Travel site fraud in Kuala Lumpur

[MarkGiles]

Over 250 web sites cut from 3 templates run a travel fraud.

The sites all acknowledge that they are a unique travel agency based in Kuala Lumpur, Malaysia, giving a small range of addresses and phone numbers.

The addresses and phone numbers are real, and phones are answered when you call.

What distinguishes these sites from genuine travel sites? They do not have any online booking facilities - they are performing no commerce.

Most sites advertise a 15th Anniversary promotion but there is no way to use this offer online.

However, they have amassed a large list of real names and addresses, which they "spam" in a novel way. They post real mail to these names and addresses. The mail comprises a glossy brochure, and two "Scratch Cards". When the victim scratches the cards, one is a losing card, but the other congratulate you on winning a prize, such as US$200,000.00 This is just like most scams in the Lottery / Prizewinner category.

When the victim contacts the company, the fraud begins. The victim is asked for photo-ID (passport, driver's licence etc). Before the money transfer can take place, there are tax payments and processing fees. That constitutes loss 1 and loss 2. Following that, since they will ask for your bank details to transfer the winnings, they will have your personal details as well as your photo-ID to enable any kind of bank fraud.

These domains should be listed as scams with privacy risks.

[MarkGiles]

Sites still live in April 2019


* CNOBIN *

beyondyourdreamstour-my.com


* NetEarth One Inc. d/b/a NetEarth *

droyaltravel.com


* OnlineNIC, Inc. *

ampangparkholiday-my.com
bluemarinetravelling-my.com
fairylandtravelling.com
flyingsifutourism-my.com
jayaselatantravel-my.com
nusentralholiday-my.com

* PDR LTD. *

brightstarholiday.com
spectrumtravelling.com


* Realtime Register B.V. *

alltimetravelling-my.com
gemilangcitytours-my.com
newwingholiday.com

* TUCOWS DOMAINS INC. *

blingseatravel.com
grandeurtravelling.com
mascreationtravelling.com
topplanningtravel.com


* Web Commerce Communications Limited dba WebNic.cc *

amazingflytourism-my.com
clubfourvacation.com
fareasttravelling.com
homeclubvacation.com
klflytravelling.com
kluniversaltravel.com
landmarktravelling.com
seasonsrockvacation.com
starlighttravelling.com
theinsighttour.com
twingalaxyholiday.com


* Web Werks India Pvt. Ltd d/b/a ZenRegistry.com *


holidayguardiantourism.com




These 176 domains represented the travel fraud operation, and reside on IP addresses invariably located in Malaysia. (vads.com)

Most frequently used IPs are

103.249.84.96
103.27.74.171
103.27.74.173
103.27.74.81
103.27.74.82
103.27.74.83
103.6.244.6
103.75.188.106
103.75.188.109
103.91.66.10
103.91.66.7
104.27.174.76
104.27.175.76
112.137.162.105
112.137.167.164
112.137.167.250
124.217.241.189
182.239.43.86
202.71.109.233
202.71.110.21
202.75.32.200
220.158.200.102

* * * 15th ANNIVERSARY FRAUD SITES * * *
airflytravelling.com
airshinetravelling.com
airvalenciatravel.com
allintravelling.com
alltimetravelling.com
amazingflytourism.com
amazingtotour.com
ampanghilltravelling.com
ampangparkholiday.com
anmourtravel.com
aquariatourism.com
asianfantasyvacation.com
asiangoldentour.com
asiantigertour.com
asiarasatravel.com
asiatictour.com
bayuputeritravelling.com
bestlifeworldtravel.com
bestmemoriestravel.com
beyondyourdreamstour.com
bintangstartravelling.com
blazingholiday.com
bluegalaxytravel.com
bluemarinetravelling.com
blueparadisevacation.com
blueskytravelling.com
botanictravel.com
bukithijautravel.com
butterflytravelling.com
calisatravelandtour.com
casatropikatravel.com
castellholiday.com
changkattravel.com
comfortlineholiday.com
croatianstyletour.com
crownpalacetravel.com
dangabayholiday.com
desariangtourism.com
doublecornertourism.com
dreamcasterstour.com
dreamishtravelling.com
ecocityholiday.com
eternalmastourism.com
ezasiatourism.com
faberparktravel.com
fantastikatravelling.com
feathercanyonholiday.com
firstnighttour.com
flaminggloryholiday.com
flyhightravelling.com
flyingbeautytour.com
flyingsifutourism.com
foreverblisstourism.com
foxyladyvacation.com
fraserparkholiday.com
fullhouseholiday.com
g-hardtravel.com
galaxygirltour.com
gemilangcitytours.com
geoventuretravelandtours.com
glamourtourism.com
globalseekertourism.com
goldenagetourism.com
goldenexplorervacation.com
goldenglowholiday.com
goldenpacifictours.com
goldentropicaltravel.com
goodmemoryholiday.com
gorgeoustravelling.com
grandeagletourism.com
gravitycloudtour.com
greenseatourism.com
greenvalletvacation.com
groveholiday.com
highrollerholiday.com
historicstour.com
homeclubvacation.com
hotspottourism.com
hotspottravelling.com
hotspringtravelling.com
hybridsholiday.com
iskandarholiday.com
jagongmastravel.com
jellybellytour.com
jesseltonplaceholiday.com
jungleprincevacation.com
justvictoryholiday.com
klflytravelling.com
klinternationaltravel.com
lakeviewtourism.com
landmarktravelling.com
legendarydreamtour.com
littlebitvacation.com
littlecreamertourism.com
littlemiracleholiday.com
lonaislandtour.com
lovelyprincesstour.com
loverboyholiday.com
lunareclipsetourism.com
maisonplacetourism.com
marvelloustourism.com
mistikatourism.com
moonlightkissholiday.com
moonshinevacation.com
mypacifictravel.com
myroyaleholiday.com
mysticalmagictour.com
naturegreentravel.com
neweratourism.com
northernmiracletravel.com
northwingtravel.com
nusentralholiday.com
oceanpacifictour.com
oneworldtravelling.com
palaceindahtravel.com
palassupremeholiday.com
paradisemomentholiday.com
passionaterosetravel.com
passionqueentravel.com
pioneerandspiritholiday.com
primetouchtravel.com
prioritytravelling.com
pristinetravelling.com
razakholiday.com
redlotustravelling.com
redroseholiday.com
redspringtravel.com
reedsholiday.com
republictourism.com
rionaholiday.com
rivervalleyholiday.com
royalgoldtour.com
royalmutiaratravelling.com
royalputeritourism.com
sabahantravel.com
safariworldtravelling.com
sassyvelvettour.com
seasonstravelling.com
setiaskyholiday.com
sevenwondersholiday.com
shamelintravelling.com
skyhorizontravel.com
skyrockholiday.com
splendidtourism.com
stardreamtourism.com
stariotravelling.com
sunsuriatravelling.com
tanjunglangittravel.com
thecreativetravel.com
thecruisemantravel.com
thedazzlingholiday.com
theheritagetravel.com
theonlyvacation.com
theroofvacation.com
theroyaltravelling.com
theunforgettabletravel.com
threesixfiveholiday.com
timeoutkltour.com
topasiantours.com
travelmastertourism.com
travelpassionvacation.com
trinityworldtravel.com
tropicalgatewayholiday.com
tropicanatour.com
tropikaislandtravel.com
trueartsvacation.com
trueleasureholidays.com
underseaholiday.com
urbanheritagetour.com
vertigovacation.com
visitworldtourism.com
vivastarholiday.com
wonderecotourism.com
wonderlandrosevacation.com
worldtravelerstour.com

blazingholiday-my.com
botanictravel-my.com
goodmemoryholiday-my.com
nationaltrusttravel-my.com
oceanpacifictour-my.com
prioritytravelling-my.com
stardreamtourism-my.com
triplemoontour-my.com
visitworldtourism-my.com

The last 9 were registered in November 2018

beyondyourdreamstour-my.com
blueskytravelling-my.com
greenseatourism-my.com
ivorystarvacation-my.com
royalgoldtour-my.com
setiaskyholiday-my.com
topasiantours-my.com
jungleprincevacation-my.com
theheritagetravel-my.com

The last 10 were registered in December 2018



* * * FAKE FINANCE COMPANIES * * *

Each brochure and scratch card thanks a "Platinum Sponsor" - supposedly a Hong Kong finance company. There are a large number of these fake sponsor companies, with domain names registered with registrars who accept payment for the registration service. The domain names correspond to a credible looking web site, all following a similar pattern. They exist solely to try to lend credibility to the 15th Anniversary Malaysian Travel scratch card fraud. The finance companies in fact do not exist. A list of fake domains fitting this category, together with the sponsoring registrar:


NetEarth One Inc. d/b/a NetEarth (UK)

anthonymasonholdings.com
bryantedwardsholdings.com
colleyvivianholdings.com
ericjohnnyholdings.com
gracealanholdings.com
loganelijahholdings.com
noahemmaholdings.com (suspended Dec 2018)
sharonjacksonholdings.com
stevenmaryholdings.com
susanromeoholdings.com
zoeloganholdings.com

OnlineNIC, Inc. (China)

audreyjordanholdings.com
dorothycharlotteholdings.com (removed by mesrahosting.net)
noelloganholdings.com (removed by mesrahosting.net)
samanthanickholdings.com (removed by mesrahosting.net)


ALL SUSPENDED BY THE REGISTRAR FOR FRAUD

adammorrisholdings.com (suspended)
alyssachrisholdings.com (suspended)
amandajimmyholdings.com (suspended)
ambergeorgeholdings.com (suspended)
calvinzoeholdings.com (suspended)
carllindseyholdings.com (suspended)
charlotteavaholdings.com (suspended)
codyclaytonholdings.com (suspended)
codygavinholdings.com (suspended)
colemanwhiteholdings.com (suspended)
davisrossholdings.com (suspended)
dylansarahholdings.com (suspended)
emilynathanholdings.com (suspended)
emmaseanholdings.com (suspended)
francisjasperholdings.com (suspended)
harpergavinholdings.com (suspended)
jackjackyholdings.com (suspended)
jackvictoriaholdings.com (suspended)
jeffmorganholdings.com (suspended)
kelvinjenniferholdings.com (suspended)
kylejoshuaholdings.com (suspended)
lauramatthewholdings.com (suspended)
laurenjoshholdings.com (suspended)
liamlevisholdings.com (suspended)
lilycarterholdings.com (suspended)
lincolnkayleeholdings.com (suspended)
madisonvincentholdings.com (suspended)
peterjackholdings.com (suspended)
rachelgabrielholdings.com (suspended)
ralphjoshuaholdings.com (suspended)
randygabrielholdings.com (suspended)
robinelaineholdings.com (suspended)
ryanjulianholdings.com (suspended)
sabrinarachelholdings.com (suspended)
summersamuelholdings.com (suspended)
talishareaganholdings.com (suspended)
tracywilsonholdings.com (suspended)
victoriatylerholdings.com (suspended)

Web Commerce Communications Limited dba WebNic.cc (Malaysia)

addisoncameronholdings.com
cadenliamholdings.com
waltonkellyholdings.com


Web Werks India Pvt. Ltd d/b/a ZenRegistry.com (India)

amycharlesholdings.com
ashleybrandonholdings.com
isaacleviholdings.com
jessicawilliamholdings.com
olivialucasholdings.com
sabrinakyleholdings.com

[MarkGiles]

The registrars whose travel fraud site domains are listed above, ordered by most frequently abused, are:

83 Public Domain Registry PDR LTD . . . . . . . . . . . . . 81 suspended ... 2 waiting for action
76 Web Commerce Communications (WebNIC Kuala Lumpur) . . 65 suspended ... 11 waiting for action
37 NetEarth One Inc. d/b/a NetEarth (UK) . . . . . . . . 36 suspended . . 1 waiting for action
21 OnlineNIC, Inc. (China) . . . . . . . . . . . . . . . . . . . . . . 20 suspended . . 1 waiting for action
18 Shinjiru Technology Sdn Bhd (Malaysia . . . . . . . 18 suspended . . . 0 waiting for action
14 Realtime Register . . . . . . . . . . . . . . . . . . . . . . . . . . 14 suspended . . . 2 waiting for action
8 CNOBIN INFORMATION TECHNOLOGY LIMITED. . 7 suspended . . . 1 waiting for action
7 Web Werks India Pvt. Ltd (ZenRegistry.com) . . . . . 6 suspended . . . 1 waiting for action

------------------------------

268 Total reported
250 Total suspended
18 Total alive

------------------------------

Number of live Travel scam sites by registrar
11 Web Commerce Communications Limited dba WebNic.cc
1 CNOBIN INFORMATION TECHNOLOGY LIMITED
0 OnlineNIC, Inc.
1 Web Werks India Pvt. Ltd d/b/a ZenRegistry.com
2 Realtime Register
0 Shinjiru Technology Sdn Bhd
2 PDR Ltd. d/b/a PublicDomainRegistry.com
1 NetEarth One Inc.

[MarkGiles]

This is what a Travel Fraud 2nd prize "scratchie card" looks like, and the brochure that accompanies it, in this scam.

Copy the link below into your browser

> https://imgur.com/yqN3j68

It is covered in the description of the Singapore based WebNIC.cc registrar
https://fraud-reports.wikia.com/wiki/WebNIC

EVIDENCE OF FRAUD

Nov 2018 nzherald.co.nz/wanganui-chronicle/horowhenua-chronicle/news/article.cfm?c_id=1503788&objectid=12017932
Aug 2018 stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam
June 2018 star.kiwi/2018/06/scam-alert-watch-out-for-this-in-your-letterbox/
Nov 2017 stuff.co.nz/business/99313885/kiwis-warned-to-steer-clear-of-malaysian-travel-scratchie-scam
Oct 2017 AU Govt northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
Oct 2017 Canberra Alert abc.net.au/news/2017-10-05/scratchie-scams-robbing-canberrans-of-thousands-of-dollars/9011248
Nov 2016 netsafe.org.nz/have-i-won-165000-malaysian-travel-scratch-and-win-cards-explained/
Sep 2016 West Australia Govt commerce.wa.gov.au/announcements/wa-residents-warned-about-travel-scratchie-scam-nova-victory-travel
Nov 2015 northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
2012 Gov of West Australia scamnet.wa.gov.au/scamnet/Scam_types-Unexpected_winnings-Travel_prize_scams-Sentosa_Traveling_Group_Enjoi_Vacation__Phantasi_Holiday__Lavender_Holiday_.htm
Aug 2015 Malaysia thestar.com.my/metro/community/2015/08/22/three-lose-savings-to-scratchandwin-scam/

[MarkGiles]

The scratch cards that come with this fraud, lists some sponsors. One of those is the Royal Selangor in Malaysia.
Here is a request for confirmation:

I received a brochure and a competition entry form from The Dazzling
Holiday, Menara HLA 3/F, 304, Jalan Kia Peng, Kuala Lumpur, Phone +6011
- 3108 6813.
Their web site is at http://thedazzlingholiday.com

The brochure lists Royal Selangor as a special sponsor and depicts your
purple company logo.
Please verify this sponsorship, and advise if this is a legitimate company.

They sent two "Scratch" cards, one of which awarded a prize of US$
200,000.00

So before I provide them with my contact details, proof of Identity, and
bank details, I would like to check their credentials.

Here is their immediate response:

Greetings from Royal Selangor and thank you for bringing this to our attention.

We've recently received multiple complains and confirmation regarding some scratch and win card offered by multiple travel agency and an investigation is currently ongoing at the moment regarding this.

Be assured that Royal Selangor is not involved in any scratch and win activities nor in any way involved in any of these activities. Kindly ignore all these scratch and win contests and DO NOT ever provide any form of information to them.

Thank you very much.

Regards,
Sean Kwan

E-Commerce Department
Royal Selangor International
www.royalselangor.com

[MarkGiles]

Awaiting action April 2019
brightstarholiday.com
spectrumtravelling.com

Registrar PublicDomainRegistry were sympathetic to a request to suspend these domains used in this fraud.
On November 14 2017 they immediately suspended all of these 78 domains


airshinetravelling.com
airvalenciatravel.com
allintravelling.com
amazingflytourism.com
anmourtravel.com
aquariatourism.com
asianfantasyvacation.com
asiangoldentour.com
blazingholiday.com
blueparadisevacation.com
botanictravel.com
bukithijautravel.com
butterflytravelling.com
changkattravel.com
comfortlineholiday.com
crownpalacetravel.com
desariangtourism.com
ezasiatourism.com
faberparktravel.com
feathercanyonholiday.com
firstnighttour.com
geoventuretravelandtours.com
glamourtourism.com
goldenexplorervacation.com
goldentropicaltravel.com
gorgeoustravelling.com
gravitycloudtour.com
highrollerholiday.com
historicstour.com
hotspottravelling.com
iskandarholiday.com
jagongmastravel.com
justvictoryholiday.com
klinternationaltravel.com
littlebitvacation.com
littlecreamertourism.com
lovelyprincesstour.com
maisonplacetourism.com
marvelloustourism.com
moonlightkissholiday.com
naturegreentravel.com
northernmiracletravel.com
northwingtravel.com
nusentralholiday.com
oceanpacifictour.com
palaceindahtravel.com
paradisemomentholiday.com
prioritytravelling.com
razakholiday.com
redlotustravelling.com
redroseholiday.com
redspringtravel.com
reedsholiday.com
rionaholiday.com
rivervalleyholiday.com
royalmutiaratravelling.com
safariworldtravelling.com
sassyvelvettour.com
seasonstravelling.com
shamelintravelling.com
skyrockholiday.com
splendidtourism.com
stardreamtourism.com
sunsuriatravelling.com
tanjunglangittravel.com
theheritagetravel.com
theonlyvacation.com
theroofvacation.com
travelpassionvacation.com
trinityworldtravel.com
tropicalgatewayholiday.com
tropicanatour.com
trueleasureholidays.com
urbanheritagetour.com
vertigovacation.com
visitworldtourism.com
vivastarholiday.com
wonderlandrosevacation.com


New domains
Suspended Jan 2019:

neweratourism.com
tanjungalamtour.com

[MarkGiles]

These are the fraud domain names sponsored by WEBNIC.CC whose abuse phone number is in Kuala Lumpur, Malaysia.

Domains awaiting action from WEBCC in Kuala Lumpur:

amazingflytourism-my.com
clubfourvacation.com
fareasttravelling.com
homeclubvacation.com
klflytravelling.com
kluniversaltravel.com
landmarktravelling.com
seasonsrockvacation.com
starlighttravelling.com
theinsighttour.com
twingalaxyholiday.com


Domains seized by the Malaysian reseller, Net Onboard Sdn Bhd

alltimetravelling.com
ampangparkholiday.com
asiantigertour.com
bayuputeritravelling.com
bestlifeworldtravel.com
bestmemoriestravel.com ( see evidence of fraud at (https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam )
beyondyourdreamstour.com
bintangstartravelling.com
bluemarinetravelling.com
blueskytravelling.com
dangabayholiday.com
dreamcasterstour.com
flaminggloryholiday.com
flyingsifutourism.com
foxyladyvacation.com
fraserparkholiday.com
groveholiday.com ( see evidence of fraud at https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam )
hybridsholiday.com
jungleprincevacation.com
loverboyholiday.com
mistikatourism.com
moonshinevacation.com
myroyaleholiday.com
passionqueentravel.com
primetouchtravel.com
thecreativetravel.com
threesixfiveholiday.com
underseaholiday.com

* goodmemoryholiday-my.com (suspended Apr 2019)
* greenseatourism-my.com (suspended Apr 2019)
* ivorystarvacation-my.com (suspended Apr 2019)
* jungleprincevacation-my.com (suspended Apr 2019)
* redlotustravelling-my.com (suspended Apr 2019)
* royalgoldtour-my.com (suspended Apr 2019)
* setiaskyholiday-my.com (suspended Apr 2019)
* stardreamtourism-my.com (suspended Apr 2019)
* sunsuriatravelling-my.com (suspended Apr 2019)
* theheritagetravel-my.com (suspended Apr 2019)
* topasiantours-my.com (suspended Apr 2019)
* airflytravelling.com (Expired)
* eternalmastourism.com (Expired) ( see evidence at https://fraud-reports.wikia.com/wiki/Malaysian_Travel_fraud )
* fantastikatravelling.com (Expired)
* freedomsflamesvacation.com ( Expired)
* greycloudtourism.com (Expired)
* littlemiracleholiday.com (Expired)
* magiccarpettourism.com (Expired)
* newbalancetour.com (Expired)
* palassupremeholiday.com (Expired)
* pristinetravelling.com (Expired)
* lakeviewtourism.com (expired Apr 2019)
* sevenwondersholiday.com (expired Apr 2019)
* asianfocustourism.com (expired Apr 2019) ( see evidence at https://fraud-reports.wikia.com/wiki/Malaysian_Travel_fraud )
* dreamishtravelling.com (expired Apr 2019)
* goldenpacifictours.com (expired Apr 2019)

[MarkGiles]

CNOBIN is a registrar in China. There is one fraud domain remaining not suspended.


beyondyourdreamstour-my.com



blueskytravelling-my.com (suspended)
miharjatravelling.com (Expired)
oceanspirittour.com (Suspended)
mistymoontourism.com (Suspended)
jellybellytour.com (Suspended)
lordstarstour.com (Suspended)

[MarkGiles]

These are the fraud domains sponsored in Malaysia by SHINJURU

Suspended

greatakasiaholiday.com
suteramastravel.com
xperttourism.com

Fraud report greatakasiaholiday.com = June 2018 https://bit.ly/2sgqsdt
Fraud report suteramastravel.com = 10 May 2018 https://bit.ly/2H4qgbk


Suspended

goldenglowholiday.com (Expired, Parked)
mysticalmagictour.com (Suspended)
skyhorizontravel.com (Suspended)
ampanghilltravelling.com (Suspended)
asiatictour.com (Suspended)
ecocityholiday.com (Suspended)
flyingbeautytour.com (Suspended)
sabahantravel.com (Suspended)
worldtravelerstour.com (Suspended)

[MarkGiles]

These are the fraud domains sponsored in India by Web Werks India Pvt. Ltd trading as ZenRegistry.com

Awaiting action April 2019

holidayguardiantourism.com

Suspended

casatropikatravel.com (Suspended)
lawastraveling.com (Suspended)
tawauholiday.com (Suspended)
bluegalaxytravel.com (Suspended)
pioneerandspiritholiday.com (Suspended)
royalgoldtour.com (Suspended)


These are the fraud domains previously sponsored by NetEarth One Inc

NetEarthOne was advised by ICANN to suspend these advance-fee travel "15th Avniversary scratch card" frauds.

Awaiting action April 2019

droyaltravel.com

Suspended on dates Nov 21 and Dec 4 and Dec 7 2017:


bluehavenholiday.com
castellholiday.com
jayaselatantravel.com
calisatravelandtour.com
croatianstyletour.com
doublecornertourism.com
flyhightravelling.com
foreverblisstourism.com
fullhouseholiday.com
galaxygirltour.com
gemilangcitytours.com
goodmemoryholiday.com
grandeagletourism.com
greenseatourism.com
hotspottourism.com
hotspringtravelling.com
jesseltonplaceholiday.com
legendarydreamtour.com
lonaislandtour.com
lunareclipsetourism.com
mypacifictravel.com
oneworldtravelling.com
passionaterosetravel.com
republictourism.com
royalputeritourism.com
setiaskyholiday.com
stariotravelling.com
thecruisemantravel.com
theroyaltravelling.com
theunforgettabletravel.com
timeoutkltour.com
topasiantours.com
travelmastertourism.com
tropikaislandtravel.com
trueartsvacation.com
wonderecotourism.com