Travel site fraud in Kuala Lumpur

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

Travel site fraud in Kuala Lumpur

Post by MarkGiles » Wed Nov 14, 2018 3:24 am

Over 250 web sites cut from 3 templates run a travel fraud.

The sites all acknowledge that they are a unique travel agency based in Kuala Lumpur, Malaysia, giving a small range of addresses and phone numbers.

The addresses and phone numbers are real, and phones are answered when you call.

What distinguishes these sites from genuine travel sites? They do not have any online booking facilities - they are performing no commerce.

Most sites advertise a 16th Anniversary promotion but there is no way to use this offer online.

However, they have amassed a large list of real names and addresses, which they "spam" in a novel way. They post real mail to these names and addresses. The mail comprises a glossy brochure, and two "Scratch Cards". When the victim scratches the cards, one is a losing card, but the other congratulates you on winning a prize, such as US$200,000.00 This is just like most scams in the Lottery / Prizewinner category.

When the victim contacts the company, the fraud begins. The victim is asked for photo-ID (passport, driver's licence etc). Before the money transfer can take place, there are tax payments and processing fees. That constitutes loss 1 and loss 2. Following that, should they ask for your bank details to transfer the winnings, they will have your personal details as well as your photo-ID to enable any kind of bank fraud.

These domains should be listed as scams with privacy risks.
Last edited by MarkGiles on Thu May 30, 2019 4:52 am, edited 3 times in total.

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

Re: Travel site fraud in Kuala Lumpur

Post by MarkGiles » Wed Nov 14, 2018 3:31 am

Sites still live on 27 June 2019.

The registrars who have demonstrated their willingness to be a sponsor of the Malaysian fraud are TUCOWS LTD of Canada, and WebNic aka WEBCC in Kuala Lumpur, Malaysia, where the cyber-criminal perpetrators reside.


* CNOBIN *

ALL SUSPENDED

* Realtime Register B.V. *

ALL SUSPENDED

* TUCOWS DOMAINS INC. *

AWAITING ACTION

bountystartour.com
dcelestialtravelling.com
deroyaletours.com
dorsetttours.com
fabuloustravelling.com
genesistravelling.com
gorgeoustourism.com
greatmastravelling.com
greatstartour.com
greaterviewtour.com
harmonitours.com
impianatours.com
kasihsayangtravel.com
klcompasstravel.com
lakevilletours.com
onespiritualtour.com
orkidstours.com
primabaytours.com
reallifetourism.com
richmoontour.com
rivervilletours.com
seaqueentravel.com
sereniatours.com
thetrinitytour.com
tiarahillstours.com
twistythrilltour.com
verticatours.com
worldconnecttravelling-my.com
worldtreetour.com


Suspended by the ISP, not TUCOWS the registrar

* blingseatravel.com Bling Sea Travel
* cherryblossomvacation.com
* dreamuniontravel.com Dream Union Travel
* grandeurtravelling.com Grandeur Travelling
* greatphantomholiday.com Great Phantom Holiday
* mascreationtravelling.com Mas Creation Travelling
* perdanapealingvacation.com
* topplanningtravel.com Top Planning Travel
* wonderlandworldtravel.com Wonderland World Travel


* Web Commerce Communications Limited dba WebNic.cc *

AWAITING ACTION

blingseatra.com
dcelestialtra.com
domaintravelling-my.com
flightpodtra.com
miracletimetours.com
newdreamtourism.com
overnightholiday.com
piscesstarvacation.com
rainbowcleartour.com
sakuratra.com
skyridgetravel.com
superlimovac.com
thetrinitytr.com
tophilltourism.com
topofglasstour.com
topplanningtravel-my.com
utopiatr.com
wonderlandworldtra.com
worldtreetr.com


SUSPENDED June/July 2019

centarasholiday-my.com Centaras Holiday
gloriousskytour.com
kuchingholiday-my.com
superbsevenholiday.com
novaacetourism.com


Suspended by the ISP, not by WEBCC the registrar

* shuttletourism.com
* amazingflytourism-my.com
* aquariatourism-my.com
* bestlifeworldtravel-my.com
* geoventuretravelandtours-my.com
* gorgeoustravelling-my.com
* greatphantomholiday-my.com
* kochitravelling-my.com
* littleindiatours.com
* spectrumtravelling-my.com
* summerlovertravel.com
* thecreativetravel-my.com
* wonderlandworldtravel-my.com


* NetEarth One Inc. d/b/a NetEarth *
ALL SUSPENDED

* droyaltravel.com suspended
* precisionholiday.com suspended


* OnlineNIC, Inc. *
ALL SUSPENDED

* ampangparkholiday-my.com suspended
* bluemarinetravelling-my.com suspended
* centarasholiday.com suspended
* fairylandtravelling.com suspended
* flyingsifutourism-my.com suspended
* jayaselatantravel-my.com suspended
* kuchingholiday.com suspended
* nusentralholiday-my.com suspended


* PDR LTD. *


kingswayvacation.com


* ALL OTHERS SUSPENDED 30 APR 2019 *


* Web Werks India Pvt. Ltd d/b/a ZenRegistry.com *

AWAITING ACTION
damansaravacation.com

SUSPENDED by the registrar, Web Werks

* shuttletourism.com (suspended)
* holidayguardiantourism.com (suspended)
* niveaholiday.com (suspended)
* purplemoontravel.com (suspended)
* utopiatourism.com (suspended)


Originally, 176 domains represented the travel fraud operation, and resided on IP addresses invariably located in Malaysia. (vads.com)

With the exception of a few web sites, all of these now reside on CloudFlare.com. One exception resides on one IP address located in Malaysia itself, on 202.75.55.212 - Web Hosting Provider, Mercumaya.net.

damansaravacation.com has address 202.75.55.212
kingswayvacation.com has address 103.8.25.16
---------------------------------------------------------------------------------------------------------------------------
Last edited by MarkGiles on Sat Jul 20, 2019 3:54 am, edited 86 times in total.

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

Re: Travel site fraud in Kuala Lumpur

Post by MarkGiles » Wed Nov 14, 2018 4:06 am

The registrars whose travel fraud site domains are listed above, in alphabetic order, are:

CNOBIN INFORMATION TECHNOLOGY LIMITED. . 8 suspended . . . 0 waiting for action
NetEarth One Inc. d/b/a NetEarth (UK) . . . . . . . . 38 suspended . . . 0 waiting for action
OnlineNIC, Inc. (China) . . . . . . . . . . . . . . . . . . . . . . . 23 suspended . . . 0 waiting for action
Public Domain Registry PDR LTD . . . . . . . . . . . . . . 86 suspended . . . 1 waiting for action
Realtime Register . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 suspended . . . . 0 waiting for action
Tucows Domains Inc. . . . . . . . . . . . . . . . . . . . . . . . . . . 14 removed . . . 31 waiting for action
Web Commerce Communications (WebNIC Kuala Lumpur) . . 88 suspended ... 19 waiting for action
Web Werks India Pvt. Ltd (ZenRegistry.com) . . . . 11 suspended . . . 1 waiting for action
Shinjiru Technology Sdn Bhd (Malaysia) . . . . . . . . 18 suspended . . . 0 waiting for action

------------------------------

306 Total suspended
52 Total alive

------------------------------

Number of live Travel scam sites by registrar

CNOBIN 0
NetEarth One Inc. - NetEarth 0
OnlineNIC, Inc. 0
PDR Ltd. - PublicDomainRegistry.com 1
Realtime Register B.V. 0
Shinjuru 0
TUCOWS DOMAINS INC. 31
Web Werks India - ZenRegistry.com 1
WEBCC WebNic.cc 19

Total 52
Last edited by MarkGiles on Fri Jul 19, 2019 8:17 am, edited 97 times in total.

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

Re: Travel site fraud in Kuala Lumpur

Post by MarkGiles » Wed Nov 14, 2018 10:36 am

This is what a Travel Fraud 2nd prize "scratchie card" looks like, and the brochure that accompanies it, in this scam.

Copy the link below into your browser

> https://imgur.com/yqN3j68

It is covered in the description of the Singapore based WebNIC.cc registrar
https://fraud-reports.wikia.com/wiki/WebNIC

EVIDENCE OF FRAUD

Nov 2018 nzherald.co.nz/wanganui-chronicle/horowhenua-chronicle/news/article.cfm?c_id=1503788&objectid=12017932
* Don't believe glossy travel brochures promising prizes
Aug 2018 stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam
* Kiwis targeted again by Malaysian travel scratchie scam
June 2018 star.kiwi/2018/06/scam-alert-watch-out-for-this-in-your-letterbox/
* Scam alert: Watch out for this in your letterbox
Nov 2017 stuff.co.nz/business/99313885/kiwis-warned-to-steer-clear-of-malaysian-travel-scratchie-scam
* Kiwis warned to steer clear of Malaysian travel scratchie scam
Oct 2017 AU Govt northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
* Scam watch: Dodgy scratch tickets promise thousands
Oct 2017 Canberra Alert abc.net.au/news/2017-10-05/scratchie-scams-robbing-canberrans-of-thousands-of-dollars/9011248
* 'Scratchie scam' losses skyrocket in Canberra, prompting warnings from consumer watchdog
Nov 2016 netsafe.org.nz/have-i-won-165000-malaysian-travel-scratch-and-win-cards-explained/
* TRAVEL SCRATCH & WIN CARDS
Sep 2016 West Australia Govt commerce.wa.gov.au/announcements/wa-residents-warned-about-travel-scratchie-scam-nova-victory-travel
* WA residents warned about travel scratchie scam
Nov 2015 northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
* Scam watch: Dodgy scratch tickets promise thousands
2012 Gov of West Australia scamnet.wa.gov.au/scamnet/Scam_types-Unexpected_winnings-Travel_prize_scams-Sentosa_Traveling_Group_Enjoi_Vacation__Phantasi_Holiday__Lavender_Holiday_.htm
* A bogus Malaysian travel company
Aug 2015 Malaysia thestar.com.my/metro/community/2015/08/22/three-lose-savings-to-scratchandwin-scam/
Last edited by MarkGiles on Thu May 30, 2019 4:04 am, edited 12 times in total.

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

Re: Travel site fraud in Kuala Lumpur

Post by MarkGiles » Wed Nov 14, 2018 11:21 am

The scratch cards that come with this fraud, lists some sponsors. One of those is the Royal Selangor in Malaysia.
Here is a request for confirmation:
I received a brochure and a competition entry form from The Dazzling
Holiday, Menara HLA 3/F, 304, Jalan Kia Peng, Kuala Lumpur, Phone +6011
- 3108 6813.
Their web site is at http://thedazzlingholiday.com

The brochure lists Royal Selangor as a special sponsor and depicts your
purple company logo.
Please verify this sponsorship, and advise if this is a legitimate company.

They sent two "Scratch" cards, one of which awarded a prize of US$
200,000.00

So before I provide them with my contact details, proof of Identity, and
bank details, I would like to check their credentials.
Here is their immediate response:
Greetings from Royal Selangor and thank you for bringing this to our attention.

We've recently received multiple complains and confirmation regarding some scratch and win card offered by multiple travel agency and an investigation is currently ongoing at the moment regarding this.

Be assured that Royal Selangor is not involved in any scratch and win activities nor in any way involved in any of these activities. Kindly ignore all these scratch and win contests and DO NOT ever provide any form of information to them.

Thank you very much.

Regards,
Sean Kwan

E-Commerce Department
Royal Selangor International
www.royalselangor.com

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

PUBLIC DOMAIN REGISTRY

Post by MarkGiles » Thu Nov 15, 2018 9:33 am

Suspended May 2019
brightstarholiday.com
spectrumtravelling.com


Registrar PublicDomainRegistry were sympathetic to a request to suspend these domains used in this fraud.
On November 14 2017 they immediately suspended all of these 78 domains


airshinetravelling.com
airvalenciatravel.com
allintravelling.com
amazingflytourism.com
anmourtravel.com
aquariatourism.com
asianfantasyvacation.com
asiangoldentour.com
blazingholiday.com
blueparadisevacation.com
botanictravel.com
bukithijautravel.com
butterflytravelling.com
changkattravel.com
comfortlineholiday.com
crownpalacetravel.com
desariangtourism.com
ezasiatourism.com
faberparktravel.com
feathercanyonholiday.com
firstnighttour.com
geoventuretravelandtours.com
glamourtourism.com
goldenexplorervacation.com
goldentropicaltravel.com
gorgeoustravelling.com
gravitycloudtour.com
highrollerholiday.com
historicstour.com
hotspottravelling.com
iskandarholiday.com
jagongmastravel.com
justvictoryholiday.com
klinternationaltravel.com
littlebitvacation.com
littlecreamertourism.com
lovelyprincesstour.com
maisonplacetourism.com
marvelloustourism.com
moonlightkissholiday.com
naturegreentravel.com
northernmiracletravel.com
northwingtravel.com
nusentralholiday.com
oceanpacifictour.com
palaceindahtravel.com
paradisemomentholiday.com
prioritytravelling.com
razakholiday.com
redlotustravelling.com
redroseholiday.com
redspringtravel.com
reedsholiday.com
rionaholiday.com
rivervalleyholiday.com
royalmutiaratravelling.com
safariworldtravelling.com
sassyvelvettour.com
seasonstravelling.com
shamelintravelling.com
skyrockholiday.com
splendidtourism.com
stardreamtourism.com
sunsuriatravelling.com
tanjunglangittravel.com
theheritagetravel.com
theonlyvacation.com
theroofvacation.com
travelpassionvacation.com
trinityworldtravel.com
tropicalgatewayholiday.com
tropicanatour.com
trueleasureholidays.com
urbanheritagetour.com
vertigovacation.com
visitworldtourism.com
vivastarholiday.com
wonderlandrosevacation.com


New domains
Suspended Jan 2019:

neweratourism.com
tanjungalamtour.com
Last edited by MarkGiles on Mon May 13, 2019 9:41 am, edited 9 times in total.

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

WEBNIC.CC - WEBCC in Malaysia

Post by MarkGiles » Thu Nov 15, 2018 10:02 pm

These are the fraud domain names sponsored by WEBNIC.CC whose abuse phone number is in Kuala Lumpur, Malaysia.

Domains suspended by WEBCC in Kuala Lumpur:

centarasholiday-my.com
gloriousskytour.com
kuchingholiday-my.com


Expired

clubfourvacation.com
fareasttravelling.com
homeclubvacation.com
klflytravelling.com
kluniversaltravel.com
landmarktravelling.com
seasonsrockvacation.com
starlighttravelling.com
theinsighttour.com
twingalaxyholiday.com


Domains seized by the Malaysian reseller, Net Onboard Sdn Bhd

alltimetravelling.com
ampangparkholiday.com
asiantigertour.com
bayuputeritravelling.com
bestlifeworldtravel.com
bestmemoriestravel.com ( see evidence of fraud at (https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam )
beyondyourdreamstour.com
bintangstartravelling.com
bluemarinetravelling.com
blueskytravelling.com
dangabayholiday.com
dreamcasterstour.com
flaminggloryholiday.com
flyingsifutourism.com
foxyladyvacation.com
fraserparkholiday.com
groveholiday.com ( see evidence of fraud at https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam )
hybridsholiday.com
jungleprincevacation.com
loverboyholiday.com
mistikatourism.com
moonshinevacation.com
myroyaleholiday.com
passionqueentravel.com
primetouchtravel.com
thecreativetravel.com
threesixfiveholiday.com
underseaholiday.com

* goodmemoryholiday-my.com (suspended Apr 2019)
* greenseatourism-my.com (suspended Apr 2019)
* ivorystarvacation-my.com (suspended Apr 2019)
* jungleprincevacation-my.com (suspended Apr 2019)
* redlotustravelling-my.com (suspended Apr 2019)
* royalgoldtour-my.com (suspended Apr 2019)
* setiaskyholiday-my.com (suspended Apr 2019)
* stardreamtourism-my.com (suspended Apr 2019)
* sunsuriatravelling-my.com (suspended Apr 2019)
* theheritagetravel-my.com (suspended Apr 2019)
* topasiantours-my.com (suspended Apr 2019)
* airflytravelling.com (Expired)
* eternalmastourism.com (Expired) ( see evidence at https://fraud-reports.wikia.com/wiki/Malaysian_Travel_fraud )
* fantastikatravelling.com (Expired)
* freedomsflamesvacation.com ( Expired)
* greycloudtourism.com (Expired)
* littlemiracleholiday.com (Expired)
* magiccarpettourism.com (Expired)
* newbalancetour.com (Expired)
* palassupremeholiday.com (Expired)
* pristinetravelling.com (Expired)
* lakeviewtourism.com (expired Apr 2019)
* sevenwondersholiday.com (expired Apr 2019)
* asianfocustourism.com (expired Apr 2019) ( see evidence at https://fraud-reports.wikia.com/wiki/Malaysian_Travel_fraud )
* dreamishtravelling.com (expired Apr 2019)
* goldenpacifictours.com (expired Apr 2019)
Last edited by MarkGiles on Wed Jun 19, 2019 6:13 am, edited 35 times in total.

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

CNOBIN

Post by MarkGiles » Thu Nov 15, 2018 10:03 pm

CNOBIN is a registrar in China. There is one fraud domain remaining not suspended.


beyondyourdreamstour-my.com (suspended)
blueskytravelling-my.com (suspended)
miharjatravelling.com (Expired)
oceanspirittour.com (Suspended)
mistymoontourism.com (Suspended)
jellybellytour.com (Suspended)
lordstarstour.com (Suspended)
Last edited by MarkGiles on Wed Jun 19, 2019 12:06 am, edited 19 times in total.

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

SHINJURU in Malaysia

Post by MarkGiles » Thu Nov 15, 2018 10:05 pm

These are the fraud domains sponsored in Malaysia by SHINJURU

Suspended

greatakasiaholiday.com
suteramastravel.com
xperttourism.com

Fraud report greatakasiaholiday.com = June 2018 https://bit.ly/2sgqsdt
Fraud report suteramastravel.com = 10 May 2018 https://bit.ly/2H4qgbk


Suspended

goldenglowholiday.com (Expired, Parked)
mysticalmagictour.com (Suspended)
skyhorizontravel.com (Suspended)
ampanghilltravelling.com (Suspended)
asiatictour.com (Suspended)
ecocityholiday.com (Suspended)
flyingbeautytour.com (Suspended)
sabahantravel.com (Suspended)
worldtravelerstour.com (Suspended)
Last edited by MarkGiles on Mon Jan 28, 2019 10:51 am, edited 12 times in total.

User avatar
MarkGiles
Posts: 2056
Joined: Wed Mar 30, 2011 2:40 am
Contact:

WEB WERKS in India and NETEARTH ONE

Post by MarkGiles » Thu Nov 15, 2018 10:10 pm

These are the fraud domains sponsored in India by Web Werks India Pvt. Ltd trading as ZenRegistry.com

Awaiting action May 2019

None. All suspended by the registrar.

Suspended

holidayguardiantourism.com (Suspended)
niveaholiday.com (Suspended)
purplemoontravel.com (Suspended)
rafflesiaholiday.com (Suspended)
utopiatourism.com (Suspended)
casatropikatravel.com (Suspended)
lawastraveling.com (Suspended)
tawauholiday.com (Suspended)
bluegalaxytravel.com (Suspended)
pioneerandspiritholiday.com (Suspended)
royalgoldtour.com (Suspended)


These are the fraud domains previously sponsored by NetEarth One Inc

NetEarthOne was advised by ICANN to suspend these advance-fee travel "15th Avniversary scratch card" frauds.

Suspended May 2019

droyaltravel.com

Suspended on dates Nov 21 and Dec 4 and Dec 7 2017:


bluehavenholiday.com
castellholiday.com
jayaselatantravel.com
calisatravelandtour.com
croatianstyletour.com
doublecornertourism.com
flyhightravelling.com
foreverblisstourism.com
fullhouseholiday.com
galaxygirltour.com
gemilangcitytours.com
goodmemoryholiday.com
grandeagletourism.com
greenseatourism.com
hotspottourism.com
hotspringtravelling.com
jesseltonplaceholiday.com
legendarydreamtour.com
lonaislandtour.com
lunareclipsetourism.com
mypacifictravel.com
oneworldtravelling.com
passionaterosetravel.com
republictourism.com
royalputeritourism.com
setiaskyholiday.com
stariotravelling.com
thecruisemantravel.com
theroyaltravelling.com
theunforgettabletravel.com
timeoutkltour.com
topasiantours.com
travelmastertourism.com
tropikaislandtravel.com
trueartsvacation.com
wonderecotourism.com
Last edited by MarkGiles on Sat May 18, 2019 12:33 am, edited 16 times in total.

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests