ***

That IP address is the same as the IP address that was Mr Moon's moonco.in server, and the IP address Moon lurked in #namecoin, and posted to forums and email. Could it be a university shared IP and they were both behind the same NAT or something?

NickServ(NickServ@services.)- Information on mr_moon (account mr_moon):
NickServ(NickServ@services.)- Registered : Jun 22 15:26:07 2011 (13 weeks, 2 days, 00:09:24 ago)
NickServ(NickServ@services.)- Last addr  : ~mrmoon@c-24-7-158-162.hsd1.ca.comcast.net
NickServ(NickServ@services.)- Last seen  : Sep 01 20:00:32 2011 (3 weeks, 0 days, 19:34:59 ago)
NickServ(NickServ@services.)- Flags      : HideMail
NickServ(NickServ@services.)- *** End of Info ***