was the entire site really behind tor? if that is the case, i wish you guys the best of luck to find him,
It had a tor hidden service, but was also reachable through normal https... otherwise we wouldn't even know the IP address and hoster.
"normal https" is interesting..
Does anyone have any information about the issuer of the certificate that was used? Presumably if it was self-signed it would have been giving browser warnings.. so did the site actually have a commercial https certificate issued for '
www.mybitcoin.com'?