Post
Topic
Board Scam Accusations
Re: Scam Alert : TimeToBit/timetobit.com Scammed 3.38 BTC
by
mlnoone
on 18/08/2014, 17:26:28 UTC
Thanks again, I had tried tracing the email using the header - and it was located as sent from Sweden:

IP address :   
95.143.193.61

IP number :   1603256637
Country :   Sweden  flag
Region:   
City (Estimate) :   
Latitude :   62° 0' North
Longitude :   15° 0' East
Time Zone :   W. Europe Daylight Time
GMT Offset :   02:00:00


I can now see Sweden mentioned in the Lunamine thread also.  Is something going on there!?

These are the headers, if any one would like to examine them further:
Quote
Return-path: <info@timetobit.com>
Envelope-to: xx@xxx.xxx
Delivery-date: Thu, 14 Aug 2014 22:51:17 -0400
Received: from [10.115.3.11] (helo=bosimpinc11)
   by bosmailscan06.eigbox.net with esmtp (Exim)
   id 1XI7bp-000779-Az
   for xx@xxx.xxx; Thu, 14 Aug 2014 22:51:17 -0400
Received: from server1.timetobit.com ([192.64.118.151])
   by bosimpinc11 with bizsmtp
   id eqrF1o01D3G4Pk001qrGvP; Thu, 14 Aug 2014 22:51:17 -0400
X-EN-OrigIP: 192.64.118.151
X-EN-IMPSID: eqrF1o01D3G4Pk001qrGvP
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=timetobit.com; s=default;
   h=Content-Type:In-Reply-To:References:Subject:To:MIME-Version:From:Date:Message-ID; bh=e/4PGOkZ0whJdArR0D4LPv8zJcVO5cEOLPhuH6MXc2M=;
   b=LGT/lbAmHdgVSLy0gt6UAQIKG9AnompH1SDWzwoQpxAyuAsky//jOJ2ydQXlbh8BU19MNYmmJQZt8XqZULdn9/DjIpylMUkop3vbRlIhn7Y+yOY76tQGNLoWSIxArHGwSR2Sw0I/8mBmLO7ONfCoq6xu/ELX3l/y7R5WksgH09Y=;
Received: from [95.143.193.61] (port=56958 helo=Tonys-iMac.local)
   by server1.timetobit.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128)
   (Exim 4.82)
   (envelope-from <info@timetobit.com>)
   id 1XI7bj-0003z9-EN
   for xx@xxx.xxx; Thu, 14 Aug 2014 19:51:13 -0700
Message-ID: <53ED769B.5040709@timetobit.com>
Date: Fri, 15 Aug 2014 09:55:23 +0700
From: Info | TimeToBit <info@timetobit.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: Xx Xxxx <xx@xxx.xxx>
Subject: Re: Reviews on homepage showing site is a scam
References: <0f740657-06bd-4e04-b535-18899ffc2875@email.android.com> <53ED6EA5.4070106@timetobit.com> <85073B35-8A1F-420D-86C5-F20E690C6E60@xxx.xxx>
In-Reply-To: <85073B35-8A1F-420D-86C5-F20E690C6E60@xxx.xxx>
Content-Type: multipart/alternative;
 boundary="------------010600000008010400000100"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.timetobit.com
X-AntiAbuse: Original Domain - xxx.xxx
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - timetobit.com
X-Get-Message-Sender-Via: server1.timetobit.com: authenticated_id: info@timetobit.com
X-Source:
X-Source-Args:
X-Source-Dir:

Received: from [95.143.193.61] (port=56958 helo=Tonys-iMac.local)

So  'Claire | Sales' was writing from "Tony's iMac", from a Swedish IP, on behalf of TimeToBit - in Scotland?!