Quote from: Ethey on June 27, 2016, 08:57:47 PM

Quote from: speedt_ouch on June 27, 2016, 08:25:59 PM

There are terrible people if this world...

Got a FAKE e-mail, notice I said FAKE.
Suppose to be from hashocean, but for sure its not.

Any way, the e-mail says to send more BTC to them so they can refund. WTF!!!

The excuse is that no database backup is available, so send payment, send e-mail, send only password the money you spend in Hash Power will be refunded.

My question to this FAKE e-mail is:

If the victims (hachocean users) send then the e-mail and say they had 500.000 power they get refund for this?
If no database backup is available how the hell will they confirm what I say. Besides any hosting company would have account backups including data bases.

What is more incredible is that I'm pretty sure this FAKE e-mail is already getting payments!
https://btc.blockr.io/address/info/18jEEyG9DTj6VsLfTscGkQS77G8FMK514t

Here is the e-mail sent from: Hashocean@hashocean-refunds.com

Hello, unfortunately these days our website hashocean.com, was hacked. Hackers took our domain and we have no control over anything. For our stupidity, we do not have the backup of the database. We will do the refund for you, but as we have not saved history, we will refund you your mining purchase under the following conditions. "Take the following actions properly, we have more than 700,000 users, and if we are looking for 1 by 1, would take years." To receive your purchases refund please visit: hashocean-refunds.com

E-mail source code:

Delivered-To: I_REMOVED_MY_EMAIL@gmail.com
Received: by 10.194.73.99 with SMTP id k3csp501738wjv;
Mon, 27 Jun 2016 12:05:33 -0700 (PDT)
X-Received: by 10.46.71.208 with SMTP id u199mr5765865lja.17.1467054333544;
Mon, 27 Jun 2016 12:05:33 -0700 (PDT)
Return-Path: <Hashocean@hashocean-refunds.com>
Received: from mx1.ddos-guard.net (mx2.ddos-guard.net. [186.2.160.1])
by mx.google.com with ESMTPS id g66si14877859lfb.317.2016.06.27.12.05.33
for <I_REMOVED_MY_EMAIL@gmail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 27 Jun 2016 12:05:33 -0700 (PDT)
Received-SPF: neutral (google.com: 186.2.160.1 is neither permitted nor denied by best guess record for domain of hashocean@hashocean-refunds.com) client-ip=186.2.160.1;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 186.2.160.1 is neither permitted nor denied by best guess record for domain of hashocean@hashocean-refunds.com) smtp.mailfrom=Hashocean@hashocean-refunds.com
Received: by hosting.ddos-guard.net (Postfix, from userid 8314)
id C4317A494B; Mon, 27 Jun 2016 22:05:32 +0300 (MSK)
To: I_REMOVED_MY_EMAIL@gmail.com
Subject: Hashocean hacked and Refunds Statement.
X-PHP-Originating-Script: 8313:m.php
Date: Mon, 27 Jun 2016 22:05:32 +0300
Message-ID: <18b7d35aca3da594bb80eb1a97bba9d3@bitstrade.club>
X-Priority: 1
X-Mailer: PHPMailer 5.2.8Wahib Priv8 Mailer
Reply-To: HashOcean <>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_18b7d35aca3da594bb80eb1a97bba9d3"
From: Hashocean@hashocean-refunds.com

--b1_18b7d35aca3da594bb80eb1a97bba9d3
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: base64

WW91ciBURVhUIG1lc3NhZ2UgZ29lcyBoZXJlLg0KSW5zdHJ1Y3Rpb25zIDoNCjEpIE5QNWZsSExW
ajcxM2Z0cCB3aWxsIGJlIHJlcGxhY2VkIHdpdGggYSByYW5kb20gc3RyaW5nDQoyKSAyMzgyNDQg
d2lsbCBiZSByZXBsYWNlZCB3aXRoIGEgcmFuZG9tIGludC4NCjMpIG9saXZlcmdhdmluaG9AZ21h
aWwuY29tDSB3aWxsIGJlIHJlcGxhY2VkIGJ5IHRoaXMgZW1haWwNCjQpIEhhc2hvY2VhbkBoYXNo
b2NlYW4tcmVmdW5kcy5jb20gd2lsbCBiZSByZXBsYWNlZCBieSB0aGUgc2VuZGVyIGVtYWlsDQo1
KSAyMDE2LzA2LzI3IDIyOjA1OjMyIHdpbGwgYmUgcmFwbGFjZWQgYnkgdGhlIGVtYWlsIHNlbmRp
bmcgZGF0ZS4NCldoYXQgYXJlIHlvdSB3YWl0aW5nIGZvciBsYWR5ID8gR28gYWhlYWQgYW5kIHRy
eSBpdCAhIEkgYWxyZWFkeSBpbnNlcnRlZCB0ZXh0IGZvciB5b3UgIQ==

--b1_18b7d35aca3da594bb80eb1a97bba9d3
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: base64

SGVsbG8sIHVuZm9ydHVuYXRlbHkgdGhlc2UgZGF5cyBvdXIgd2Vic2l0ZSBoYXNob2NlYW4uY29t
LCB3YXMgaGFja2VkLiBIYWNrZXJzIHRvb2sgb3VyIGRvbWFpbiBhbmQgd2UgaGF2ZSBubyBjb250
cm9sIG92ZXIgYW55dGhpbmcuIEZvciBvdXIgc3R1cGlkaXR5LCB3ZSBkbyBub3QgaGF2ZSB0aGUg
YmFja3VwIG9mIHRoZSBkYXRhYmFzZS4NCg0KV2Ugd2lsbCBkbyB0aGUgcmVmdW5kIGZvciB5b3Us
IGJ1dCBhcyB3ZSBoYXZlIG5vdCBzYXZlZCBoaXN0b3J5LCB3ZSB3aWxsIHJlZnVuZCB5b3UgeW91
ciBtaW5pbmcgcHVyY2hhc2UgdW5kZXIgdGhlIGZvbGxvd2luZyBjb25kaXRpb25zLg0KDQoiVGFr
ZSB0aGUgZm9sbG93aW5nIGFjdGlvbnMgcHJvcGVybHksIHdlIGhhdmUgbW9yZSB0aGFuIDcwMCww
MDAgdXNlcnMsIGFuZCBpZiB3ZSBhcmUgbG9va2luZyBmb3IgMSBieSAxLCB3b3VsZCB0YWtlIHll
YXJzLiINCg0KVG8gcmVjZWl2ZSB5b3VyIHB1cmNoYXNlcyByZWZ1bmQgcGxlYXNlIHZpc2l0OiBo
YXNob2NlYW4tcmVmdW5kcy5jb20=

--b1_18b7d35aca3da594bb80eb1a97bba9d3--

The scam is going on! Dont invest in that mail.. you have already done your investment bro.
dont let you get scammed again.

The Ammount send to the adress could be from themselves...

What a freak email they want us to send more btc so they can give refund? Do they think people are dumb enough here to fallen again in that another scheme what a pity on them there making another scam attempt after they run the money from their investors and i believe karma wil strike them back for what have they done today what a big fraud people they are.