I just posted this to the Cloud Mining Website thread:
dr1980m tried to purchase 30 Gh by sending 0.003 BTC to 1F91HzJaQZ1WGU9NG2ZhFaXctZD6vMsV3L from 13RJvPMzxdAyzXQNnLAAimrMQBGseRJRmC.
which was later refunded from Cloud Mining Website's payout address (not the address it was sent to) as shown below:
From 1F91HzJaQZ1WGU9NG2ZhFaXctZD6vMsV3L, the 0.003 BTC is sent to 1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec. The first payment to 1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec was on 2014-11-02 08:42:37 (when Cloud Mining Website started) and receives multiple payments of amounts that are integer multiples of 0.001 BTC (Cloud Mining Website's price per Gh/s). Also, out of 242 transactions, only 3 involve coins moving from 1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec.
1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec is quite clearly a receiving address for "customer" payments which seem to pass through a unique address first.
The first payment out of 1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec sends 15.349 BTC to 1Ng9UahczApASvLVPCEoJmvnMAHTvXpFPH on 2015-01-11 18:26:36. From 1Ng9UahczApASvLVPCEoJmvnMAHTvXpFPH, 10.0803785 BTC is sent to 1DoXReLhoc4Qw528ejwhYBWE4DyctGJsRv, which sends the coins to 14uiWYG2kwjbm3AorVaB6qK6o2eSETCqRV and with a few other addresses, finally on to 1FsVcdeHbpvUVT3gjeuVR2ZSDnpcsJMsLL.
This give the following chain of transactions:
1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec > 1Ng9UahczApASvLVPCEoJmvnMAHTvXpFPH > 1DoXReLhoc4Qw528ejwhYBWE4DyctGJsRv > 14uiWYG2kwjbm3AorVaB6qK6o2eSETCqRV > 1FsVcdeHbpvUVT3gjeuVR2ZSDnpcsJMsLL
The
latest transaction with 1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec shows that it received 0.01091639 BTC and a 1KufA3z7mLntENepGKo9Ktu9S7qAL2oLF3 received 0.3613364 BTC. Given that 1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec is the customer payment receiving address where the coins where sent to, 1KufA3z7mLntENepGKo9Ktu9S7qAL2oLF3 is a change address which is also belong to Cloud Mining Website. The coins that 1KufA3z7mLntENepGKo9Ktu9S7qAL2oLF3 receives are sent on to 1LAAhMSLXhLhvgrmdHancjhUyVE2rbcTuJ, then 11QSYSjTjadhNbKXgBcg4B3k5WjnEMkqP, then 1P9GfsxGavQVgZndXk1EbPyKmYwdtDYufB, to finally reach 1MPxhNkSzeTNTHSZAibMaS8HS1esmUL1ne (Eobot cloud mining)
This give the following chain of transactions:
1LfpedDQLqqEmSDZ9B7v2sPzz5NeeDhXec > 1KufA3z7mLntENepGKo9Ktu9S7qAL2oLF3 > 1LAAhMSLXhLhvgrmdHancjhUyVE2rbcTuJ > 1P9GfsxGavQVgZndXk1EbPyKmYwdtDYufB > 1MPxhNkSzeTNTHSZAibMaS8HS1esmUL1ne (Eobot cloud mining)
So Cloud Mining Website, can you explain why you are sending payments from customers to Eobot cloud mining? Also, why are your customers payments being sent to 1FsVcdeHbpvUVT3gjeuVR2ZSDnpcsJMsLL (an address familiar to recent cloud mining ponzi victims)?
If anyone posts on Cloud Mining Website's forums, ask them to come and explain that.
Further evidence linking Cloud Mining Website to Eobot:
1F91HzJaQZ1WGU9NG2ZhFaXctZD6vMsV3L (pay in address) > 1GNmnxWkComFYF7k8EBeKtgQz2sprUGYvM > 1MPxhNkSzeTNTHSZAibMaS8HS1esmUL1ne (Eobot cloud mining)