February 8, 2022

CREX24. De-anonymization.

🇷🇺 RU / 🇬🇧 ENG

DISCLAIMER. All proofs published on this page are collected from open sources only. The reader can reproduce all steps of the investigation independently.

The reason of this investigation is the criminal scheme of CREX24 exchange - the author lost an impressive amount of his cryptocurrency. The exchange refused to make any contact or compensate for the losses.

The result of the investigation is the evidence that CREX24 cryptocurrency exchange is developed and supported by the Russian company Bryansksoft LLC which owns the rights to the 1X trademark and also develops projects for the 1xBet bookmaker. The company has a close legal and factual relation to 1xBet, whose owners are on the international wanted list.

Bryansksoft LLC is actually a part of 1xBet developing and maintaining 1xBet and CREX24 services. The CREX24 exchange was most likely created to launder funds received in the criminal activities of 1xBet.

Results: suspects received this investigation on February 2, 2022 and immediately began to clean up personal data and delete their accounts, which only confirmed accuracy of the chain of proofs described below and also the fact of their involvement in the fraudulent scheme of CREX24. Moreover, after receiving this page on the same day the CREX24 announced to stop working with Russian residents. The author is sure that the reason is he actually proved that CREX24 is a Russian exchange, and must follow the Federal Law No. 259-FZ on Digital Financial Assets and Digital Currencies.

CREX24 and 1xBet relation

In 2019 CREX24 had registration information in "About us" section. There was Estonian company mentioned: Crex24 OÜ (Tornimäe tn 7-169, 10145 Tallinn).

Currently Crex24 OÜ is closed but information about the owners is still available (sign up required) in Estonian companies registry. Alternative statement is available to download in PDF.

Crex24 OÜ statement from scorestorybook.ee
Crex24 OÜ statement from propartner.ee

In the list of Crex24 OÜ owners we can see Elizaveta Kazorina (date of birth: 15.01.1992) who was on her role for 1.5 years. She is the wife of one of the 1xBet co-founders Dmitry Kazorin who is currently in the police wanted list.

Elizaveta Kazorina (left) with her husband Dmitry Kazorin

Currently Elizateta lives in Limassol, Cyprus with her husband Dmitry. Sometimes Dmitry's mother who was also involved in the betting business visit them.

Now Elizaveta lives a luxurious lifestyle and owns L.E.K beauty salon, which is legally registered at Chirosima, 2, Levanta Court, Block A, Floor 5, Flat/Office 501, 3055, Limassol, Cyprus.

One of the 1xBet offices (Exinvest Limited) is registered at the same address.

CREX24 users have long suspected the exchange in relation with 1xBet:

Screenshot of the mmpg.ru forum message: "Cryptocurrenty exchange from 1xBet. Works from August 15, 2017" Link to the message (EN)
Screenshot of the bits.media forum message: "I withdrawn RUB from CREX24 and got funds from 1xBet" Link to the message (EN)

In October 2017 (couple of months from launch) CREX24 admin confirmed in BitcoinTalk thread that CREX24 and 1xBet are partners and use the same payment systems. But then deleted the message. But it kept in quoted:

Link to the message

Another reply from CREX24 admin to one of the message in 2018:

Crex24 (CRyptoEXchange) - is cryptocurrency exchange. 1xBit is a bookmaker.
DGB/EURO pair isn't related to the bookmaker. They are two completely different sites.

At the moment, CREX24 and 1xBet do not openly show their relation, but you can find a direct link to the exchange on the 1xBit.com website:

Screenshot of the 1xbit.com

Most likely, the exchange has problems with liquidity now and they decided to attract users of the betting site to make transactions with cryptocurrency.

CREX24 and Bryansksoft LLC relation

Few years ago CREX24 website had a link to API using examples - it is Crex24.Example github repository which is unavailable for few years. But there is fork of this repo abailable.

Everyone can download this repo via git clone and then run git log to see code author:

No doubt that this repo was created by CREX24 programmer (Ne Oleg) according to the email address domain.

Next repo is Crex24Api [deleted, fork, package]. This is new version of CREX24 API. Here you can also see code author - Nesterov Oleg. Here he mentioned his private email - [email protected].

Googling epujsv1973 username leads to the Codesandbox website where you can find a JS code [user renamed, webarchive, screenshot] created by Oleg for CREX24 To the Moon game:

Obviously Oleg Nesterov is an employee and one of the developers of the CREX24 exchange. We need to find the company he is working for. His likely colleague will help us.

Next repo is PoissonSoft.CommonUtils (git submodule of the Crex24Api repo) [deleted, fork], where Oleg Nesterov was also in contributers list. But we are more interested in this person:

This is denniko [renamed to oker707, then deleted. google cache]. He is C# developer and in his first commit he mentioned his email which contains 1xbet.com domain. Then he changed email to [email protected]. This is Denis Nikolaev [webarchive]. He also mentioned his another emails in commits: [email protected] and [email protected].

His public Google reviews [webarchive, screenshots 1 & 2] say he lives in Bryansk, Russia and sometimes visit Limassol, Cyprus.

Using this information we can find his Linkedin account [now cleaned up, screenshot] where Denis mentioned his current company - Bryansksoft:

There is also his post where Denis is looking for C# developers for hiring in Limassol, Cyprus where part of the 1xBet/CREX24 (Exinvest Limited) team is located:

Translation: "Looking for C#.NET russian-speaking developers available to move to Cyprus (Limassol)."

To verify conclusions as well as to avoid unpleasant misunderstandings, the author had to ask the darknet services. So, author ordered a list of the staff of Bryansksoft LLC for 2020 where both of suspects were found as employees of the company - Oleg Yakovlevich Nesterov and Denis Viktorovich Nikolaev. For ethical reasons the document cannot be published.

So it is bulletproved that Bryansksoft LLC is developing and maintaining CREX24 cryptocurrency exchange.

In fact, CREX24 is a Russian exchange which means it must follow the Digital Financial Assets and Digital Currencies law and as the result pay taxes and regularly declare cryptocurrency amount owning.

Backup of the Bryansksoft github repos - https://github.com/hellocrex.

Bryansksoft LLC and 1xBet relation

Bryansksoft LLC was already mentioned in Russian media as a developer of 1xBet projects. But let's back it up with our own evidence:

1. XBet LLC and Bryansksoft LLC both had the same director - Ermakov Vadim Vyacheslavovich. Moreover both companies have the same legal address.

2. Bryansksoft's verified page on the Russian job website hh.ru says that official company's website is hl-system.net. This website was hosted on the same servers as lots 1xBet mirrors and sattelites:

3. One of the former Briansksoft employees wrote in his CV [google cache, webarchive] that he developed applications and services "for one of the largest bookmakers in Europe":

4. Bryansksoft LLC officially owns the rights to the 1X trademark.

5. Developer Dmitry Gusarov moved to Limassol, Cyprus and got a job at Exinvest Limited (which is actually 1xBet) immediately after working at Bryansksoft in December 2017.

6. One of the phone numbers mentioned as a contact number for Bryansksoft LLC is +79103377288. The owner of this phone number is the company director - Vadim Ermakov. And there was a VK account registered to this number [deleted, archive, screenshot] with the name Bookmaker's Office with 1xBet logo as profile picture.

There is no doubt that Bryansksoft LLC is actually the technical department of 1xBet which ensures the existence of the bookmaker and related projects (including CREX24).

CREX24 are scammers

The exchange has repeatedly been seen in the following user scam scheme: as soon as a trader makes good-profit successful trades and increases account balance he immediately receives a notification that the funds are frozen and withdrawal is not available. The exchange refers to the suspicious origin of the deposit and asks the user to pass KYC verification. Of course, in most cases KYC does not help - the exchange claims that the cryptocurrency is "dirty" and withdrawal is impossible.

This is exactly how the author of this investigation lost his funds.

There are many posts on cryptocurrency forums which describe the same cases. Here are just a few examples:

Also, CREX24 became famous by listing very suspicious project tokens during the ICO boom, which were often scammed.


Related people

Ermakov Vadim Vyacheslavovich

Bryansksoft LLC director and XBet LLC former director

Date of birth: 12.08.1974
Passport: 1519 45****
Phone: +79103377288
Car: Р244ЕК178 - Volkswagen Tiguan
Instagram: vadimerm3
Facebook: vadim.erm.3
Telegram ID: 171724959
Email: [email protected]


Nesterov Oleg Yakovlevich

Bryansksoft LLC C# developer

Date of birth: 30.07.1979
Passport: 1501 43****
Phone: +79103320643
VK: id452452657 [screenshot] Telegram ID: 348318289
Skype: scrtr32
Github: 3P3C [renamed to RCGMSe, then to NFsZlC, deleted later. Archive]
Email: [email protected]


Nikolaev Denis Viktorovich

Bryansksoft LLC C# developer

Date of birth: 25.01.1989 Passport: 1508 77****
Phone: +79208475055
VK: id4015629
Telegram: @denden32 (ID 179317104)
Facebook: denis.nikolaev.12914 [deleted, screenshots 1 & 2]
Instagram: denniko89 [renamed to diofxz509, then to lnxtttyy17, deleted later]
Github: denniko [renamed to oker707, deleted later. Google cache, archive]
Skype: denniko89, live:.cid.9ed84a9c9b334f55
Email: [email protected], [email protected], [email protected], [email protected]


Kazorina Elizaveta Nikolaevna

Former owner of Crex24 OÜ Wife of Dmitry Kazorin, 1xBet co-founder

Date of birth: 15.01.1992
Phone: +35796116394, +380501921461
Instagram: l.e.k._beauty_bar
Facebook: elizaveta.kazorina
VK: id168144761, id37644383
Skype: elizaveta1992kostenko, elizaveta150192
Email: [email protected]


Kazorin Dmitry Sergeevich

1xBet co-founder In international wanted list

Date of birth: 06.11.1984
Passport: 1514 19****, 1504 39****
Phone: +79206070364
Probably his Instagram: not_your_business2021


Donate

You can thank the author of the investigation as well as help him to recover his losses:

₿ Bitcoin: 1AUjcJNuynEqqhK6He715278Ys8mQhvuEz

Ð Dogecoin: DSRV5NJP3nGKbLEyEsDrUGsBVhqT623Ke7

Thank you!

Contact

Email: [email protected]