Not a lead, just a curiosity, from the spidering results I found the pending reviews (https://www.timetobit.com/starreviews/34eayghzrtdj56rtjsh/). Apparently the review system approval mechanism was unprotected. There are 157 pending reviews, all of which state the site is a scam. They seem to have be spammed since there is a lot of repetition on the review text and they were all done on the same day. Follows some examples:

- Leave immediately, and do not get scammed like I did.  No one answers support, no payout
- Do not throw your bitcoins down the drain of TimeToBit.  Once payment is received, they stop responding, and there are no payouts
- I made a terrible mistake joining TimeToBit, one of the biggest bitcoin scam ever.  Please do not lose your money too.  No payouts, no support
- (...)

Screenshot of the webpage http://i.cubeupload.com/m2AfU0.png

EDIT: Google Cache cached the page with some of the "it's a scam" reviews http://webcache.googleusercontent.com/search?q=cache%3Awww.timetobit.com&btnG=

https://labs.ripe.net/Members/cteusche/finding-anti-abuse-contact-information-with-ripestat

How to report a suspected abuse incident

Please keep in mind that the email addresses listed may be for contact people at an ISP providing Internet services and they may not be aware that somebody is using their network in this way. They will need you to give them details of the abuse so that they can investigate it further.

Explain what happened
Try to explain why you think it's an abuse case
Include the IP address
Include the times when it happened
Include any evidence (e.g. copy the message from your firewall, log entries etc.)
You might want to mention that you found this contact via RIPEstat's Abuse Contact Finder widget by appending this line:

"This email contact was found using RIPEstat's Abuse Contact Finder widget. Please find more information at https://stat.ripe.net/specials/abuse."

If you are looking to contact us about misuse of an IP address, please understand that the RIPE NCC allocates and assigns IP addresses to Local Internet Registries (LIRs) and does not use them itself. You can find out more information about possible abuse and/or misuse of an IP address by using the Abuse Finder Widget on RIPEstat: https://stat.ripe.net/specials/abuse

I've got 4 payments still "pending". Wondering if I've been scammed too.

Return-path: <info@timetobit.com>
Envelope-to: xx@xxx.xxx
Delivery-date: Thu, 14 Aug 2014 22:51:17 -0400
Received: from [10.115.3.11] (helo=bosimpinc11)
   by bosmailscan06.eigbox.net with esmtp (Exim)
   id 1XI7bp-000779-Az
   for xx@xxx.xxx; Thu, 14 Aug 2014 22:51:17 -0400
Received: from server1.timetobit.com ([192.64.118.151])
   by bosimpinc11 with bizsmtp
   id eqrF1o01D3G4Pk001qrGvP; Thu, 14 Aug 2014 22:51:17 -0400
X-EN-OrigIP: 192.64.118.151
X-EN-IMPSID: eqrF1o01D3G4Pk001qrGvP
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=timetobit.com; s=default;
   h=Content-Type:In-Reply-To:References:Subject:To:MIME-Version:From:Date:Message-ID; bh=e/4PGOkZ0whJdArR0D4LPv8zJcVO5cEOLPhuH6MXc2M=;
   b=LGT/lbAmHdgVSLy0gt6UAQIKG9AnompH1SDWzwoQpxAyuAsky//jOJ2ydQXlbh8BU19MNYmmJQZt8XqZULdn9/DjIpylMUkop3vbRlIhn7Y+yOY76tQGNLoWSIxArHGwSR2Sw0I/8mBmLO7ONfCoq6xu/ELX3l/y7R5WksgH09Y=;
Received: from [95.143.193.61] (port=56958 helo=Tonys-iMac.local)
   by server1.timetobit.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128)
   (Exim 4.82)
   (envelope-from <info@timetobit.com>)
   id 1XI7bj-0003z9-EN
   for xx@xxx.xxx; Thu, 14 Aug 2014 19:51:13 -0700
Message-ID: <53ED769B.5040709@timetobit.com>
Date: Fri, 15 Aug 2014 09:55:23 +0700
From: Info | TimeToBit <info@timetobit.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: Xx Xxxx <xx@xxx.xxx>
Subject: Re: Reviews on homepage showing site is a scam
References: <0f740657-06bd-4e04-b535-18899ffc2875@email.android.com> <53ED6EA5.4070106@timetobit.com> <85073B35-8A1F-420D-86C5-F20E690C6E60@xxx.xxx>
In-Reply-To: <85073B35-8A1F-420D-86C5-F20E690C6E60@xxx.xxx>
Content-Type: multipart/alternative;
 boundary="------------010600000008010400000100"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.timetobit.com
X-AntiAbuse: Original Domain - xxx.xxx
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - timetobit.com
X-Get-Message-Sender-Via: server1.timetobit.com: authenticated_id: info@timetobit.com
X-Source:
X-Source-Args:
X-Source-Dir:

On Aug 15, 2014, at 8:25 AM, Info | TimeToBit <info@timetobit.com> wrote:
Hello,

I will have one of our PR representatives have a look and try to clear up the situation, generally we are not really active in the forums, it may sound weird for the regular customer, but reason being for that is that there's not much of a customer base present in bitcoin forums at all. After all we are a company relying on sales, if there's no sales to be made in a particular location, you don't bother going there.

Please do not confuse this with customer support, in my personal opinion and I would say also in that of our customers, we provide excellent support via e-mail with exceptional response time.


Kind Regards,

Claire | Sales

--
If you have any further queries, requests or suggestions, we will be pleased to assist you.

Best Regards,

TimeToBit | Instant Bitcoin Cloud Mining