Post
Topic
Board Games and rounds
Re: MakeBTC.org Pyramid Scheme
by
agaruna
on 15/03/2014, 20:55:56 UTC

I got the same email, I don't see why they should need on password, that doesn't make much sense, makeBTC post here please!! Or on the other thread
I hope the website didn't get hacked, it sure looks like it did but it is weird that makeBTC doesn't say anything anywhere!!!

I have some hope of getting my BTC back though

Sounds super scammy, my bet is someone saw the site go down and thought they could make a quick buck when it started working by phishing people's site logins.

We can only speculate; the alleged sc.ammer has admin@makebtc.org email but getting the passwords only allow him to try to log in on other websites with the same passwords

I don't think he was able to register makeBTC.org again and have all the design and infos as well; he cannot get any money from makeBTC by having a password if makeBTC isn't running

I'll bet we all got two emails, one from "Makebtc" wanting our login info and one from InvestBTC claiming their site is "the best site to invest bitcoin and litecoin." Well, Site #1 (MakeBTC) definitely did not send that first message. The original data has Site #2 written all over it.

Delivered-To: @gmail.com
Received: by 10.114.177.233 with SMTP id ct9csp26140ldc;
        Sat, 15 Mar 2014 12:30:12 -0700 (PDT)
X-Received: by 10.50.143.12 with SMTP id sa12mr4491509igb.45.1394911811597;
        Sat, 15 Mar 2014 12:30:11 -0700 (PDT)
>>>Return-Path: <enginnv@server1.lotusproxy.com>
Received: from server1.lotusproxy.com ([192.184.9.147])
        by mx.google.com with ESMTPS id ce9si2627209icc.31.2014.03.15.12.30.10
        for <@gmail.com>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sat, 15 Mar 2014 12:30:11 -0700 (PDT)
Received-SPF: neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of enginnv@server1.lotusproxy.com) client-ip=192.184.9.147;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of enginnv@server1.lotusproxy.com) smtp.mail=enginnv@server1.lotusproxy.com
Received: from enginnv by server1.lotusproxy.com with local (Exim 4.82)
   (envelope-from <enginnv@server1.lotusproxy.com>)
<<<
   id 1WOspY-001iwB-2j
   for @gmail.com; Sat, 15 Mar 2014 10:57:08 -0700
To: @gmail.com
Subject: Refund and we will give bonus of 0.01 btc to you.
>>>X-PHP-Script: engineer-inv.com/decode/mm.php for 103.4.234.169<<<
From: Makebtc <admin@makebtc.org>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <E1WOspY-001iwB-2j@server1.lotusproxy.com>
Date: Sat, 15 Mar 2014 10:57:08 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.lotusproxy.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [514 526] / [47 12]
X-AntiAbuse: Sender Address Domain - server1.lotusproxy.com
X-Get-Message-Sender-Via: server1.lotusproxy.com: authenticated_id: enginnv/only user confirmed/virtual account not confirmed

Hello dear makebtc.org user.

We very sorry for our site get a wrong way.

We will start refund your btc now.

Reply this email with:

Your email at makebtc.org:
Your password at makebtc.org:

we will refund your full btc and will give more a bonus of 0.01 btc to you.

thanks

admin
makebtc.org

Doesn't seem to me like it's actually the site-runner. Not only does Site #2 look like it was whipped up on a moment's notice, but the email is sent with tracks leading somewhere other then the authentic path. I think this is just a scam.

EDIT: Subnote, at least MakeBTC looked credibly professional in it's design. I could have done that 2nd site's design myself, and I'm undeniably horrible at site layouts. The quality margin is far too substantial for engineerinv to be authentic.