So Finally looks like some progress, looks like the Scammer left a nice long trail behind him :-)
Here are the details for the domain name he registered for this site.
Apparently they have some info on where his traffic was originating while updating the site.
in the meantime here is some info for the public.
http://eqx-m.com/Domain Name: eqx-m.com
Registry Domain ID: 1861651877_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL:
https://www.namesilo.com/Updated Date: 2014-11-04
Creation Date: 2014-06-05
Registrar Registration Expiration Date: 2015-06-05
Registrar: NameSilo, LLC
Registrar IANA ID: 1479
Registrar Abuse Contact Email:
email@namesilo.comRegistrar Abuse Contact Phone: +1.6024928198
Reseller: QHOSTER.COM
Status: clientUpdateProhibited
Status: clientRenewProhibited
Status: clientDeleteProhibited
Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Domain Administrator
Registrant Organization: See PrivacyGuardian.org
Registrant Street: 1928 E. Highland Ave. Ste F104 PMB# 255
Registrant City: Phoenix
Registrant State/Province: AZ
Registrant Postal Code: 85016
Registrant Country: US
Registrant Phone: +1.3478717726
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:
email@privacyguardian.orgRegistry Admin ID:
Admin Name: Domain Administrator
Admin Organization: See PrivacyGuardian.org
Admin Street: 1928 E. Highland Ave. Ste F104 PMB# 255
Admin City: Phoenix
Admin State/Province: AZ
Admin Postal Code: 85016
Admin Country: US
Admin Phone: +1.3478717726
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:
email@privacyguardian.orgRegistry Tech ID:
Tech Name: Domain Administrator
Tech Organization: See PrivacyGuardian.org
Tech Street: 1928 E. Highland Ave. Ste F104 PMB# 255
Tech City: Phoenix
Tech State/Province: AZ
Tech Postal Code: 85016
Tech Country: US
Tech Phone: +1.3478717726
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:
email@privacyguardian.orgName Server: NS1.QHOSTER.NET
Name Server: NS2.QHOSTER.NET
Name Server: NS3.QHOSTER.NET
Name Server: NS4.QHOSTER.NET
DNSSEC: unSigned