Coinbet.cc -- $340,000 stolen, the worst 45 days of my life. [Long]

[doggycoltrn]

just now every email is opened in NY This morning

Opened message
Reader location: New York, NY via UIWebView iPhone    Apr 21 (about 3 hours ago

[dougg]

Holy crap this thread is really eye opening for people who dont know and havent tried coinbet.

[bazar165g]

BitcoinzRulez, answer in private message or skype or email!

[coiner8]

Update:

My emails to support are now be opened in West Palm Beach Florida, not sure if anyone can help with this

Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 18 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 18 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 18 hours ago

going to post this in both threads for now

That's a great idea for tracking them down.  It would work for a lot of Bitcoin scammers who wouldn't think that reading an email would give away their IP address.

71.57.149.160 is c-71-57-149-160.hsd1.fl.comcast.net, a completely normal residential address.  VPN's don't use addresses like those and I've never seen a TOR exit node use one either.  Unless they're proxying through botnet controlled machines or open proxies (both unlikely IMO), it's highly likely that it's their actual home account.  Especially with the iPhone since configuring that to use anonymous proxies would be a pain.  What is the IP address from the iPhone request?

I'll do a bit more investigating of that IP, but generally the only way to get the owner's information is to subpoena the ISP which requires a court order.

Edit: It's not listed in any lists of known proxies and it's not on any blacklists.  This means it's even more likely to be the person's normal home connection.  All ports are filtered, so there's no additional information that can be gained that way (well, not currently, ports could open later though).

[doggycoltrn]

Here is everything i have so far , to recap as far as IPs go, as soon as i confronted them they went AWOL but my emails are still being opened

First Email


Is coinbet closed ? How do I receive my remaining balance ?

CoinBet® Support
Apr 19 (2 days ago)

to me
Thanks for emailing. We are going through every verified account and issuing payouts as time allows, in order of player account. In the event a rollover requirement was not met, players will be refunded their deposits. If rollover requirements were met, then the balance or a negotiated amount will be issued instead. Please allow some time for us to work our way through everyone, as there's a large list of players. We appreciate your patience.

Opened message
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014

Second Email

So your saying none of the money won will be paid if rollover requirements is not met ? Even though I did not have time to meet the rollover requirement ? That is total bullshit, if you check my play I was well on pace to meet rollover requirement , and I have made several requests to find out what my rollover was , with no response or answer . Do you then refund the losing players there deposits as well? Makes no sense, it should be a percentage of your winnings based on the bonus amount(which i did not even want)

Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014

Third Email in respone to the email below ( This is the one that must have got sent around there company )

CoinBet® Support
Apr 19 (2 days ago)

to me
Please note we are not representatives of CoinBet, we are an asset liquidation firm that handles bankruptcy liquidations, estate sales, and other forms of liquidation procedures. We were retained by Coinbet to ensure proper liquidation of all assets, communication with outstanding accounts, and payment of outstanding debt. All outstanding debts and accounts will be paid out in accordance with the arrangement made by Coinbet and the sale of all related assets.

ME to CoinBet®
What Is name and number  of firm I will have my lawyers contact you Monday morning ? Address to please

ME to Coinbet@
to CoinBet®
I know your in sag harbor washington, THE US! , send me my money and this goes away,

 
AND THEN GOES THE PANIC (This goes from newest to oldest, so New York, NY is the last person to open the email)

about 1 hour ago
Recipient opened    New York, NY
70.208.80.163    UIWebView iPhone    Apr 21, 2014
about 3 hours ago

Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 19 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 19 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 19 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 19 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 20 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 20 hours ago
Recipient opened    Graham, WA
98.125.180.93    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Graham, WA
98.125.180.93    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Graham, WA
98.125.180.93    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
         
         

These are multiple emails are forwards between them not realizing i am still tracking via my original email being in there replies

The New York address is new and just opened all the emails this morning, if we could figure out who that is would be very helpful

[SimonTheSorcerer]

Update:

My emails to support are now be opened in West Palm Beach Florida, not sure if anyone can help with this

Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 18 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 18 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 18 hours ago

going to post this in both threads for now

That's a great idea for tracking them down.  It would work for a lot of Bitcoin scammers who wouldn't think that reading an email would give away their IP address.

71.57.149.160 is c-71-57-149-160.hsd1.fl.comcast.net, a completely normal residential address.  VPN's don't use addresses like those and I've never seen a TOR exit node use one either.  Unless they're proxying through botnet controlled machines or open proxies (both unlikely IMO), it's highly likely that it's their actual home account.  Especially with the iPhone since configuring that to use anonymous proxies would be a pain.  What is the IP address from the iPhone request?

I'll do a bit more investigating of that IP, but generally the only way to get the owner's information is to subpoena the ISP which requires a court order.

Edit: It's not listed in any lists of known proxies and it's not on any blacklists.  This means it's even more likely to be the person's normal home connection.  All ports are filtered, so there's no additional information that can be gained that way (well, not currently, ports could open later though).

Indeed. That's the home address of Paul Regan, the man behind Coinbet.cc (later on someone named Michael Carter, a black-hat spammer [someone who makes a living by spamming and manipulating search engine results so you don't find what you are looking for but you end up on his site instead]  joined in and they became partners but he is the original creator the man who started it all)

http://simonsblogpark.com/onlinegambling/coinbet-cc-another-bitcoin-casino-scam-exposed-side-story/

More info about it there, check the screenshot of our email conversation. I also spoke to him on the phone. I actually probably have his phone number too somewhere and he is indeed from Florida. Let me know if I can help more. We will get this bastard!

[bazar165g]

if you have lost 200btc or more in coinbet, then send me PM. I will give you full information about owners. is paid service, you pay first or escrow

[doggycoltrn]

 If anyone could pass the info i have to the proper parties FBI etc..would be greatly appreciated for all..Would be easy for them to figure out..

[coiner8]

about 1 hour ago
Recipient opened    New York, NY
70.208.80.163    UIWebView iPhone    Apr 21, 2014
about 3 hours ago

Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 19 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 19 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 19 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 19 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 20 hours ago
Recipient opened    West Palm Beach, FL
71.57.149.160    Chrome Windows    Apr 20, 2014
about 20 hours ago
Recipient opened    Graham, WA
98.125.180.93    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Graham, WA
98.125.180.93    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Graham, WA
98.125.180.93    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
1 day ago
Recipient opened    Gig Harbor, WA
75.121.237.103    Safari Macintosh    Apr 19, 2014
         
         

These are multiple emails are forwards between them not realizing i am still tracking via my original email being in there replies

The New York address is new and just opened all the emails this morning, if we could figure out who that is would be very helpful

This is great info.  All of those are residential IP addresses, and very likely to be their actual home accounts.  71.57.149.160 in FL is Comcast, 98.125.180.93 and 75.121.237.103 in Gig Harbor are both CenturyTel.  Given that both come from the same ISP, both using Macs, and in the same city, it's possible it's the same person and the IPs are dynamically assigned (change over time).  I don't have time to do any additional investigating of the new IPs right now, but I'm sure somebody can port scan them to see if they reveal any more information about the owner, and check blacklists/Google just in case there are references there.

In terms of subpoena, I think the bar for getting one in order to pursue a civil case is very low.  Meaning, if you can show a judge that you have a dispute with the person he'll approve the subpoena.  It's probably a rubber-stamp thing at this point that judges do dozens of times a day.  There might even be some administrative person that handles it instead of a judge.  I'm not sure what service you used to get the IP addresses, but if it's a third-party service then that is good, since you can prove that you didn't fake the IP addresses.  Make sure to take screenshots of the account, export whatever you can, and keep the account open and the data intact inside the account until trial.  Having data in the account at the time of trial may be the only way to prove it's valid (although at that point you'll likely not need to prove anything related to the IP address since you'll prove the persons' link to Coinbet through other evidence).

Also the email opens from the same IP addresses are almost certainly the same person opening the email multiple times, and not forwards to other people.  Even scrolling through an inbox can cause multiple views to be counted.

Since they may be afraid to open emails from you now, can you post instructions for others on how to add the tracking?  If more people use it that will increase the chances they'll slip up and reveal more IP addresses.

Edit: Just realized you posted the iPhone IP address too.  It's Verizon.  Same deal as the ISPs, should be easy to get a subpoena.

[coiner8]

If anyone could pass the info i have to the proper parties FBI etc..would be greatly appreciated for all..Would be easy for them to figure out..

I didn't read the thread to see whether you have a claim against them or not, but whoever does is probably better off starting with a civil route instead of criminal.  You can hire a lawyer and have him move on it ASAP instead of waiting for authorities to figure out what the hell bitcoin is and whether a crime has been committed.  The barriers are much lower for things like subpoenas when doing a civil trial.  Once you get to the discovery phase you'll be able to get all kinds of information about Coinbet's operations which then can be handed to the authorities on a platter.  It's good to get the authorities involved very early on because they will help to gather evidence, but hiring a lawyer for a civil path would be my first move.

[Lucky Cris]

Why are trying to capitalize on this situation? And setting a bar at 200btc? Anyone who experienced a loss as a result of their fraud should be entitled, regardless of the amount. Looks like you're targeting people who can pay you. You need to be reported - it's people like you who make this scene look bad.

You see others are actually helping; providing names and IPs... You on the other hand are trying to make a buck. Do us a favor and get the fuck off this forum. You're worst than coinbet.

if you have lost 200btc or more in coinbet, then send me PM. I will give you full information about owners. is paid service, you pay first or escrow

[🏰 TradeFortress 🏰]

Starting Nmap 5.21 ( http://nmap.org ) at 2014-04-22
Nmap scan report for c-71-57-149-160.hsd1.fl.comcast.net (71.57.149.160)
Host is up.
All 1000 scanned ports on c-71-57-149-160.hsd1.fl.comcast.net (71.57.149.160) are filtered

Nmap done: 1 IP address (1 host up) scanned in 202.01 seconds

[doggycoltrn]

yesware.com

If you want to know how to avoid having your emails tracked PM me..

[Lucky Cris]

Okay, so I stand corrected - you are helping as you're the one who's publishing the IPs. But my initial thought still remain - why are you trying to make money instead of being genuine?

Why are trying to capitalize on this situation? And setting a bar at 200btc? Anyone who experienced a loss as a result of their fraud should be entitled, regardless of the amount. Looks like you're targeting people who can pay you. You need to be reported - it's people like you who make this scene look bad.

You see others are actually helping; providing names and IPs... You on the other hand are trying to make a buck. Do us a favor and get the fuck off this forum. You're worst than coinbet.

if you have lost 200btc or more in coinbet, then send me PM. I will give you full information about owners. is paid service, you pay first or escrow

[BitcoinzRulez]

Okay, so I stand corrected - you are helping as you're the one who's publishing the IPs. But my initial thought still remain - why are you trying to make money instead of being genuine?

Why are trying to capitalize on this situation? And setting a bar at 200btc? Anyone who experienced a loss as a result of their fraud should be entitled, regardless of the amount. Looks like you're targeting people who can pay you. You need to be reported - it's people like you who make this scene look bad.

You see others are actually helping; providing names and IPs... You on the other hand are trying to make a buck. Do us a favor and get the fuck off this forum. You're worst than coinbet.

if you have lost 200btc or more in coinbet, then send me PM. I will give you full information about owners. is paid service, you pay first or escrow

i'm not sure he is helping yet.  he's private messaged me to get money or skype with him.  he hasn't shared any relevant information.  

[SimonTheSorcerer]

I actually know the guy's private email address, his phone number and the name of the company behind Coinbet.cc. I'm just afraid to disclose it. You can get sued for that. Unless the FBI knocks on my door telling me it's all right to tell them (and some reward from the FBI would be nice too ) I won't be disclosing it publicly.

I hope Katz gets his money somehow!( I doubt it to be honest)
Btw. Let me know if you are still up for the interview @Katz. PM me you know my email address (also I think Jbird is actually Paul Regan or someone associated with them in disguise, not sure but he is extremely suspicious).

[doggycoltrn]

I am the one posting the IPs , I am owed over 15k usd from coinbet, no where katz debt, and the legal fees will prob eat up all that , but i do it for justice, and just to help katz..Was there for black friday, and net teller, this aint my first rodeo, and although my dollar amount this time isnt as much as katz, ive been there and now how he feels...

Anyone have any thoughts on a class action brought on by all the people defrauded by coinbet, maybe there is an attorney on here that would want to take it. I'd be happy to give up a healthy percantage of my money in return for something...

Okay, so I stand corrected - you are helping as you're the one who's publishing the IPs. But my initial thought still remain - why are you trying to make money instead of being genuine?

Why are trying to capitalize on this situation? And setting a bar at 200btc? Anyone who experienced a loss as a result of their fraud should be entitled, regardless of the amount. Looks like you're targeting people who can pay you. You need to be reported - it's people like you who make this scene look bad.

You see others are actually helping; providing names and IPs... You on the other hand are trying to make a buck. Do us a favor and get the fuck off this forum. You're worst than coinbet.

if you have lost 200btc or more in coinbet, then send me PM. I will give you full information about owners. is paid service, you pay first or escrow

[bazar165g]

Yes, I help with money. if you have a great reputation in the forum, then I will give you information on. but topicstarter have skype, but he does not want to talk in skype.

[doggycoltrn]

Jaybird, you are extremely naive ,  i actually have more experience with this stuff then you have lived days on this earth...There are reasons for wanting someone else to report it to the fbi not myself..As last resort that can be done with one phone call..

Go to the police, FBI, DOJ. Show them the newspaper article with Bauer's name. Give them the emails and other proof. Then see what they do. Anyone here have any experience with this stuff or are you all just learning? It's simple but fun watching you guys run in circles.

Investigate the ownership. File with the authorities. I said it wouldn't do any good but go ahead and try. The only thing I don't want is for something like this to be in the NY Times. It really hurts those promoting bitcoins. John Bauer is the guy you want.

[Jaybird]

Jaybird, you are extremely naive ,  i actually have more experience with this stuff then you have lived days on this earth...There are reasons for wanting someone else to report it to the fbi not myself..As last resort that can be done with one phone call..

Go to the police, FBI, DOJ. Show them the newspaper article with Bauer's name. Give them the emails and other proof. Then see what they do. Anyone here have any experience with this stuff or are you all just learning? It's simple but fun watching you guys run in circles.

Investigate the ownership. File with the authorities. I said it wouldn't do any good but go ahead and try. The only thing I don't want is for something like this to be in the NY Times. It really hurts those promoting bitcoins. John Bauer is the guy you want.

I was just saying leave it off the NY Times and get it to the authorities if you must do something.  I'm sure you have experience singing. Were you the tattle tail in school?

 All you want to show is that your Dick Tracy skills are great. You are posting IP addresses of customer service reps. You have the wrong type of experience for this stuff.

I've been stiffed for over $15k before in the past. If you had my experience you would realize that your money is gone. You think stiffing of $15k is huge. Oh my.