Crypto Poker Group scam

[cryptopokerclubscam]

No they just scammed me out of 2btc.  This site should be shutdown by the authorities.  Anyone using this site, you will never ever get your money out of this site.  I deposited .5 bitcoin, spread over a few months i was able to build it to 2btc.  I withdrew 1btc at this time.  They then accused me of logging on from multiple locations and "irregular betting patterns" LOL.  total trash.  I do the same thing every time, i change up my playing styles depending on opponents.  I have been a long time player of online poker.  I should of googled prior to depositing.  Now i lost 2BTC.  This place is a grade A scam ,  never ever even play on here or deposit, they are scum scammers.

[LastcallS]

No they just scammed me out of 2btc.  This site should be shutdown by the authorities.  Anyone using this site, you will never ever get your money out of this site.  I deposited .5 bitcoin, spread over a few months i was able to build it to 2btc.  I withdrew 1btc at this time.  They then accused me of logging on from multiple locations and "irregular betting patterns" LOL.  total trash.  I do the same thing every time, i change up my playing styles depending on opponents.  I have been a long time player of online poker.  I should of googled prior to depositing.  Now i lost 2BTC.  This place is a grade A scam ,  never ever even play on here or deposit, they are scum scammers.

I think their strategy is pretty obvious at this point. The traffic is mostly from their house bots and few real players. They are trying to lure new players with unbelievable deposit bonus, rake race and rakeback. Most of the time new players loss their deposit  vs house players and if real player got lucky and win some btc, cpc don't let them  cash out or just make it look they got hacked. In conclusion no one gets their btc.... Such a scam!!!

[phreess]

Hey guys, I made this thread in the scammer's main thread:

I'm new here and wanted to start by helping fellow members.

I think there's tons of more info to be found. I will update as soon as I report them to the service providers as well as if I find more details.

Hey guys, I just joined bitcointalk, and I want to start a poker site, so I have been looking into the competition, and seeing that cryptopokergroup.com is scamming members, I decided to take a look and this is what I found so far:

https://www.whois.com/whois/cryptopokerclub.io - The whois info of their first domain

https://www.whois.com/whois/cryptopokergroup.com - The whois info of their latest domain.

I found several things that can be used to corrupt their site, if you guys so desire:

I found their "admin" login page: https://admin.cryptopokergroup.com/login/default.aspx?ReturnUrl=%2f

Dude, that admin login page is so insecure and I may bruteforce my way into logging into their scammer's cave. That's probably where all the scams start.

Also, I found several emails to contact in case of abuse (which I will place down below).

Also, I found where their game servers are, Data Miners S.A. ( Racknation.cr )
I will submit abuse emails and reports to all parties laid here, in order to take down this scammer site once and for all. I don't think we can save any scammed coins, but we can stop these scammers from taking from more people.

Their server IP from cryptopokergroup.com is on https://www.racknation.cr/ is: 190.112.223.106 (Racknation.cr IP)
Their admin, affiliate and game servers IPs is: 190.112.223.106 (Racknation.cr IP)
Their root public site IP is: 192.64.115.146 (Namecheap.com Hosting IP)

So, in short, their affiliate, admin and game servers are located at https://www.racknation.cr/ and their root domain hosting (the site that everyone sees), is hosted at https://www.namecheap.com/hosting/

In regards to their emails, they are managed from Google with these servers:
alt2.aspmx.l.google.com
aspmx.l.google.com
alt3.aspmx.l.google.com
alt4.aspmx.l.google.com
alt1.aspmx.l.google.com

Also, their google site verification code is:
google-site-verification=jQPChjSS9oLB59VXNUJmuaIzGGJb-46EuceY4jzdinc

So, as I said, we can just send tons of emails to the abuse departments of each service provider and hope they take down their service and pass their details to the authorities.

Hopefully, Racknation.cr will cooperate as that's where the main scam operation takes place (the game server, logs, the admin scam panel, etc)

When I find more info and after I report these scammers, I will post here or on the scam accusation thread (https://bitcointalk.org/index.php?topic=5243049.0)

Also, I found some subdomains of the deleted cryptopokerclub.io and their ongoing scam site cryptopokergroup.com:

lyncdiscover.cryptopokerclub.io
instantplay.cryptopokerclub.io
game.cryptopokerclub.io
affiliate.cryptopokerclub.io
admin.cryptopokerclub.io


instantplay.cryptopokergroup.com
game.cryptopokergroup.com
affiliate.cryptopokergroup.com
admin.cryptopokergroup.com

EDIT:

At game.cryptopokergroup.com I found 3 .exe files

SetupCryptoPoker247.exe
SetupCryptoPokerClub.exe
SetupCryptoPokerGroup.exe

I don't suggest you download these at all, but If needed, I uploaded them securely:

https://mega.nz/file/ok9lhCrB#7PDsR__gLSHVNfGSVQnEeefyy5zvpaWA1SrFYRyLWqw
https://mega.nz/file/l50VhCRC#g3g-pkZUQIxbfyfv1so9gTibmQ53eEgZ6-pLM8lG5vw
https://mega.nz/file/M40zWQJT#YGMMwiabsSHuZNBOlDwKa8xDlCVUe5XDFyWoOCGJlhg

EDIT 2:

it seems that domain cryptopokergroup.com is also propagating malware through exe files.

The setup files can be found at:

https://game.cryptopokergroup.com/SetupCryptoPokerClub
https://game.cryptopokergroup.com/
https://game.cryptopokergroup.com/SetupCryptoPoker247
https://game.cryptopokergroup.com/SetupCryptoPokerGroup

Just add .exe to the files above as it seems btc talk censors the links

It seems that SetupCryptoPokerGroup.exe and SetupCryptoPokerClub.exe files are the same, just the name changed.

Anyway, as two files are the same, only 2 scans could be done. The results are below:

https://www.hybrid-analysis.com/sample/b6d6af6e588eca6422cf4829cf2f4bacf324ecdf7830930296e4a7408c338a97
https://www.hybrid-analysis.com/sample/593ce36fea679d7ed8db2881e89c6650c18202cbaee608d901ea9db33541fd54

If, by the time the setup exe files can't be found in those URLs, there are backups at:

https://mega.nz/file/ok9lhCrB#7PDsR__gLSHVNfGSVQnEeefyy5zvpaWA1SrFYRyLWqw
https://mega.nz/file/l50VhCRC#g3g-pkZUQIxbfyfv1so9gTibmQ53eEgZ6-pLM8lG5vw
https://mega.nz/file/M40zWQJT#YGMMwiabsSHuZNBOlDwKa8xDlCVUe5XDFyWoOCGJlhg

EDIT 3:

Also, it's possible that the game server could send your hole cards to the game server. This is not verified yet, but it's possible that's what could happen.

[phreess]

Hey guys, this is important.

So, they have been using IP "190.112.223.106" and it seems it's from their game server.

I don't know if these scammers own this IP, but I'm sure it has to do with them as if you see the IP records, you can see it's from their game server the hostname:

 ip: "190.112.223.106"
hostname: "game.cryptopokergroup.com"
city: "San Jose"
region: "California"
country: "US"
loc: "37.3329,-121.8916"
postal: "95113"
timezone: "America/Los_Angeles"
asn: Object
asn: "AS52423"
name: "Data Miners S.A. ( Racknation.cr )"
domain: "racknation.cr"
route: "190.112.223.0/24"
type: "isp"
company: Object
name: "Data Miners S.A. ( Racknation.cr )"
domain: "racknation.cr"
type: "isp"
privacy: Object
vpn: false
proxy: false
tor: false
hosting: false
abuse: Object
address: "300m sur de restaurante il pomodoro, Edificio Centro Creativo, ,, 9182100 - San Pedro - SJ"
country: "CR"
email: "noc@RACKNATION.CR"
name: "Felipe Cruz"
network: "190.112.220.0/22"
phone: "+506 40001053 []"



Either, they are in California, USA or in Costa Rica.

And it could be possible to get a judge to make an order to get Racknation to provide these scammers details, such as logged IPs, payment details, server details and more.

I tried contacting the game server Racknation.cr, but it seems they don't give a flying fuck about this.

https://i.imgur.com/zitIgZX.png
https://i.imgur.com/DHNi6Lp.png


I also contacted Namecheap, Namecheap Hosting and Godaddy about all this and let's see if they give a fuck about this.

I will pm everyone that has posted here that says they have been scammed by this pokerer site. Let's see if we can get a class action suit against these scammers.

[phreess]

So far, I report abuse and malware to these emails:

abuse@namecheap.com
abuse@namecheaphosting.com
netabuse@godaddy.com
abuse@godaddy.com
contentcomplaints@godaddy.com
noc@RACKNATION.CR
abuse@RACKNATION.CR

I will pm all of those that were affected by these people and see what we can do.

[LastcallS]

Thank you  phreess,
Keep up the good work. I hope we can take a legal action against these scammers. Count me in for class action!!!

[CryptoNinja11]

If you can prove they are in LA area and can get info such as name and address or phone, I would suggest contacting LAPD and report a fraud in progress (unless they shut it down in which case it would no longer be in progress).

That would be the way to go, criminal charges first, then civil.

[phreess]

If you can prove they are in LA area and can get info such as name and address or phone, I would suggest contacting LAPD and report a fraud in progress (unless they shut it down in which case it would no longer be in progress).

That would be the way to go, criminal charges first, then civil.

I think that will be tough. We need racknation.cr to cough the details of those fckers, that way we will know who we are against here.

[phreess]

If you can prove they are in LA area and can get info such as name and address or phone, I would suggest contacting LAPD and report a fraud in progress (unless they shut it down in which case it would no longer be in progress).

That would be the way to go, criminal charges first, then civil.

maybe we hire your "lawyers" first, then go criminal and civil hjaha

[CryptoNinja11]

If you can prove they are in LA area and can get info such as name and address or phone, I would suggest contacting LAPD and report a fraud in progress (unless they shut it down in which case it would no longer be in progress).

That would be the way to go, criminal charges first, then civil.

I think that will be tough. We need racknation.cr to cough the details of those fckers, that way we will know who we are against here.

Tell them they are currently assisting in committing a financial crime and you’d prefer to get the info without getting the police involved.

[phreess]

If you can prove they are in LA area and can get info such as name and address or phone, I would suggest contacting LAPD and report a fraud in progress (unless they shut it down in which case it would no longer be in progress).

That would be the way to go, criminal charges first, then civil.

I think that will be tough. We need racknation.cr to cough the details of those fckers, that way we will know who we are against here.

Tell them they are currently assisting in committing a financial crime and you’d prefer to get the info without getting the police involved.

Dude, they dont give a fuck about this.

We need to lawyer up. I sent you guys a pm with a telegram group link so we can discuss this further, but anyway, I didn't lose money, so you guys are not interested, ok then.

[phreess]

Hey guys, it may not be much, but we got these scammers to close their sales thread at: https://bitcointalk.org/index.php?topic=4051790.msg54456822#msg54456822

!!! A small victory!

[phreess]

THese scammers changed their telegram group to: https://t.me/cryptopokergroup

Their previous scam telegram group for CryptoPokerGroup Scam was: https://t.me/cryptopokerclub

Notice they changed "club" to "group".

Funny, how they changed their group name hehe.

They know we are unto them and THEY know we know they are scammers!

They keep changing their details as they know they are scammers and they don't want us to track them down.

There's no reason to run or change details if you are legit. Only scumbag scammers run!

EDIT: You can see the telegram group "cryptopokerclub", the one deleted, in: https://t.me/s/cryptopokerclub

If you are legit, you don't run, delete a group then change to another name nor domain even!

I will keep you guys updated if these scammers change anything.

[phreess]

New update, guys.

It seems "CryptoPokerClub" account here in bitcointalk, recently changed both password and email: https://bitcointalk.org/index.php?action=trust;u=1935242

As of May 25, 2020.

They are just running, hiding and changing all of their details (possibly hosting providers as well).

Only scammers hide from a scam accusation.

[andrei8787]

Reported to CryptoScamAlert

https://cryptoscamalert.com/report/270

[CryptoNinja11]

I just want my signature back. It sucks that I was right about them years ago, I get my signature removed because they said I was “spamming” the thread, then they go on to scam people for 50k plus before mods finally do something, and my punishment remains. Mods do not answer my messages.

Honestly, really feel let down by mods here. Not sure I should care because this place sucks.

[herryza]

so that hackers don't know that it's not draining all your money, so the account owner isn't suspicious.

reading the post above motivates me to be more careful and more thorough.

[phreess]

so that hackers don't know that it's not draining all your money, so the account owner isn't suspicious.

reading the post above motivates me to be more careful and more thorough.

They are just scammers. They took everyone's coins :/

If they weren't scammers, they would be here fighting every accusation and not running and hiding like the scumbags they are.

[LastcallS]

Hey guys just stay away from Crypto Poker club. I found another case with scammed people on worldpokerdeals - poker affilate with very good reputation for years:

https://worldpokerdeals.com/blog/crypto-poker-club-why-is-this-poker-room-in-the-worldpokerdeals-blacklist

They scammed more people for total of 40k USD and they are on worldpokerdeals black list:

https://worldpokerdeals.com/blog/crypto-poker-club-why-is-this-poker-room-in-the-worldpokerdeals-blacklist

[phreess]

Hey guys just stay away from Crypto Poker club. I found another case with scammed people on worldpokerdeals - poker affilate with very good reputation for years:

https://worldpokerdeals.com/blog/crypto-poker-club-why-is-this-poker-room-in-the-worldpokerdeals-blacklist

They scammed more people for total of 40k USD and they are on worldpokerdeals black list:

https://worldpokerdeals.com/blog/crypto-poker-club-why-is-this-poker-room-in-the-worldpokerdeals-blacklist

UPDATE: The site seems to have taken that page down, but at least it's on their blacklist: https://worldpokerdeals.com/blacklist

Archive link: https://archive.vn/vgHvF