Scam Alert : TimeToBit/timetobit.com Scammed 3.38 BTC

[mlnoone]

I wonder - is there by chance anybody from Sweden, near abouts Gavleborgs Lan, Hudiksvall, in this forum who can help with this in any way - or give some pointers?

[odlal]

Looks like Timetobit may not be the only Scam running through there :

http://www.janvanriebeeck.redskillz.nl/index.php?url=betarigs.com

The above link came up in a Google Search : https://www.google.co.uk/?gws_rd=ssl#q=PAOLO+FANTON+sweden+email&safe=off

I would not now be surprised if Paolo Fanton is purely a fictitious name ...

[odlal]

Paolo Fanton also comes up here

http://blogs.msmvps.com/spywaresucks/2010/05/29/alert-please-treat-tuned-ads-tunedads-com-barkley-davis-advertising-barkleydavis-com-awemedia-awemedia-net-and-moksly-digital-ad/

From FOUR years ago and to do with Malware !

[dekodoge]

Paolo Fanton also comes up here

http://blogs.msmvps.com/spywaresucks/2010/05/29/alert-please-treat-tuned-ads-tunedads-com-barkley-davis-advertising-barkleydavis-com-awemedia-awemedia-net-and-moksly-digital-ad/

From FOUR years ago and to do with Malware !

The peter@serverconnect.se and also Paolo are just tech contacts at the hosting company.

[odlal]

Paolo Fanton also comes up here

http://blogs.msmvps.com/spywaresucks/2010/05/29/alert-please-treat-tuned-ads-tunedads-com-barkley-davis-advertising-barkleydavis-com-awemedia-awemedia-net-and-moksly-digital-ad/

From FOUR years ago and to do with Malware !

The peter@serverconnect.se and also Paolo are just tech contacts at the hosting company.

Sure - but surely they must've heard from UNHAPPY people before today about what seems to be happening right under their noses ? Don't they have a (legal) responsibility to sort it out ?

[dekodoge]

check this

https://www.timetobit.com/terms-of-use

compare to

http://mining.cointerra.com/sales-agreement/

copy pasta.

[mlnoone]

Checked out the site betarigs.com, it looks rather ok, their discussion thread on this forum also does not indicate any specific accusations regarding scamming activity...  

Paolo Fanton looks like a tech contact.

I'm just wondering now how many bitcoins the creep 'Tony' could have collected by now through his fake cloud mining contracts.. I hope he catches no more fish from this site, but the open and irreversible nature of bitcoin transactions make such scams a constant threat.

Has been a hard lesson to learn!

[odlal]

check this

https://www.timetobit.com/terms-of-use

compare to

http://mining.cointerra.com/sales-agreement/

copy pasta.

Almost !

Timetobit appear to skip past CoinTerra's use of section : 16. Dispute Resolution And Binding Arbitration

and they also don't have an end section about a "PAYMENT PLAN AGREEMENT" like CoinTerra do.

--- VERY SIMILAR THOUGH ---

[odlal]

check this

https://www.timetobit.com/terms-of-use

compare to

http://mining.cointerra.com/sales-agreement/

copy pasta.

BTW how on Earth did you make that connection ?

[odlal]

There's always RIPE NCC's Facebook and Twitter pages to contact them through :

https://www.facebook.com/ripencc/info

https://twitter.com/RIPE_NCC

I can't imagine them NOT having heard of this sort of thing going on before today through THEIR network !

[mlnoone]

From the RIPE Facebook page:

If you are looking to contact us about misuse of an IP address, please understand that the RIPE NCC allocates and assigns IP addresses to Local Internet Registries (LIRs) and does not use them itself. You can find out more information about possible abuse and/or misuse of an IP address by using the Abuse Finder Widget on RIPEstat: https://stat.ripe.net/specials/abuse

So when I entered 95.143.193.61 in the Abuse Contact Finder, the email address that came up was:

Abuse Contact Finder (95.143.193.61)

Email-Contact
 peter@serverconnect.se

This contact can be used to report abuse.

I am sending an email to Peter, thank you odlal for helping to lead upto this!

[LXBGMiners]

Hi guys,

I'm the 'idiot' who invested into a 10TH/s plan (more or less 23BTC) ...
is there a way I can help?
I found the same IP (95.143.193.61) and all the same information already mentioned in these posts!

[mlnoone]

Dear LXBGMiners,

Very sorry to hear about the huge loss you have incurred.
 
I am wondering of the scammer's evil genius to have made this really clever scam. I am sure there are may more who have already fallen prey.

I think there is nothing much that can be done, but write to peter@serverconnect.se reporting abuse form the IP address 95.143.193.61, though I have no idea what he could do.

If there are any Swedish contacts, I wonder - could we push for an official investigation or legal proceedings?

[mlnoone]

Dear LXBGMiners,

I found these instructions on the RIPE site:

https://labs.ripe.net/Members/cteusche/finding-anti-abuse-contact-information-with-ripestat

How to report a suspected abuse incident

Please keep in mind that the email addresses listed may be for contact people at an ISP providing Internet services and they may not be aware that somebody is using their network in this way. They will need you to give them details of the abuse so that they can investigate it further.

Explain what happened
Try to explain why you think it's an abuse case
Include the IP address
Include the times when it happened
Include any evidence (e.g. copy the message from your firewall, log entries etc.)
You might want to mention that you found this contact via RIPEstat's Abuse Contact Finder widget by appending this line:

"This email contact was found using RIPEstat's Abuse Contact Finder widget. Please find more information at https://stat.ripe.net/specials/abuse."

You might consider using the above format to write a convincing email to peter@serverconnect.se, requesting help from him to give leads for recovering the loss - that is, unless you have already done it!

[LXBGMiners]

Hi mlnoone,

I'm trying to invesitgate, www.cases.lu what can be done in such a case!
I'll keep this tread informed about what they'll tell me!

[mlnoone]

Good luck to you LXBGMiners - I hope your investigations will lead to at least some positive result!

[LXBGMiners]

Thanks mlnoone, I'll keep everybody informed if I get more information!

[BTCat]

Hi LXBGMiners,

Sorry about your loss and for probably having been right at your first posts in the plan-give-away section. I gave you some doubt over this but I wanted to stay objective.

Around 8 aug. my payments (for 150 ghs) were "pending" for 3 days after which it got paid for 3 days all at once and it continued until 15th. It's still possible that payments will be made but the longer it takes the less likely it becomes. Also having seen their listed address on a possible virtual office space raised doubts for them being legit.  

If and/or when this is a confirmed scam I hope the people behind it get caught. At least good to see forensic brings up some info's.

Goodluck.  

ps also found some review here of Timetobit:
http://btcworldnews.com/bitcoin-mining-for-beginners-part-i-cloud-mining/

[LXBGMiners]

No problem BTCat, one always needs to be carefull when it comes to internet communication.

For your info, I already send an e-mail to www.cases.lu and asked how to handle this and what do to ...
I'll keep you informed!

Regards,

[LXBGMiners]

I also have a mining plan at bitcoincloudservices which works perfectly until now ...
Started 1. of July and payout are accurate ever day.
I even got contacted by e-mail an even called by phone when I wanted to change my payout address.

this mining plan works well for one month an a half now ... even respecting the rise of difficulty

for this company you can find on the internet site an address, a phone number and so on ...

if anyone is interested here is my referral URL: https://www.bitcoincloudservices.com/?ref=2249

so far, I'll not invest in any other mining plan until ROI starts for the one I have! :-)

I'll keep you informed about that one as well!