Travel site fraud in Kuala Lumpur

[MarkGiles]

Over 250 web sites cut from 3 templates run a travel fraud.

The sites all acknowledge that they are a unique travel agency based in Kuala Lumpur, Malaysia, giving a small range of addresses and phone numbers.

The addresses and phone numbers are real, and phones are answered when you call.

What distinguishes these sites from genuine travel sites? They do not have any online booking facilities - they are performing no commerce.

Most sites advertise a 16th Anniversary promotion but there is no way to use this offer online.

However, they have amassed a large list of real names and addresses, which they "spam" in a novel way. They post real mail to these names and addresses. The mail comprises a glossy brochure, and two "Scratch Cards". When the victim scratches the cards, one is a losing card, but the other congratulates you on winning a prize, such as US$200,000.00 This is just like most scams in the Lottery / Prizewinner category.

When the victim contacts the company, the fraud begins. The victim is asked for photo-ID (passport, driver's licence etc). Before the money transfer can take place, there are tax payments and processing fees. That constitutes loss 1 and loss 2. Following that, should they ask for your bank details to transfer the winnings, they will have your personal details as well as your photo-ID to enable any kind of bank fraud.

These domains should be listed as scams with privacy risks.

[MarkGiles]

Sites still live on 27 June 2019.

The registrars who have demonstrated their willingness to be a sponsor of the Malaysian fraud are TUCOWS LTD of Canada, Web Werks India Pvt. Ltd d/b/a ZenRegistry.com, and WebNic aka WEBCC in Kuala Lumpur, Malaysia, where the cyber-criminal perpetrators reside.


* CNOBIN *

ALL SUSPENDED

* Realtime Register B.V. *

ALL SUSPENDED

* TUCOWS DOMAINS INC. *

AWAITING ACTION

bountystartour.com
deroyaletours.com
dorsetttours.com
gorgeoustourism.com
greatstartour.com
harmonitours.com
impianatours.com
kasihsayangtravel.com
klcompasstravel.com
lakevilletours.com
orkidstours.com
primabaytours.com
richmoontour.com
rivervilletours.com
seaqueentravel.com
sereniatours.com
tiarahillstours.com
verticatours.com
worldconnecttravelling-my.com


Screen captures of these frauds, showing the distinctive fingerprint, are at
* https://fraud-reports.wikia.org/wiki/TUCOWS_frauds
* https://fraud-reports.wikia.org/wiki/TUCOWS_frauds_2

Suspended by the ISP, not TUCOWS the registrar

* blingseatravel.com
* cherryblossomvacation.com
* dcelestialtravelling.com
* dreamuniontravel.com
* fabuloustravelling.com
* genesistravelling.com
* grandeurtravelling.com
* greaterviewtour.com
* greatmastravelling.com
* greatphantomholiday.com
* mascreationtravelling.com
* onespiritualtour.com
* perdanapealingvacation.com
* reallifetourism.com
* thetrinitytour.com
* topplanningtravel.com
* twistythrilltour.com
* wonderlandworldtravel.com
* worldtreetour.com
* younglivingholiday.com



* Web Commerce Communications Limited dba WebNic.cc *

ALL SUSPENDED

SUSPENDED June/July/August 2019

* kochitra.com
* littleindiatr.com
* atlanticworldholiday.com
* kingswayvac.com
* massapphiretravels.com
* masterpiecevacation.com
* perdanapealingvac.com
* rosevalleytours.com Rose Valley Tours
* dcelestialtra.com
* domaintravelling-my.com
* miracletimetours.com
* newdreamtourism.com
* piscesstarvacation.com
* rainbowcleartour.com
* sakuratra.com
* skyridgetravel.com
* thetrinitytr.com
* tophilltourism.com
* wonderlandworldtra.com
* overnightholiday.com
* superlimovac.com
* topofglasstour.com
* centarasholiday-my.com
* gloriousskytour.com
* kuchingholiday-my.com
* superbsevenholiday.com
* novaacetourism.com


Suspended by the ISP, not by WEBCC the registrar


* blingseatra.com
* flightpodtra.com
* topplanningtravel-my.com
* utopiatr.com
* worldtreetr.com
* shuttletourism.com
* amazingflytourism-my.com
* aquariatourism-my.com
* bestlifeworldtravel-my.com
* geoventuretravelandtours-my.com
* gorgeoustravelling-my.com
* greatphantomholiday-my.com
* kochitravelling-my.com
* littleindiatours.com
* spectrumtravelling-my.com
* summerlovertravel.com
* thecreativetravel-my.com
* wonderlandworldtravel-my.com


* NetEarth One Inc. d/b/a NetEarth *
ALL SUSPENDED

* droyaltravel.com suspended
* precisionholiday.com suspended


* OnlineNIC, Inc. *
ALL SUSPENDED

* ampangparkholiday-my.com suspended
* bluemarinetravelling-my.com suspended
* centarasholiday.com suspended
* fairylandtravelling.com suspended
* flyingsifutourism-my.com suspended
* jayaselatantravel-my.com suspended
* kuchingholiday.com suspended
* nusentralholiday-my.com suspended


* PDR LTD. *

* ALL SUSPENDED 30 July 2019 *


* Web Werks India Pvt. Ltd d/b/a ZenRegistry.com *

AWAITING ACTION
damansaravacation.com

SUSPENDED by the registrar, Web Werks

* shuttletourism.com (suspended)
* holidayguardiantourism.com (suspended)
* niveaholiday.com (suspended)
* purplemoontravel.com (suspended)
* utopiatourism.com (suspended)


Originally, 176 domains represented the travel fraud operation, and resided on IP addresses invariably located in Malaysia. (vads.com)

With the exception of a few web sites, all of these now reside on CloudFlare.com. One exception resides on one IP address located in Malaysia itself, on 202.75.55.212 - Web Hosting Provider, Mercumaya.net.

damansaravacation.com has address 202.75.55.212
kingswayvacation.com had address 103.8.25.16 - now suspended
---------------------------------------------------------------------------------------------------------------------------

[MarkGiles]

The registrars whose travel fraud site domains are listed above, in alphabetic order, are:

CNOBIN INFORMATION TECHNOLOGY LIMITED. . 8 suspended . . . 0 waiting for action
NetEarth One Inc. d/b/a NetEarth (UK) . . . . . . . . 38 suspended . . . 0 waiting for action
OnlineNIC, Inc. (China) . . . . . . . . . . . . . . . . . . . . . . . 23 suspended . . . 0 waiting for action
Public Domain Registry PDR LTD . . . . . . . . . . . . . . 89 suspended . . . 0 waiting for action
Realtime Register . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 suspended . . . . 0 waiting for action
Tucows Domains Inc. . . . . . . . . . . . . . . . . . . . . . . . . . . 26 removed . . . 19 waiting for action
Web Commerce Communications (WebNIC Kuala Lumpur) . . 107 suspended ... 0 waiting for action
Web Werks India Pvt. Ltd (ZenRegistry.com) . . . . 11 suspended . . . 1 waiting for action
Shinjiru Technology Sdn Bhd (Malaysia) . . . . . . . . 18 suspended . . . 0 waiting for action

------------------------------

322 Total suspended
20 Total alive

------------------------------

Number of live Travel scam sites by registrar

CNOBIN 0
NetEarth One Inc. - NetEarth 0
OnlineNIC, Inc. 0
PDR Ltd. - PublicDomainRegistry.com 0
Realtime Register B.V. 0
Shinjuru 0
TUCOWS DOMAINS INC. 19
Web Werks India - ZenRegistry.com 1
WEBCC WebNic.cc 0

Total 20

[MarkGiles]

This is what a Travel Fraud 2nd prize "scratchie card" looks like, and the brochure that accompanies it, in this scam.

Copy the link below into your browser

> https://imgur.com/yqN3j68

It is covered in the description of the Singapore based WebNIC.cc registrar
https://fraud-reports.wikia.com/wiki/WebNIC

EVIDENCE OF FRAUD

Nov 2018 nzherald.co.nz/wanganui-chronicle/horowhenua-chronicle/news/article.cfm?c_id=1503788&objectid=12017932
* Don't believe glossy travel brochures promising prizes
Aug 2018 stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam
* Kiwis targeted again by Malaysian travel scratchie scam
June 2018 star.kiwi/2018/06/scam-alert-watch-out-for-this-in-your-letterbox/
* Scam alert: Watch out for this in your letterbox
Nov 2017 stuff.co.nz/business/99313885/kiwis-warned-to-steer-clear-of-malaysian-travel-scratchie-scam
* Kiwis warned to steer clear of Malaysian travel scratchie scam
Oct 2017 AU Govt northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
* Scam watch: Dodgy scratch tickets promise thousands
Oct 2017 Canberra Alert abc.net.au/news/2017-10-05/scratchie-scams-robbing-canberrans-of-thousands-of-dollars/9011248
* 'Scratchie scam' losses skyrocket in Canberra, prompting warnings from consumer watchdog
Nov 2016 netsafe.org.nz/have-i-won-165000-malaysian-travel-scratch-and-win-cards-explained/
* TRAVEL SCRATCH & WIN CARDS
Sep 2016 West Australia Govt commerce.wa.gov.au/announcements/wa-residents-warned-about-travel-scratchie-scam-nova-victory-travel
* WA residents warned about travel scratchie scam
Nov 2015 northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
* Scam watch: Dodgy scratch tickets promise thousands
2012 Gov of West Australia scamnet.wa.gov.au/scamnet/Scam_types-Unexpected_winnings-Travel_prize_scams-Sentosa_Traveling_Group_Enjoi_Vacation__Phantasi_Holiday__Lavender_Holiday_.htm
* A bogus Malaysian travel company
Aug 2015 Malaysia thestar.com.my/metro/community/2015/08/22/three-lose-savings-to-scratchandwin-scam/

[MarkGiles]

The scratch cards that come with this fraud, lists some sponsors. One of those is the Royal Selangor in Malaysia.
Here is a request for confirmation:

I received a brochure and a competition entry form from The Dazzling
Holiday, Menara HLA 3/F, 304, Jalan Kia Peng, Kuala Lumpur, Phone +6011
- 3108 6813.
Their web site is at http://thedazzlingholiday.com

The brochure lists Royal Selangor as a special sponsor and depicts your
purple company logo.
Please verify this sponsorship, and advise if this is a legitimate company.

They sent two "Scratch" cards, one of which awarded a prize of US$
200,000.00

So before I provide them with my contact details, proof of Identity, and
bank details, I would like to check their credentials.

Here is their immediate response:

Greetings from Royal Selangor and thank you for bringing this to our attention.

We've recently received multiple complains and confirmation regarding some scratch and win card offered by multiple travel agency and an investigation is currently ongoing at the moment regarding this.

Be assured that Royal Selangor is not involved in any scratch and win activities nor in any way involved in any of these activities. Kindly ignore all these scratch and win contests and DO NOT ever provide any form of information to them.

Thank you very much.

Regards,
Sean Kwan

E-Commerce Department
Royal Selangor International
www.royalselangor.com

[MarkGiles]

Suspended May 2019
brightstarholiday.com
spectrumtravelling.com

Registrar PublicDomainRegistry were sympathetic to a request to suspend these domains used in this fraud.
On November 14 2017 they immediately suspended all of these 78 domains


airshinetravelling.com
airvalenciatravel.com
allintravelling.com
amazingflytourism.com
anmourtravel.com
aquariatourism.com
asianfantasyvacation.com
asiangoldentour.com
blazingholiday.com
blueparadisevacation.com
botanictravel.com
bukithijautravel.com
butterflytravelling.com
changkattravel.com
comfortlineholiday.com
crownpalacetravel.com
desariangtourism.com
ezasiatourism.com
faberparktravel.com
feathercanyonholiday.com
firstnighttour.com
geoventuretravelandtours.com
glamourtourism.com
goldenexplorervacation.com
goldentropicaltravel.com
gorgeoustravelling.com
gravitycloudtour.com
highrollerholiday.com
historicstour.com
hotspottravelling.com
iskandarholiday.com
jagongmastravel.com
justvictoryholiday.com
klinternationaltravel.com
littlebitvacation.com
littlecreamertourism.com
lovelyprincesstour.com
maisonplacetourism.com
marvelloustourism.com
moonlightkissholiday.com
naturegreentravel.com
northernmiracletravel.com
northwingtravel.com
nusentralholiday.com
oceanpacifictour.com
palaceindahtravel.com
paradisemomentholiday.com
prioritytravelling.com
razakholiday.com
redlotustravelling.com
redroseholiday.com
redspringtravel.com
reedsholiday.com
rionaholiday.com
rivervalleyholiday.com
royalmutiaratravelling.com
safariworldtravelling.com
sassyvelvettour.com
seasonstravelling.com
shamelintravelling.com
skyrockholiday.com
splendidtourism.com
stardreamtourism.com
sunsuriatravelling.com
tanjunglangittravel.com
theheritagetravel.com
theonlyvacation.com
theroofvacation.com
travelpassionvacation.com
trinityworldtravel.com
tropicalgatewayholiday.com
tropicanatour.com
trueleasureholidays.com
urbanheritagetour.com
vertigovacation.com
visitworldtourism.com
vivastarholiday.com
wonderlandrosevacation.com


New domains
Suspended Jan 2019:

neweratourism.com
tanjungalamtour.com

[MarkGiles]

These are the fraud domain names sponsored by WEBNIC.CC whose abuse phone number is in Kuala Lumpur, Malaysia.

Domains suspended by WEBCC in Kuala Lumpur:

centarasholiday-my.com
gloriousskytour.com
kuchingholiday-my.com


Expired

clubfourvacation.com
fareasttravelling.com
homeclubvacation.com
klflytravelling.com
kluniversaltravel.com
landmarktravelling.com
seasonsrockvacation.com
starlighttravelling.com
theinsighttour.com
twingalaxyholiday.com


Domains seized by the Malaysian reseller, Net Onboard Sdn Bhd

alltimetravelling.com
ampangparkholiday.com
asiantigertour.com
bayuputeritravelling.com
bestlifeworldtravel.com
bestmemoriestravel.com ( see evidence of fraud at (https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam )
beyondyourdreamstour.com
bintangstartravelling.com
bluemarinetravelling.com
blueskytravelling.com
dangabayholiday.com
dreamcasterstour.com
flaminggloryholiday.com
flyingsifutourism.com
foxyladyvacation.com
fraserparkholiday.com
groveholiday.com ( see evidence of fraud at https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam )
hybridsholiday.com
jungleprincevacation.com
loverboyholiday.com
mistikatourism.com
moonshinevacation.com
myroyaleholiday.com
passionqueentravel.com
primetouchtravel.com
thecreativetravel.com
threesixfiveholiday.com
underseaholiday.com

* goodmemoryholiday-my.com (suspended Apr 2019)
* greenseatourism-my.com (suspended Apr 2019)
* ivorystarvacation-my.com (suspended Apr 2019)
* jungleprincevacation-my.com (suspended Apr 2019)
* redlotustravelling-my.com (suspended Apr 2019)
* royalgoldtour-my.com (suspended Apr 2019)
* setiaskyholiday-my.com (suspended Apr 2019)
* stardreamtourism-my.com (suspended Apr 2019)
* sunsuriatravelling-my.com (suspended Apr 2019)
* theheritagetravel-my.com (suspended Apr 2019)
* topasiantours-my.com (suspended Apr 2019)
* airflytravelling.com (Expired)
* eternalmastourism.com (Expired) ( see evidence at https://fraud-reports.wikia.com/wiki/Malaysian_Travel_fraud )
* fantastikatravelling.com (Expired)
* freedomsflamesvacation.com ( Expired)
* greycloudtourism.com (Expired)
* littlemiracleholiday.com (Expired)
* magiccarpettourism.com (Expired)
* newbalancetour.com (Expired)
* palassupremeholiday.com (Expired)
* pristinetravelling.com (Expired)
* lakeviewtourism.com (expired Apr 2019)
* sevenwondersholiday.com (expired Apr 2019)
* asianfocustourism.com (expired Apr 2019) ( see evidence at https://fraud-reports.wikia.com/wiki/Malaysian_Travel_fraud )
* dreamishtravelling.com (expired Apr 2019)
* goldenpacifictours.com (expired Apr 2019)

[MarkGiles]

CNOBIN is a registrar in China. There is one fraud domain remaining not suspended.


beyondyourdreamstour-my.com (suspended)
blueskytravelling-my.com (suspended)
miharjatravelling.com (Expired)
oceanspirittour.com (Suspended)
mistymoontourism.com (Suspended)
jellybellytour.com (Suspended)
lordstarstour.com (Suspended)

[MarkGiles]

These are the fraud domains sponsored in Malaysia by SHINJURU

Suspended

greatakasiaholiday.com
suteramastravel.com
xperttourism.com

Fraud report greatakasiaholiday.com = June 2018 https://bit.ly/2sgqsdt
Fraud report suteramastravel.com = 10 May 2018 https://bit.ly/2H4qgbk


Suspended

goldenglowholiday.com (Expired, Parked)
mysticalmagictour.com (Suspended)
skyhorizontravel.com (Suspended)
ampanghilltravelling.com (Suspended)
asiatictour.com (Suspended)
ecocityholiday.com (Suspended)
flyingbeautytour.com (Suspended)
sabahantravel.com (Suspended)
worldtravelerstour.com (Suspended)

[MarkGiles]

These are the fraud domains sponsored in India by Web Werks India Pvt. Ltd trading as ZenRegistry.com

Awaiting action May 2019

None. All suspended by the registrar.

Suspended

holidayguardiantourism.com (Suspended)
niveaholiday.com (Suspended)
purplemoontravel.com (Suspended)
rafflesiaholiday.com (Suspended)
utopiatourism.com (Suspended)
casatropikatravel.com (Suspended)
lawastraveling.com (Suspended)
tawauholiday.com (Suspended)
bluegalaxytravel.com (Suspended)
pioneerandspiritholiday.com (Suspended)
royalgoldtour.com (Suspended)


These are the fraud domains previously sponsored by NetEarth One Inc

NetEarthOne was advised by ICANN to suspend these advance-fee travel "15th Avniversary scratch card" frauds.

Suspended May 2019

droyaltravel.com

Suspended on dates Nov 21 and Dec 4 and Dec 7 2017:


bluehavenholiday.com
castellholiday.com
jayaselatantravel.com
calisatravelandtour.com
croatianstyletour.com
doublecornertourism.com
flyhightravelling.com
foreverblisstourism.com
fullhouseholiday.com
galaxygirltour.com
gemilangcitytours.com
goodmemoryholiday.com
grandeagletourism.com
greenseatourism.com
hotspottourism.com
hotspringtravelling.com
jesseltonplaceholiday.com
legendarydreamtour.com
lonaislandtour.com
lunareclipsetourism.com
mypacifictravel.com
oneworldtravelling.com
passionaterosetravel.com
republictourism.com
royalputeritourism.com
setiaskyholiday.com
stariotravelling.com
thecruisemantravel.com
theroyaltravelling.com
theunforgettabletravel.com
timeoutkltour.com
topasiantours.com
travelmastertourism.com
tropikaislandtravel.com
trueartsvacation.com
wonderecotourism.com