Hmm, what was the name of the first domain again?
That's some good detective work for sure, but how did you manage to track down all of the scammer's addresses? Did they reuse the same address for their fake ICO and told everyone to send to the same address or is it via blockchain analysis?
Good to hear that you've notified Bittrex, though again, they may just use any other exchange under a fake name and still be able to cash out their ETH. BTW, does the US FTC actually deal with cases of cyberscamming like this one? I doubt they'll be able to do much about it honestly, but it's worth a try. Doesn't hurt to file a report in any case.
$750k is a ton of money, hopefully some of this is just the scammer's own assets, and not all is from the fake ICO. Otherwise that's some major losses for investors.
telegramfoundation.org was the first one.
Unfortunately, to be able to trace You should be scammed first. They got my attention when I was in a hurry with other things and was happy that GRAM ICO "started". Everything was done in less than minute. I usually send very small amount first, but as I said, I was before leaving the desk so... I have traces now. I don't expect to be able to return back what I literally throw away, but there are chances scammers to be stopped.
Everyone scammed is getting separate address, but scammers are consolidating payments at the first address in the list. They were using very same address for consolidation with the first domain scam. History shows that scammers divided consolidated amount on three new addresses. Here is their mistake, first one was not new and held some amount of ETH before, received from the last address in the list that has many transactions with Bittrex. Transactions are valuable, so user should be ID registered with Bittrex. Unless scammers never converted currencies to fiat with this account so ID registration could be fake.
From the other side, registrant of the second domain is using e-mail from domain registered in Cyprus, which registrar (contact is lady with Russian name) doesn't want to reveal even to FTC contact details of registrant.
US FTC has system for reporting phishing scams and they can be intrigued with the value of the scam and proceed further. Nothing more I can do. Lesson learned. Never hurry with payments.