Travel site fraud in Kuala Lumpur

[MarkGiles]

Over 250 web sites cut from 3 templates run a travel fraud.

The sites all acknowledge that they are a unique travel agency based in Kuala Lumpur, Malaysia, giving a small range of addresses and phone numbers.

The addresses and phone numbers are real, and phones are answered when you call.

What distinguishes these sites from genuine travel sites? They do not have any online booking facilities - they are performing no commerce.

Most sites advertise a 16th Anniversary promotion but there is no way to use this offer online.

However, they have amassed a large list of real names and addresses, which they "spam" in a novel way. They post real mail to these names and addresses. The mail comprises a glossy brochure, and two "Scratch Cards". When the victim scratches the cards, one is a losing card, but the other congratulates you on winning a prize, such as US$200,000.00 This is just like most scams in the Lottery / Prizewinner category.

When the victim contacts the company, the fraud begins. The victim is asked for photo-ID (passport, driver's licence etc). Before the money transfer can take place, there are tax payments and processing fees. That constitutes loss 1 and loss 2. Following that, should they ask for your bank details to transfer the winnings, they will have your personal details as well as your photo-ID to enable any kind of bank fraud.

These domains should be listed as scams with privacy risks.

[MarkGiles]

Sites still live on 30 May 2019.

The registrars who have demonstrated their willingness to be a sponsor of the Malaysian fraud are TUCOWS LTD of Canada, and WebNic aka WEBCC in Kuala Lumpur, Malaysia, where the cyber-criminal perpetrators reside.


* CNOBIN *

ALL SUSPENDED

* Realtime Register B.V. *

ALL SUSPENDED

* TUCOWS DOMAINS INC. *

AWAITING ACTION

bountystartour.com Bounty Star Tour
dcelestialtravelling.com D Celestial Travelling
deroyaletours.com De Royale Tours
dorsetttours.com Dorsett Tours
fabuloustravelling.com Fabulous Travelling
genesistravelling.com Genesis Travelling
gorgeoustourism.com Gorgeous Tourism
greaterviewtour.com Greater View Tour
greatstartour.com Great Star Tour
harmonitours.com Harmoni Tours
impianatours.com Impiana Tours
kasihsayangtravel.com Kasih Sayang Travel
klcompasstravel.com KL Compass Travel
lakevilletours.com Lakeville Tours
onespiritualtour.com One Spiritual Tour
orkidstours.com Orkids Tours
primabaytours.com Prima Bay Tours
reallifetourism.com Real Life Tourism
richmoontour.com Rich Moon Tour
rivervilletours.com Riverville Tours
seaqueentravel.com Sea Queen Travel
sereniatours.com Serenia Tours
thetrinitytour.com The Trinity Tour
tiarahillstours.com Tiara Hills Tours
twistythrilltour.com Twisty Thrill Tour
verticatours.com Vertica Tours
worldconnecttravelling-my.com World Connect Travelling
worldtreetour.com World Tree Tour
younglivingholiday.com Young Living Holiday


Suspended by the ISP, not TUCOWS the registrar

* blingseatravel.com Bling Sea Travel
* dreamuniontravel.com Dream Union Travel
* grandeurtravelling.com Grandeur Travelling
* greatphantomholiday.com Great Phantom Holiday
* mascreationtravelling.com Mas Creation Travelling
* topplanningtravel.com Top Planning Travel
* wonderlandworldtravel.com Wonderland World Travel


* Web Commerce Communications Limited dba WebNic.cc *

SUSPENDED JUNE 2019

centarasholiday-my.com Centaras Holiday
gloriousskytour.com
kuchingholiday-my.com


Suspended by the ISP, not by WEBCC the registrar

* shuttletourism.com
* amazingflytourism-my.com
* aquariatourism-my.com
* bestlifeworldtravel-my.com
* geoventuretravelandtours-my.com
* gorgeoustravelling-my.com
* greatphantomholiday-my.com
* kochitravelling-my.com
* littleindiatours.com
* spectrumtravelling-my.com
* summerlovertravel.com
* thecreativetravel-my.com
* wonderlandworldtravel-my.com


* NetEarth One Inc. d/b/a NetEarth *
ALL SUSPENDED

* droyaltravel.com suspended
* precisionholiday.com suspended


* OnlineNIC, Inc. *
ALL SUSPENDED

* ampangparkholiday-my.com suspended
* bluemarinetravelling-my.com suspended
* centarasholiday.com suspended
* fairylandtravelling.com suspended
* flyingsifutourism-my.com suspended
* jayaselatantravel-my.com suspended
* kuchingholiday.com suspended
* nusentralholiday-my.com suspended


* PDR LTD.
* ALL SUSPENDED 30 APR 2019 *


* Web Werks India Pvt. Ltd d/b/a ZenRegistry.com
ALL SUSPENDED by the registrar, Web Werks

* shuttletourism.com (suspended)
* holidayguardiantourism.com (suspended)
* niveaholiday.com (suspended)
* purplemoontravel.com (suspended)
* utopiatourism.com (suspended)


Originally, 176 domains represented the travel fraud operation, and reside on IP addresses invariably located in Malaysia. (vads.com)

With the exception of four web sites, all of these now reside on CloudFlare.com. The exceptions reside on one IP address located in Malaysia itself, on 103.6.198.31 - Web Hosting Provider, Bayan Baru, Penang, MY. They have recently (June 2019) suspended them.

blingseatravel.com
grandeurtravelling.com
mascreationtravelling.com
topplanningtravel.com

---------------------------------------------------------------------------------------------------------------------------

[MarkGiles]

The registrars whose travel fraud site domains are listed above, in alphabetic order, are:

CNOBIN INFORMATION TECHNOLOGY LIMITED. . 8 suspended . . . 0 waiting for action
NetEarth One Inc. d/b/a NetEarth (UK) . . . . . . . . 38 suspended . . . 0 waiting for action
OnlineNIC, Inc. (China) . . . . . . . . . . . . . . . . . . . . . . . 23 suspended . . . 0 waiting for action
Public Domain Registry PDR LTD . . . . . . . . . . . . . . 86 suspended . . . 0 waiting for action
Realtime Register . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 suspended . . . . 0 waiting for action
Tucows Domains Inc. . . . . . . . . . . . . . . . . . . . . . . . . . 14 removed . . . 29 waiting for action
Web Commerce Communications (WebNIC Kuala Lumpur) . . 88 suspended ... 0 waiting for action
Web Werks India Pvt. Ltd (ZenRegistry.com) . . . . 11 suspended . . . 0 waiting for action
Shinjiru Technology Sdn Bhd (Malaysia) . . . . . . . 18 suspended . . . 0 waiting for action

------------------------------

285 Total suspended
29 Total alive

------------------------------

Number of live Travel scam sites by registrar

CNOBIN 0
NetEarth One Inc. - NetEarth 0
OnlineNIC, Inc. 0
PDR Ltd. - PublicDomainRegistry.com 0
Realtime Register B.V. 0
Shinjuru 0
TUCOWS DOMAINS INC. 29
Web Werks India - ZenRegistry.com 0
WEBCC WebNic.cc 0

Total 29

[MarkGiles]

This is what a Travel Fraud 2nd prize "scratchie card" looks like, and the brochure that accompanies it, in this scam.

Copy the link below into your browser

> https://imgur.com/yqN3j68

It is covered in the description of the Singapore based WebNIC.cc registrar
https://fraud-reports.wikia.com/wiki/WebNIC

EVIDENCE OF FRAUD

Nov 2018 nzherald.co.nz/wanganui-chronicle/horowhenua-chronicle/news/article.cfm?c_id=1503788&objectid=12017932
* Don't believe glossy travel brochures promising prizes
Aug 2018 stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam
* Kiwis targeted again by Malaysian travel scratchie scam
June 2018 star.kiwi/2018/06/scam-alert-watch-out-for-this-in-your-letterbox/
* Scam alert: Watch out for this in your letterbox
Nov 2017 stuff.co.nz/business/99313885/kiwis-warned-to-steer-clear-of-malaysian-travel-scratchie-scam
* Kiwis warned to steer clear of Malaysian travel scratchie scam
Oct 2017 AU Govt northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
* Scam watch: Dodgy scratch tickets promise thousands
Oct 2017 Canberra Alert abc.net.au/news/2017-10-05/scratchie-scams-robbing-canberrans-of-thousands-of-dollars/9011248
* 'Scratchie scam' losses skyrocket in Canberra, prompting warnings from consumer watchdog
Nov 2016 netsafe.org.nz/have-i-won-165000-malaysian-travel-scratch-and-win-cards-explained/
* TRAVEL SCRATCH & WIN CARDS
Sep 2016 West Australia Govt commerce.wa.gov.au/announcements/wa-residents-warned-about-travel-scratchie-scam-nova-victory-travel
* WA residents warned about travel scratchie scam
Nov 2015 northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
* Scam watch: Dodgy scratch tickets promise thousands
2012 Gov of West Australia scamnet.wa.gov.au/scamnet/Scam_types-Unexpected_winnings-Travel_prize_scams-Sentosa_Traveling_Group_Enjoi_Vacation__Phantasi_Holiday__Lavender_Holiday_.htm
* A bogus Malaysian travel company
Aug 2015 Malaysia thestar.com.my/metro/community/2015/08/22/three-lose-savings-to-scratchandwin-scam/

[MarkGiles]

The scratch cards that come with this fraud, lists some sponsors. One of those is the Royal Selangor in Malaysia.
Here is a request for confirmation:

I received a brochure and a competition entry form from The Dazzling
Holiday, Menara HLA 3/F, 304, Jalan Kia Peng, Kuala Lumpur, Phone +6011
- 3108 6813.
Their web site is at http://thedazzlingholiday.com

The brochure lists Royal Selangor as a special sponsor and depicts your
purple company logo.
Please verify this sponsorship, and advise if this is a legitimate company.

They sent two "Scratch" cards, one of which awarded a prize of US$
200,000.00

So before I provide them with my contact details, proof of Identity, and
bank details, I would like to check their credentials.

Here is their immediate response:

Greetings from Royal Selangor and thank you for bringing this to our attention.

We've recently received multiple complains and confirmation regarding some scratch and win card offered by multiple travel agency and an investigation is currently ongoing at the moment regarding this.

Be assured that Royal Selangor is not involved in any scratch and win activities nor in any way involved in any of these activities. Kindly ignore all these scratch and win contests and DO NOT ever provide any form of information to them.

Thank you very much.

Regards,
Sean Kwan

E-Commerce Department
Royal Selangor International
www.royalselangor.com

[MarkGiles]

Suspended May 2019
brightstarholiday.com
spectrumtravelling.com

Registrar PublicDomainRegistry were sympathetic to a request to suspend these domains used in this fraud.
On November 14 2017 they immediately suspended all of these 78 domains


airshinetravelling.com
airvalenciatravel.com
allintravelling.com
amazingflytourism.com
anmourtravel.com
aquariatourism.com
asianfantasyvacation.com
asiangoldentour.com
blazingholiday.com
blueparadisevacation.com
botanictravel.com
bukithijautravel.com
butterflytravelling.com
changkattravel.com
comfortlineholiday.com
crownpalacetravel.com
desariangtourism.com
ezasiatourism.com
faberparktravel.com
feathercanyonholiday.com
firstnighttour.com
geoventuretravelandtours.com
glamourtourism.com
goldenexplorervacation.com
goldentropicaltravel.com
gorgeoustravelling.com
gravitycloudtour.com
highrollerholiday.com
historicstour.com
hotspottravelling.com
iskandarholiday.com
jagongmastravel.com
justvictoryholiday.com
klinternationaltravel.com
littlebitvacation.com
littlecreamertourism.com
lovelyprincesstour.com
maisonplacetourism.com
marvelloustourism.com
moonlightkissholiday.com
naturegreentravel.com
northernmiracletravel.com
northwingtravel.com
nusentralholiday.com
oceanpacifictour.com
palaceindahtravel.com
paradisemomentholiday.com
prioritytravelling.com
razakholiday.com
redlotustravelling.com
redroseholiday.com
redspringtravel.com
reedsholiday.com
rionaholiday.com
rivervalleyholiday.com
royalmutiaratravelling.com
safariworldtravelling.com
sassyvelvettour.com
seasonstravelling.com
shamelintravelling.com
skyrockholiday.com
splendidtourism.com
stardreamtourism.com
sunsuriatravelling.com
tanjunglangittravel.com
theheritagetravel.com
theonlyvacation.com
theroofvacation.com
travelpassionvacation.com
trinityworldtravel.com
tropicalgatewayholiday.com
tropicanatour.com
trueleasureholidays.com
urbanheritagetour.com
vertigovacation.com
visitworldtourism.com
vivastarholiday.com
wonderlandrosevacation.com


New domains
Suspended Jan 2019:

neweratourism.com
tanjungalamtour.com

[MarkGiles]

These are the fraud domain names sponsored by WEBNIC.CC whose abuse phone number is in Kuala Lumpur, Malaysia.

Domains suspended by WEBCC in Kuala Lumpur:

centarasholiday-my.com
gloriousskytour.com
kuchingholiday-my.com


Expired

clubfourvacation.com
fareasttravelling.com
homeclubvacation.com
klflytravelling.com
kluniversaltravel.com
landmarktravelling.com
seasonsrockvacation.com
starlighttravelling.com
theinsighttour.com
twingalaxyholiday.com


Domains seized by the Malaysian reseller, Net Onboard Sdn Bhd

alltimetravelling.com
ampangparkholiday.com
asiantigertour.com
bayuputeritravelling.com
bestlifeworldtravel.com
bestmemoriestravel.com ( see evidence of fraud at (https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam )
beyondyourdreamstour.com
bintangstartravelling.com
bluemarinetravelling.com
blueskytravelling.com
dangabayholiday.com
dreamcasterstour.com
flaminggloryholiday.com
flyingsifutourism.com
foxyladyvacation.com
fraserparkholiday.com
groveholiday.com ( see evidence of fraud at https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam )
hybridsholiday.com
jungleprincevacation.com
loverboyholiday.com
mistikatourism.com
moonshinevacation.com
myroyaleholiday.com
passionqueentravel.com
primetouchtravel.com
thecreativetravel.com
threesixfiveholiday.com
underseaholiday.com

* goodmemoryholiday-my.com (suspended Apr 2019)
* greenseatourism-my.com (suspended Apr 2019)
* ivorystarvacation-my.com (suspended Apr 2019)
* jungleprincevacation-my.com (suspended Apr 2019)
* redlotustravelling-my.com (suspended Apr 2019)
* royalgoldtour-my.com (suspended Apr 2019)
* setiaskyholiday-my.com (suspended Apr 2019)
* stardreamtourism-my.com (suspended Apr 2019)
* sunsuriatravelling-my.com (suspended Apr 2019)
* theheritagetravel-my.com (suspended Apr 2019)
* topasiantours-my.com (suspended Apr 2019)
* airflytravelling.com (Expired)
* eternalmastourism.com (Expired) ( see evidence at https://fraud-reports.wikia.com/wiki/Malaysian_Travel_fraud )
* fantastikatravelling.com (Expired)
* freedomsflamesvacation.com ( Expired)
* greycloudtourism.com (Expired)
* littlemiracleholiday.com (Expired)
* magiccarpettourism.com (Expired)
* newbalancetour.com (Expired)
* palassupremeholiday.com (Expired)
* pristinetravelling.com (Expired)
* lakeviewtourism.com (expired Apr 2019)
* sevenwondersholiday.com (expired Apr 2019)
* asianfocustourism.com (expired Apr 2019) ( see evidence at https://fraud-reports.wikia.com/wiki/Malaysian_Travel_fraud )
* dreamishtravelling.com (expired Apr 2019)
* goldenpacifictours.com (expired Apr 2019)

[MarkGiles]

CNOBIN is a registrar in China. There is one fraud domain remaining not suspended.


beyondyourdreamstour-my.com (suspended)
blueskytravelling-my.com (suspended)
miharjatravelling.com (Expired)
oceanspirittour.com (Suspended)
mistymoontourism.com (Suspended)
jellybellytour.com (Suspended)
lordstarstour.com (Suspended)

[MarkGiles]

These are the fraud domains sponsored in Malaysia by SHINJURU

Suspended

greatakasiaholiday.com
suteramastravel.com
xperttourism.com

Fraud report greatakasiaholiday.com = June 2018 https://bit.ly/2sgqsdt
Fraud report suteramastravel.com = 10 May 2018 https://bit.ly/2H4qgbk


Suspended

goldenglowholiday.com (Expired, Parked)
mysticalmagictour.com (Suspended)
skyhorizontravel.com (Suspended)
ampanghilltravelling.com (Suspended)
asiatictour.com (Suspended)
ecocityholiday.com (Suspended)
flyingbeautytour.com (Suspended)
sabahantravel.com (Suspended)
worldtravelerstour.com (Suspended)

[MarkGiles]

These are the fraud domains sponsored in India by Web Werks India Pvt. Ltd trading as ZenRegistry.com

Awaiting action May 2019

None. All suspended by the registrar.

Suspended

holidayguardiantourism.com (Suspended)
niveaholiday.com (Suspended)
purplemoontravel.com (Suspended)
rafflesiaholiday.com (Suspended)
utopiatourism.com (Suspended)
casatropikatravel.com (Suspended)
lawastraveling.com (Suspended)
tawauholiday.com (Suspended)
bluegalaxytravel.com (Suspended)
pioneerandspiritholiday.com (Suspended)
royalgoldtour.com (Suspended)


These are the fraud domains previously sponsored by NetEarth One Inc

NetEarthOne was advised by ICANN to suspend these advance-fee travel "15th Avniversary scratch card" frauds.

Suspended May 2019

droyaltravel.com

Suspended on dates Nov 21 and Dec 4 and Dec 7 2017:


bluehavenholiday.com
castellholiday.com
jayaselatantravel.com
calisatravelandtour.com
croatianstyletour.com
doublecornertourism.com
flyhightravelling.com
foreverblisstourism.com
fullhouseholiday.com
galaxygirltour.com
gemilangcitytours.com
goodmemoryholiday.com
grandeagletourism.com
greenseatourism.com
hotspottourism.com
hotspringtravelling.com
jesseltonplaceholiday.com
legendarydreamtour.com
lonaislandtour.com
lunareclipsetourism.com
mypacifictravel.com
oneworldtravelling.com
passionaterosetravel.com
republictourism.com
royalputeritourism.com
setiaskyholiday.com
stariotravelling.com
thecruisemantravel.com
theroyaltravelling.com
theunforgettabletravel.com
timeoutkltour.com
topasiantours.com
travelmastertourism.com
tropikaislandtravel.com
trueartsvacation.com
wonderecotourism.com