Pages:
Author

Topic: How to shut down scammer / phishing websites? (Read 2803 times)

legendary
Activity: 2282
Merit: 1204
The revolution will be digital
hi Roger! i can help you with this scammer. I can find full info scammer. But i want 0.5btc, send me pm

Stop spamming... this is a year old thread.
newbie
Activity: 11
Merit: 0
hi Roger! i can help you with this scammer. I can find full info scammer. But i want 0.5btc, send me pm
newbie
Activity: 66
Merit: 0
just tell about the scammers as much people as possible. and report about them, as you already have done
full member
Activity: 166
Merit: 100
I just wrote an article (yesterday) about this on my infosec website - http://nopasara.com/2600/how-to-shut-down-a-phishing-site/ - which explains several ways of dealing with phishing / scammer sites. Hope you find it useful
sr. member
Activity: 420
Merit: 250
i'm a professional DMCA agent.
this means i file DMCA takedown requests (tens of thousands of them) for a living...

DMCA only applies to copyrighted materials. I think the OP is more concerned about Trademark infringement. I think the suggestion to complain to the registrar is a good one.

Looks like it was done already:
Quote
   Domain servers in listed order:
      NS1.SUSPENDED-FOR.SPAM-AND-ABUSE.COM
      NS2.SUSPENDED-FOR.SPAM-AND-ABUSE.COM


In theory, yes, DMCA applies only to copyrighted materials, but in the case of site copying / phishing, having a registered trademark can help move things along and the two types of infringement can be referenced in the same take down letter.
legendary
Activity: 1008
Merit: 1001
Let the chips fall where they may.
i'm a professional DMCA agent.
this means i file DMCA takedown requests (tens of thousands of them) for a living...

DMCA only applies to copyrighted materials. I think the OP is more concerned about Trademark infringement. I think the suggestion to complain to the registrar is a good one.

Looks like it was done already:
Quote
   Domain servers in listed order:
      NS1.SUSPENDED-FOR.SPAM-AND-ABUSE.COM
      NS2.SUSPENDED-FOR.SPAM-AND-ABUSE.COM
legendary
Activity: 1274
Merit: 1004

Op, i have reported that site, domain will go down soon.

@Memorydealer here you go
http://who.is/whois/bitcoinestore.com

Domain suspended
sr. member
Activity: 420
Merit: 250
You don't really need an attorney for most takedowns.

Do as lv426 recommended by sending a DMCA takedown notice to the hosting provider, and keep moving upstream until you get a satisfactory response. You can find each U.S. based company's copyright agent for notices here: http://www.copyright.gov/onlinesp/list/a_agents.html

That is generally the fastest way to get something taken down.

Incidentally, it doesn't appear as though you have registered your trademarks with the USPTO. You might consider registering as I've found it can make takedowns easier, especially when dealing with foreign hosting companies.

If the DMCA notices don't resolve it, you can attempt to get control of the domain with a WIPO action. Document their phishing attempts and you will likely prevail, but it won't happen overnight. http://www.wipo.int/amc/en/domains/
legendary
Activity: 1050
Merit: 1002
Where are you guys getting the China stuff?

@lv426 appears correct. The site seems hosted by SingleHop.com located in Chicago:

Corporate Headquarters:

SingleHop, LLC.
ATTN: Account Management
215 W. Ohio St. 5th Floor
Chicago, IL 60654

Legal Inquiries

All legal inquiries should be
sent via fax and certified mail
to the addresses below.
At this time we do not accept
legal inquiries via E-mail.
Fax: 773-305-1666 SingleHop, LLC.
ATTN: Account Management
215 W. Ohio St. 5th Floor
Chicago, IL 60654

Also the domain was registered by GoDaddy.com on 4/15/2013. They are using GoDaddy for the registration and DNS which then points to SingleHop. That's very amateurish looking for a scam.

These are both US based companies which means law abiding and compliant usually. GoDaddy to my knowledge doesn't accept any anonymous form of payment so you may be able to get their identity through them. They do accept PayPal, though, and it's possible to buy blackmarket PayPal accounts.

The WHOIS lists a "john" in Thailand which is probably made up.
legendary
Activity: 2282
Merit: 1050
Monero Core Team
I would talk first with a trademark and copyright lawyer since I suspect both trademark and copyright infringement here. An initial consultation is well worth the money in these situations.

Options can be:
DMCA notices, targeting search engines, hosting providers etc. based in the United States.
Go after the domain name under the ICANN process for trademark infringement.
Do some research: Who are they using as a payment processor both for Bitcoin and fiat?  Who is their domain registrar? Who are their suppliers? This can be useful if you find a US nexus to go after for example in litigation.

PS: I found the service at the real Bitcoinstore to be excellent.
newbie
Activity: 7
Merit: 0
i did only a surface analysis, if people post more infos about this group, i will dig deeper...

here is some more info on singlehop (AS32475)

http://as.robtex.com/as32475.html
newbie
Activity: 7
Merit: 0
ah well, who cares about their whois entries, you have several vectors for a DMCA on them...

http://www.singlehop.com/
if they do not comply, then you escalate to

https://www.wholesaleinternet.net/




sr. member
Activity: 313
Merit: 250
What if site is hosted on a offshore DMCA ignored server?

Edit it is.

network:Organization:LiCHAO
network:Street-Address:haerbingongchengdaxue
network:City:Haerbin
network:State:heilongjiang
network:Country-Code:CN

These are the same people running bitcoinarr ( the scam that gets posted everywhere,reddit,forum  50 bitcoins for 800$ etc... )
Would love to see somebody take those fuckers down.

network:Auth-Area:108.163.192.0/18
network:IP-Network:108.163.231.96/28
network:Organization:LiCHAO


If you google lichao, this seems to be some smart chinese chess master lol...
legendary
Activity: 1288
Merit: 1226
Away on an extended break
What DMCA has to do with a phishing site??

nature of the site is irrelevant. they use the same name, same icon...
if the original site got a trademark/copyright on it, they can file a DMCA.


What if site is hosted on a offshore DMCA ignored server?

Edit it is.

network:Organization:LiCHAO
network:Street-Address:haerbingongchengdaxue
network:City:Haerbin
network:State:heilongjiang
network:Country-Code:CN

Meh, we've been getting them a lot since the mtgix days. It's the same individual/group.
legendary
Activity: 1274
Merit: 1004
What DMCA has to do with a phishing site??

nature of the site is irrelevant. they use the same name, same icon...
if the original site got a trademark/copyright on it, they can file a DMCA.


What if site is hosted on a offshore DMCA ignored server?

Edit it is.

network:Organization:LiCHAO
network:Street-Address:haerbingongchengdaxue
network:City:Haerbin
network:State:heilongjiang
network:Country-Code:CN
sr. member
Activity: 431
Merit: 251
What DMCA has to do with a phishing site??

nature of the site is irrelevant. they use the same name, same icon...
if the original site got a trademark/copyright on it, they can file a DMCA.


Exactly.  I haven't checked out the site, but I assume they would have ripped of some of your copyrighted content (images, text, etc).  That should be enough for a claim. 

Even if it isn't, what are they gonna do? Sue you? Good luck to them with that Smiley
newbie
Activity: 7
Merit: 0
What DMCA has to do with a phishing site??

nature of the site is irrelevant. they use the same name, same icon...
if the original site got a trademark/copyright on it, they can file a DMCA.
legendary
Activity: 1274
Merit: 1004
i'm a professional DMCA agent.
this means i file DMCA takedown requests (tens of thousands of them) for a living...

unfortunately, you can't file a complaint out of the blue.
you must adhere to some formal rules.

most important, you need to be the right holder or authorized to act on his behalf.

this means, the original bitcoinstore.com needs to file the complaint.

They can contact me via pm, i would do it for them free of charge.

Or i can give them a working template email and basic info on how to do it on their own.


What DMCA has to do with a phishing site??

Op, i have reported that site, domain will go down soon.
newbie
Activity: 7
Merit: 0
i'm a professional DMCA agent.
this means i file DMCA takedown requests (tens of thousands of them) for a living...

unfortunately, you can't file a complaint out of the blue.
you must adhere to some formal rules.

most important, you need to be the right holder or authorized to act on his behalf.

this means, the original bitcoinstore.com needs to file the complaint.

They can contact me via pm, i would do it for them free of charge.

Or i can give them a working template email and basic info on how to do it on their own.



legendary
Activity: 1274
Merit: 1004
Contact Registrar, they will suspend domain.
Pages:
Jump to: