Pages:
Author

Topic: Mooncoin taken over by the feds? - page 5. (Read 14994 times)

hero member
Activity: 756
Merit: 500
September 27, 2011, 06:58:16 PM
#51
I doubt he will be back as Mr Moon, maybe Mr Sun or Mr Stars.  If he is willing to resolve the mess, he would be out already rather remain hidden
member
Activity: 86
Merit: 10
September 27, 2011, 06:43:52 PM
#50
An IP Address that Mr Moon used was 24.7.158.162. This list of wikipedia pages edited by this IP address are here. This list includes namecoin related edits. It also includes edits to Christian Verdun and a disambiguation page for 'Paradox', an art piece by Christian Verdun. There are a lot of edits associated with that. Christian Verdun sells artwork for bitcoins and solid coins here. Maybe Mr Moon knows him? Or he knows Mr Moon? Christian goes to UC Davis, not far from Sacramento where Mr Moon's IP address is geolocated.

Christian Verdun appears to be upisdown on the bitcointalk forums here. He has posted as being a user of moonco.in.

Mr Moon's Wikipedia page edits include plant related pages, a topic that Christian indicates as being interested in studying at UC Davis in this interview.

Christian/Uptown, if you read this, have you had any contact with Mr Moon since the closing of his site?

LOL an edit to a page on money laundering that is ironic
member
Activity: 322
Merit: 10
September 27, 2011, 02:59:19 AM
#49
I have used the site like many others here but I have no involvement in it. Please stop harassing me and making threats of physical violence. The "evidence" provided so far does not prove my involvement and if it did you should take this information to the police not threaten me.

Every internet connection I use is shared internet. In my apartment/dorm (It's included in the rent, like our water), on campus and at coffee shops. I'm not a skilled programmer (not unless you count html/css) and I spend all my time studying plant science and working on art and selling it. To me it is a rather odd accusation that I have been operating a gambling site exchange, since I have spent the summer doing field research to cover my internship credit.

In fact, the above post shows that I was logged in at the same time as the accused scammer at the same time with a different IP address. Having the same IP address at one point in time is not as good of evidence as having different IP addresses at the same time that we are not the same person.

If you are still convinced it is me, I encourage you to use legal channels because I'm not guilty and have nothing to hide from the police.

Full disclosure regarding my connection: I did use mooncoin to bet on games and play poker. I was initially interested after it was posted on reddit because it was open source (I generally support open source software, which is what originally interested me in Bitcoin, its a common theme in my art). I lost some Bitcoin I made selling prints. I did have online conversations with MrMoon when the site was just a poker site, he was at the tables often and seemed nice.

I have sold art work for Bitcoins, a fair amount, and I believe everyone of my customers has only positive feedback.


 

sr. member
Activity: 252
Merit: 251
September 23, 2011, 08:47:52 PM
#48
I checked through #solidcoin logs, this guy certainly did talk to me about his art pages. Strangely? Him and mrmoon are on at the same time here.

Quote
[23:17] Solidcoin poker @ https://moonco.in/tables/solidcoin
[23:17] * leftisright ([email protected]) has joined #solidcoin
[23:18] @ is selling art prints for solidcoins. http://paradox.rambisyouth.com
[23:19] * leftisright is now known as 92AAD5SJR
[23:27] <92AAD5SJR> my nick changed
[23:33] doublec runs bitparking
[23:35] <92AAD5SJR> Does that make you a sucker?
[23:36] Looking to buy solidcoins above market value @ https://moonco.in/exchange/solidcoin
[23:36] here wwe go, someone got mad and dumping it
[23:36] RealSolid, you must have a lot of coins
[23:37] Why must he?
[23:37] <@RealSolid> i wish i did
[23:37] <@RealSolid> i only have 0.6GH of mining power

And our private chat

Quote

Session Start: Fri Aug 26 10:15:56 2011
Session Ident: leftisright
[10:15] Session Ident: leftisright (freenode, RealSolid) ([email protected])
[10:15] Hey I wanted to get listed on solidcoin.info. I'm a merchant who sells art prints for solidcoins
01[10:16] ok
[10:16] http://paradox.rambisyouth.com
01[10:16] i just woke up but give me the details
[10:16] Ok, take your time I'm not in a rush
[11:04] So did it get up there?
[11:06] and do I get a bounty?
01[11:08] yep
01[11:09] could you provide more notice of solidcoins though
01[11:09] perhaps use the logo or something something
01[11:09] -somewhere
[11:24] Certainly
[11:24] Do you have any uploaded anywhere?
01[11:24] the website has a PNG with transparency you can use
01[11:24] its on the bounties page
[11:25] Ok great, thanks.
[23:17] Hey we talked about obtaining a bounty for selling prints for solidcoins
01[23:17] yep
[23:17] sUAY7SQrc8hEPcEGFVSCBr22ciB5ApUWUc
[23:17] here is my address
[23:18] I will update the image today
[23:18] Gonna advertise in the channel too
01[23:18] ok
01[23:18] thanks for supporting solidcoin
01[23:19] sent
Session Time: Sat Aug 27 00:00:00 2011
Session Close: Sat Aug 27 12:36:50 2011

Hope it helps.
full member
Activity: 143
Merit: 101
September 23, 2011, 03:56:54 PM
#47
Following up to my last post. Christian Verdun lurked in irc as 'upisdown' in #bitcoin-otc. His OTC rating is here. Doing a '/msg nickserv info upisdown' on Freenode I get:
Quote
NickServ(NickServ@services.)- Information on upisdown (account upisdown):
NickServ(NickServ@services.)- Registered : Jun 20 16:10:19 2011 (13 weeks, 3 days, 23:18:38 ago)
NickServ(NickServ@services.)- Last addr  : [email protected]
NickServ(NickServ@services.)- Last seen  : Jun 22 15:20:33 2011 (13 weeks, 2 days, 00:08:24 ago)
NickServ(NickServ@services.)- Flags      : HideMail
NickServ(NickServ@services.)- *** End of Info ***
That IP address is the same as the IP address that was Mr Moon's moonco.in server, and the IP address Moon lurked in #namecoin, and posted to forums and email. Could it be a university shared IP and they were both behind the same NAT or something?
Quote
NickServ(NickServ@services.)- Information on mr_moon (account mr_moon):
NickServ(NickServ@services.)- Registered : Jun 22 15:26:07 2011 (13 weeks, 2 days, 00:09:24 ago)
NickServ(NickServ@services.)- Last addr  : [email protected]
NickServ(NickServ@services.)- Last seen  : Sep 01 20:00:32 2011 (3 weeks, 0 days, 19:34:59 ago)
NickServ(NickServ@services.)- Flags      : HideMail
NickServ(NickServ@services.)- *** End of Info ***

I just checked this in the db. The (dynamic [DHCP assigned, though it hasn't changed in a bit]) address registered to that host at that time is not a shared area or enforced NAT. It's a residential home addr   ess.

Quote from: Spacey
Edit: seems a lot of dreamhost domains have that apache2-moon path ;-)

moon.dreamhost.com is a coincidentally named dreamhost shared hosting server, there are a few thousand accounts on it. Ignore this trail. Misleading.
full member
Activity: 168
Merit: 100
September 23, 2011, 02:05:07 PM
#46
I have followed some coins...

https://bitcointalksearch.org/topic/m.471531

sV6xrL4YCV75jaRfbdnaH6WLhhn1FBY3Px

http://blockexplorer.sytes.net/address/sV6xrL4YCV75jaRfbdnaH6WLhhn1FBY3Px
http://blockexplorer.sytes.net/tx/2e8386160e28ae7f06fee9a0a629a6328477fa15aff9dde1d18f3816318a1f1d#i1

0.5 SC to mooncoin donation address... Could be just a donation, or not...

EDIT:
The second part of that transaction above goes to another address, and then additionally 100 in 1 transaction to the moincoin address.
http://blockexplorer.sytes.net/tx/57eee5a9309638ef3ef4f7c1a1e44b444befe4a3f3d5196983a18ced5bbf3618#i0

http://webcache.googleusercontent.com/search?q=cache:kuP7BpRj_H8J:https://moonco.in/bet/389/view+sckHNgUp87mpi1SRZNQWmRK6rjqbbGb2EK&cd=1&hl=de&ct=clnk&gl=de

Donate
Bitcoins: 1GVLbQsiwsTQicXMX2QKh7GJ67u3GzRAxo
Namecoins: NJsKXhAn9MaCaoRBDpf75vwhEWFu3uNvBD
Solidcoins: sckHNgUp87mpi1SRZNQWmRK6rjqbbGb2EK

© 2011 Mooncoin
full member
Activity: 154
Merit: 100
September 23, 2011, 12:10:45 PM
#45
If that guy is Moon, and if he still goes to school at the .edu address, I imagine he'd have a harder time graduating if the school administration was informed of his potentially 'fraudulent' activities (probably something against the CoC). Infact, if it is the same guy, that same guy might be willing to trade all the BTC he stole for his college degree. It might be a way for him to get out of this without any (if any?) criminal charges.

I don't know if that'd be considered blackmail. But hell, i'm not a lawyer, just thinking out loud.
donator
Activity: 289
Merit: 250
September 23, 2011, 11:57:55 AM
#44
I found Christian Verdun's email address here: https://www.facebook.com/topic.php?uid=56425896494&topic=20350&post=100266

(gotta love facebook!)
legendary
Activity: 1078
Merit: 1005
September 23, 2011, 11:05:13 AM
#43
Someone is selling Christian Verdun art...
Yes, he's paradoxart on reddit too selling his art. There's a couple of moonco.in related posts too.
full member
Activity: 168
Merit: 100
September 23, 2011, 10:56:43 AM
#42
http://solidcoin.info/market.php

Someone is selling Christian Verdun art...

Traceroute paradox.rambisyouth.com goes to  apache2-moon.beijing.dreamhost.com [69.163.194.64]
Edit: seems a lot of dreamhost domains have that apache2-moon path ;-)

Maybe useful:
http://pool.sks-keyservers.net:11371/pks/lookup?op=vindex&search=0x45D09545F1218E9F
https://checkout.google.com/reviews/merchant/endUserReviews?sellerId=277296763527281

No photos tagged “abstract” - christian's Blog on Vox
trimpton.vox.com/library/photos/tags/abstract/
AIM: trimpton; Google Talk: [email protected]; Skype: trimpton
sr. member
Activity: 677
Merit: 250
September 23, 2011, 10:43:33 AM
#41
Did anyone contact the immigration and customs enforcement? Stealing bitcoins etc is a pretty arbitrary crime because the value is arbitrary and I doubt any agency would commit resources to tracking down BTC thiefs but people scamming other people by impersonating a federal officer is known territory to them.

Hmm, I guess one could draw a line between putting up a fake ICE seizure, and impersonating a federal officer/agency.


It'll be interesting to see how this plays out.

If I go to moonco.in I am greeted with a certificate digitally signed by the ICE. If that's not impersonation I don't know what is.
legendary
Activity: 1078
Merit: 1005
September 23, 2011, 10:34:29 AM
#40
Following up to my last post. Christian Verdun lurked in irc as 'upisdown' in #bitcoin-otc. His OTC rating is here. Doing a '/msg nickserv info upisdown' on Freenode I get:
Quote
NickServ(NickServ@services.)- Information on upisdown (account upisdown):
NickServ(NickServ@services.)- Registered : Jun 20 16:10:19 2011 (13 weeks, 3 days, 23:18:38 ago)
NickServ(NickServ@services.)- Last addr  : [email protected]
NickServ(NickServ@services.)- Last seen  : Jun 22 15:20:33 2011 (13 weeks, 2 days, 00:08:24 ago)
NickServ(NickServ@services.)- Flags      : HideMail
NickServ(NickServ@services.)- *** End of Info ***
That IP address is the same as the IP address that was Mr Moon's moonco.in server, and the IP address Moon lurked in #namecoin, and posted to forums and email. Could it be a university shared IP and they were both behind the same NAT or something?
Quote
NickServ(NickServ@services.)- Information on mr_moon (account mr_moon):
NickServ(NickServ@services.)- Registered : Jun 22 15:26:07 2011 (13 weeks, 2 days, 00:09:24 ago)
NickServ(NickServ@services.)- Last addr  : [email protected]
NickServ(NickServ@services.)- Last seen  : Sep 01 20:00:32 2011 (3 weeks, 0 days, 19:34:59 ago)
NickServ(NickServ@services.)- Flags      : HideMail
NickServ(NickServ@services.)- *** End of Info ***
legendary
Activity: 1078
Merit: 1005
September 23, 2011, 10:01:59 AM
#39
An IP Address that Mr Moon used was 24.7.158.162. This list of wikipedia pages edited by this IP address are here. This list includes namecoin related edits. It also includes edits to Christian Verdun and a disambiguation page for 'Paradox', an art piece by Christian Verdun. There are a lot of edits associated with that. Christian Verdun sells artwork for bitcoins and solid coins here. Maybe Mr Moon knows him? Or he knows Mr Moon? Christian goes to UC Davis, not far from Sacramento where Mr Moon's IP address is geolocated.

Christian Verdun appears to be upisdown on the bitcointalk forums here. He has posted as being a user of moonco.in.

Mr Moon's Wikipedia page edits include plant related pages, a topic that Christian indicates as being interested in studying at UC Davis in this interview.

Christian/Uptown, if you read this, have you had any contact with Mr Moon since the closing of his site?
full member
Activity: 154
Merit: 100
September 16, 2011, 02:36:18 PM
#38
Did anyone contact the immigration and customs enforcement? Stealing bitcoins etc is a pretty arbitrary crime because the value is arbitrary and I doubt any agency would commit resources to tracking down BTC thiefs but people scamming other people by impersonating a federal officer is known territory to them.

Hmm, I guess one could draw a line between putting up a fake ICE seizure, and impersonating a federal officer/agency.


It'll be interesting to see how this plays out.
newbie
Activity: 22
Merit: 0
September 16, 2011, 02:28:29 PM
#37
Did anyone contact the immigration and customs enforcement? Stealing bitcoins etc is a pretty arbitrary crime because the value is arbitrary and I doubt any agency would commit resources to tracking down BTC thiefs but people scamming other people by impersonating a federal officer is known territory to them.
newbie
Activity: 37
Merit: 0
September 16, 2011, 02:11:36 PM
#36
Truly sad and amazing these things happens. Sucks that it happened the same day our site https://btfuture.com went live because now everyone is skeptical; however, if anyone wants to continue to participate in a prediction market run on bitcoins to join our site.

If you question whether you can trust us, we will gladly verify our identities with a trusted member/s of the bitcointalk community. Thanks for those of you who have joined now, just need more so we can get our market up and running!
full member
Activity: 164
Merit: 100
September 16, 2011, 01:41:57 PM
#35
Hey guys....

I had deposited 34BTC on moonco for trading. The address that was given to me for the deposit was:

1B6egk2RjiHRnZKjj7aoT89ZtqiQCEQrhL

as you can track on block explorer all the way, he moved them multiple times. Look like he had a total of 896 Bitcoins. maybe more.

Is there any way to get this back? or are am I screwed?

any info will be helpful
sr. member
Activity: 448
Merit: 251
Bitcoin
September 16, 2011, 11:26:50 AM
#34
doesnt make sense that ice would close his gmail and especially his reddit account (wtf?). Definitely smells of scam imo

Fairly amazing...  people do such crap...  if he got hacked then scream I got hacked...  if he's just a con artist then we'll add it to the long list that came before him and most likely will come after.

Tards like that do nothing to help us.

hero member
Activity: 756
Merit: 500
September 16, 2011, 07:00:10 AM
#33
Thank goodness I withdraw every little coins I had the moment it was up.
sr. member
Activity: 728
Merit: 252
SmartFi - EARN, LEND & TRADE
September 16, 2011, 04:12:40 AM
#32
Um, part of the free market involves figuring out what happened and who is good and bad to deal with.

And then they change their username and do the whole thing over again.


The free market: it can move mountains*


*offer only valid if you already own mountain moving equipment. If you do not own such equipment, you are probably a parasite and received this message in error
Pages:
Jump to: