Cryptocoins-Dice.com - Looks like another crypto rip off scam.

[wpalczynski]

It appears that Cryptocoins-Dice.com turned out to be just another scam, owner seems to have run away with some substantial investor funds.  As of today the twitter account is down, official bitcoin talk thread is locked, website is down and the owners phone is off.

If anyone has information on who this Bobbax guy really is please post here.

[1715386718]

1715386718

[1715386718]

1715386718

[1715386718]

1715386718

[wpalczynski]

Bobbax connected to IRC sessions from an IP address that resolves to Paris, France.

IP Location by city, state, ISP - 178.32.26.241 From Paris France

[lyth0s]

So shitty. I can't believe this just happened. David Latapie has said he has met him in person and trusted him. Maybe David has some extra information.

[wpalczynski]

So shitty. I can't believe this just happened. David Latapie has said he has met him in person and trusted him. Maybe David has some extra information.

As far as I know David never met with him.  They were going to meet last weekend or the weekend before but it got postponed.

[lyth0s]

So shitty. I can't believe this just happened. David Latapie has said he has met him in person and trusted him. Maybe David has some extra information.

As far as I know David never met with him.  They were going to meet last weekend or the weekend before but it got postponed.

I saw a post by David where he said he and a few other BTCTalk members have met him. And they were going to have a copy of his ID soon, but hadn't obtained it yet. I'll search for it when I get on my PC again.

[wpalczynski]

So shitty. I can't believe this just happened. David Latapie has said he has met him in person and trusted him. Maybe David has some extra information.

As far as I know David never met with him.  They were going to meet last weekend or the weekend before but it got postponed.

I saw a post by David where he said he and a few other BTCTalk members have met him. And they were going to have a copy of his ID soon, but hadn't obtained it yet. I'll search for it when I get on my PC again.

Ok please post when you find it.  Thanks.

[lyth0s]

Damn I was wrong. What a terrible choice I made

Cryptocoins-dice.com (investing, not gambling). The admin is legit, I have his phone number and I'll get his ID, we talked a lot and will physically meet (as well as a lot of other Bitcoiners to testify) on the 30th of March. Estimated APR (based on statistics for just-dice): 50% Sure, as long as multisig is not implemented in Monero, there are risks. Not that other assets like GAWminers are better.

[lyth0s]

Here is the WHOIS information from his website. IDK if it's real or not though.

Name: Naouda Boris
Address: office #7874344, c/o OwO, BP80157, "City": 59053 in France.
Phone Number: +33.899498765
Email: dn42tg9mg2v056gaj6nr@c.o-w-o.info likely a throwaway


We might be be able to contact Ovh.net (his registrar) to report abuse and get more information.

Abuse email: abuse@ovh.net

Domain Name: cryptocoins-dice.com
Registry Domain ID: 1896776747_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.ovh.com
Registrar URL: http://www.ovh.com
Updated Date: 2015-01-19T09:28:11.0Z
Creation Date: 2015-01-19T09:22:12.0Z
Registrar Registration Expiration Date: 2016-01-19T09:22:12.0Z
Registrar: OVH, SAS
Registrar IANA ID: 433
Registrar Abuse Contact Email: abuse@ovh.net
Registrar Abuse Contact Phone: +33.899498765
Domain Status: clientTransferProhibited
Domain Status: clientDeleteProhibited
Registry Registrant ID:
Registrant Name: Naouda Boris
Registrant Organization:
Registrant Street: cryptocoins-dice.com, office #7874344, c/o OwO, BP80157
Registrant City: 59053
Registrant State/Province:
Registrant Postal Code: Roubaix Cedex 1
Registrant Country: FR
Registrant Phone: +33.899498765
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: dn42tg9mg2v056gaj6nr@c.o-w-o.info
Registry Admin ID:
Admin Name: Naouta Boris
Admin Organization:
Admin Street: cryptocoins-dice.com, office #7874344, c/o OwO, BP80157
Admin City: 59053
Admin State/Province:
Admin Postal Code: Roubaix Cedex 1
Admin Country: FR
Admin Phone: +33.899498765
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: qyn2wv7hdh6z81fe2lp4@g.o-w-o.info
Registry Tech ID:
Tech Name: Naouta Boris
Tech Organization:
Tech Street: cryptocoins-dice.com, office #7874344, c/o OwO, BP80157
Tech City: 59053
Tech State/Province:
Tech Postal Code: Roubaix Cedex 1
Tech Country: FR
Tech Phone: +33.899498765
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: qyn2wv7hdh6z81fe2lp4@g.o-w-o.info
Name Server: dns200.anycast.me
Name Server: ns200.anycast.me
DNSSEC: signedDelegation
URL of the ICANN WHOIS Data Problem Reporting System:
http://wdprs.internic.net/
>>> Last update of WHOIS database: 2015-03-11T06:28:36.0Z <<<

What's even more interesting is that his registrar also uses what appears to be a throwaway email and in the same area of france Roubaix Cedex 1. Is he the owner of his own resigstrar?

Domain Name: ovh.net
Registry Domain ID: 3959083_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.ovh.com
Registrar URL: http://www.ovh.com
Updated Date: 2008-01-21T09:38:34.0Z
Creation Date: 1998-06-08T02:00:00.0Z
Registrar Registration Expiration Date: 2016-06-07T02:00:00.0Z
Registrar: OVH, SAS
Registrar IANA ID: 433
Registrar Abuse Contact Email: abuse@ovh.net
Registrar Abuse Contact Phone: +33.899498765
Domain Status: ok
Registry Registrant ID:
Registrant Name: Klaba Octave
Registrant Organization: OVH Sas
Registrant Street: 140, quai du sartel
Registrant City: Roubaix
Registrant State/Province:
Registrant Postal Code: 59100
Registrant Country: FR
Registrant Phone: +33.899701761
Registrant Phone Ext:
Registrant Fax: +33.320200958
Registrant Fax Ext:
Registrant Email: b49iouz9k733zdjfjbbn@a.o-w-o.info
Registry Admin ID:
Admin Name: Klaba Octave
Admin Organization: OVH
Admin Street: 2 rue Kellermann
Admin City: Roubaix
Admin State/Province:
Admin Postal Code: 59100
Admin Country: FR
Admin Phone: +33.899701761
Admin Phone Ext:
Admin Fax: +33.320200958
Admin Fax Ext:
Admin Email: w3p41ktgol3jbft3mi36@h.o-w-o.info
Registry Tech ID:
Tech Name: Klaba Octave
Tech Organization: OVH
Tech Street: 2 rue Kellermann
Tech City: Roubaix
Tech State/Province:
Tech Postal Code: 59100
Tech Country: FR
Tech Phone: +33.899701761
Tech Phone Ext:
Tech Fax: +33.320200958
Tech Fax Ext:
Tech Email: w3p41ktgol3jbft3mi36@h.o-w-o.info

[lyth0s]

Extra information. OVH.net states the owner is Klaba Octave, but really the real Klaba Octave owns OVH.com. Thus the creator of cryptocoins-dice.com likely also owns OVH.net and is impersonating it to be a apart of OVH.com. If we could find out who allowed ovh.net to be a registrar we might be able to get his true identity.

[wpalczynski]

Extra information. OVH.net states the owner is Klaba Octave, but really the real Klaba Octave owns OVH.com. Thus the creator of cryptocoins-dice.com likely also owns OVH.net and is impersonating it to be a apart of OVH.com. If we could find out who allowed ovh.net to be a registrar we might be able to get his true identity.

Thats a good lead.  These scammers always slip up somewhere, if they were intelligent they wouldn't need to scam in the first place.

[Jungian]

I know he has videos himself on youtube. He posted some of them in the chat.

It was about some rpg maker tutorials. Super rpg or someting like that. They were in french

[saddambitcoin]

I know he has videos himself on youtube. He posted some of them in the chat.

It was about some rpg maker tutorials. Super rpg or someting like that. They were in french

good memory! i recall that too. could it be this guy?

cyrillou53

https://www.youtube.com/watch?v=X_tm6jYsDtc

edit:
https://twitter.com/cyrillou53

leads to someone called cyril mongondry

[lyth0s]

IF that is his youtube then:

Here is his paypal name: cyril mongondry
His twitch account: http://www.twitch.tv/cyrillou53
His daily Motion account: http://www.dailymotion.com/cyrillou53

daily motion account puts his city as:  Gouesnou, France

Here is a video of his desk IDK if any other info can be gleamed from it: http://www.dailymotion.com/video/xidbhu_ecran-scinder-call-of-duty-black-ops_videogames

His google plus account: https://plus.google.com/115336350285196194153/posts

One of his friends that also lives in his same city "Pierrick Manroubia": https://plus.google.com/116502350710816011109/posts

[fluffypony]

Extra information. OVH.net states the owner is Klaba Octave, but really the real Klaba Octave owns OVH.com. Thus the creator of cryptocoins-dice.com likely also owns OVH.net and is impersonating it to be a apart of OVH.com. If we could find out who allowed ovh.net to be a registrar we might be able to get his true identity.

Just to correct this - ovh.net and ovh.com are both owned by ovh. The nameservers for ovh.com are:

   Name Server: DNS.OVH.NET
   Name Server: DNS10.OVH.NET
   Name Server: DNS200.ANYCAST.ME
   Name Server: NS.OVH.NET
   Name Server: NS10.OVH.NET
   Name Server: NS200.ANYCAST.ME

I don't think ovh.com would use nameservers hosted by a scammer that wasn't them;)

The "o-w-o.info" email addresses are part of a registration privacy offer, so not a throwaway, same goes for phone number and address on the whois.

The videos train-of-investigation is good, and seems promising.

[Jungian]

I know he has videos himself on youtube. He posted some of them in the chat.

It was about some rpg maker tutorials. Super rpg or someting like that. They were in french

good memory! i recall that too. could it be this guy?

cyrillou53

https://www.youtube.com/watch?v=X_tm6jYsDtc

edit:
https://twitter.com/cyrillou53

leads to someone called cyril mongondry

Not sure. My memory is not very vivid but it doesn't really look like I recall.

[ffmad]

Extra information. OVH.net states the owner is Klaba Octave, but really the real Klaba Octave owns OVH.com. Thus the creator of cryptocoins-dice.com likely also owns OVH.net and is impersonating it to be a apart of OVH.com. If we could find out who allowed ovh.net to be a registrar we might be able to get his true identity.

Just to correct this - ovh.net and ovh.com are both owned by ovh. The nameservers for ovh.com are:

   Name Server: DNS.OVH.NET
   Name Server: DNS10.OVH.NET
   Name Server: DNS200.ANYCAST.ME
   Name Server: NS.OVH.NET
   Name Server: NS10.OVH.NET
   Name Server: NS200.ANYCAST.ME

I don't think ovh.com would use nameservers hosted by a scammer that wasn't them;)

The "o-w-o.info" email addresses are part of a registration privacy offer, so not a throwaway, same goes for phone number and address on the whois.

The videos train-of-investigation is good, and seems promising.

I have some little things hosted on ovh, and they asked me my identity card

So it should be the same for this scammer, we could report him to abuse@ovh.net

For the YouTube videos I don't think it's him, it would be weird to give a profile with so much information, when he hide everything on the other side :/

[smooth]

For the YouTube videos I don't think it's him, it would be weird to give a profile with so much information, when he hide everything on the other side :/

People make mistakes. I wouldn't assume it is or isn't him.

[conspirosphere.tk]

So it should be the same for this scammer, we could report him to abuse@ovh.net

maybe to the flics too (french cops).
I had 400K+ doge and a few hundreds XMG there. I will donate all my balance there to whoever get the scammer nailed so to recover the funds.

[wpalczynski]

If there is any online content which Bobbax could remove like youtube vids, etc. can someone please download that data so we have copies for our records?

[GingerAle]

also ( and especially in regards to the last post) it might be wise to move this conversation somewhere that is invite only. It's rare that an alleged scammer has the opportunity to follow the investigation of his alleged scam online.