Fraud Reports Wiki
No edit summary
Line 687: Line 687:
 
waynelouisholdings.com
 
waynelouisholdings.com
   
==Current list, June 2019==
+
==Current list, July 2019==
 
* Domain Name * * Site Name *
 
* Domain Name * * Site Name *
  +
bountystartour.com Bounty Star Tour
blingseatravel.com Bling Sea Travel
 
  +
dcelestialtravelling.com D Celestial Travelling
deroyaletours.com De Royale Tours
 
dorsetttours.com Dorsett Tours
+
deroyaletours.com De Royale Tours
  +
dorsetttours.com Dorsett Tours
genesistravelling.com Genesis Travelling
 
grandeurtravelling.com Grandeur Travelling
+
fabuloustravelling.com Fabulous Travelling
 
genesistravelling.com Genesis Travelling
harmonitours.com Harmoni Tours
 
  +
gorgeoustourism.com Gorgeous Tourism
impianatours.com Impiana Tours
 
  +
greaterviewtour.com Greater View Tour
lakevilletours.com Lakeville Tours
 
orkidstours.com Orkids Tours
+
greatstartour.com Great Star Tour
primabaytours.com Prima Bay Tours
+
harmonitours.com Harmoni Tours
rivervilletours.com Riverville Tours
+
impianatours.com Impiana Tours
  +
kasihsayangtravel.com Kasih Sayang Travel
sereniatours.com Serenia Tours
 
  +
klcompasstravel.com KL Compass Travel
tiarahillstours.com Tiara Hills Tours
 
verticatours.com Vertica Tours
+
lakevilletours.com Lakeville Tours
  +
onespiritualtour.com One Spiritual Tour
worldconnecttravelling-my.com World Connect Travelling
 
  +
orkidstours.com Orkids Tours
gorgeoustravelling-my.com Gorgeous Travelling
 
  +
primabaytours.com Prima Bay Tours
kuchingholiday-my.com Kuching Holiday
 
  +
reallifetourism.com Real Life Tourism
  +
richmoontour.com Rich Moon Tour
  +
rivervilletours.com Riverville Tours
  +
seaqueentravel.com Sea Queen Travel
 
sereniatours.com Serenia Tours
  +
thetrinitytour.com The Trinity Tour
 
tiarahillstours.com Tiara Hills Tours
  +
twistythrilltour.com Twisty Thrill Tour
  +
verticatours.com Vertica Tours
 
worldconnecttravelling-my.com World Connect Travelling
  +
worldtreetour.com World Tree Tour
  +
younglivingholiday.com Young Living Holiday
  +
   
 
===Fraud web sites hosted by ovh.net===
 
===Fraud web sites hosted by ovh.net===
Line 713: Line 726:
 
harmonitours.com
 
harmonitours.com
 
impianatours.com
 
impianatours.com
kuchingholiday-my.com
 
 
lakevilletours.com
 
lakevilletours.com
 
orkidstours.com
 
orkidstours.com

Revision as of 05:45, 19 June 2019

Malaysian Travel Scratch Card fraud

This fraud has been running for over 9 years. It uses over 200 web sites to lend credibility to their mail campaigns. The scratch cards that come with this fraud lists some sponsors. One of those is the Royal Selangor in Malaysia. In 2018 The Royal Selangor has responded with this information:

We've recently received multiple complains and confirmation regarding some
scratch and win card offered by multiple travel agency and an investigation
is currently ongoing at the moment regarding this.
Be assured that Royal Selangor is not involved in any scratch and win
activities nor in any way involved in any of these activities.
Kindly ignore all these scratch and win contests and DO NOT ever
provide any form of information to them.

This scratch card fraud was detected in Malaysia in 2015, as shown in a press report in The Star, Malaysia

From there it became more sophisticated, using hundreds of similar travel brochure web sites. Each site currently has a reference to a "16th Anniversary Promotion" (in previous years the 10th Anniversary or 12th Anniversary or 15th Anniversary). Once the fake web site is set up, the perpetrators print off thousands of glossy brochures based on the web site name, a sponsoring finance company name, two unique Malaysian phone contact numbers, and two scratch cards. One of the scratch cards wins no prize, but the other reveals that the holder has won a prize, typically second prize of US $200,000. The aim of this fraud is to appear credible. The brochure lists the web site URL, so a victim can load it to see if it exists. The brochure also has country-specific information.

For New Zealand:

This year we have invested USD 5 million on the establishment of a new
5 star hotel with a new adventure theme park in New Zealand.

For Australia:

This year we have invested USD 5 million on the establishment of a new
5 star hotel with a new adventure theme park in Australia.

This is a false claim.

They also reference in the brochure a sponsor e.g. Sabrina & Rachel Holdings for sponsoring the first, second and third prizes.

{Fake travel company name} would like to thanks our platinum sponsor
{fake finance company name} for sponsoring the first, second and third prizes.

This prize sponsor is apparently a Hong Kong investment company. However, their web site is hosted in Kuala Lumpur, and the domain name was registered on August 20 2018. This is just one of over 100 "...holdings" domain names and web sites with similar characteristics hosted on the same Malaysian IP addresses. For example

aikenadneyholdings.com
copenhagenholdings.com
kaylabenholdings.com
oliviaowenholdings.com
sabrinakyleholdings.com (Suspended by PDR)
sabrinarachelholdings.com (suspended by PDR)
sharonjacksonholdings.com (suspoended by NetEarth)
stevenmaryholdings.com (suspoended by NetEarth)
summersamuelholdings.com (Suspended by PDR)
susanromeoholdings.com (suspoended by NetEarth)
talishareaganholdings.com (Suspended by PDR)
Finance

Sample fake finance company logos

It is obvious that this prize sponsor is just another fake company, part of the fraud to try to lend credibility to this scam. The fake finance company sites are registered with the same registrars as the travel sites, namely PDR, NetEarth One, Web Werks, Online Nic, WEBCC. Each finance company has a custom designed logo to enhance the credibility.

Holidayguardiantourism

Holiday Guardian Tourism - Web Werks

Asianfocustourism

asianfocustourism.com fraud

Asianfocustourism

AsianFocusTourism web page - showing the 15th Anniversary fingerprint

Back.of

Back of fake scratch card showing false claims of sponsors

Goldenpacifictours

GoldenPacificTours.com June 2018

Bestmemoriestravel

BestMemoriesTravel.com August 2018 Seized


Fingerprints

How can you tell if a web site is a member of the Travel frauds?

BountyStar

Gorgeous Travelling fingerprint

BlingSea

Kuching Holiday fingerprint

The fake travel sites have some distinctive features that can be used to prove it is one used in this fraud.

  • "15th Anniversary Promotional Event"
  • "16th Anniversary Promotional Event"
  • "18th Anniversary Promotional Event"

This will be on the front page in a pic_001.jpg image.

  • "16TH ANNIVERSARY PROMOTIONAL EVENT"

with a link "Contact us for more information". This loads a URL with "/anniversary.html"

  • Menu tab contains "Promotions"

Selecting this tab produces a pull-down

16th Anniversary Promotional Event
General Information

1. These terms and conditions, together with the terms and
conditions  that are specific to any Competition (as defined
below) (the 'Competition Terms')  are known as the 'Rules'.
Words used in the Competition Terms shall have the same
meaning when used here. In the event of any conflict between
the Competition Terms and the Standard Terms, the
Competition Terms shall prevail.

etc

So it is a sophisticated operation

  1. fake travel company sites
  2. fake sponsor sites
  3. customized brochures
  4. fake scratch cards
  5. help desk that responds to the phone call and negotiates the advance fee
  6. help desk to handle email from the victims for each travel domain

Summary of live sites per registrar

Registrars sponsoring the domain names are listed below. The worst performer is Canadian firm TUCOWS, followed by Malaysian firm WEBCC headquartered in Kuala Lumpur itself.

FRAUDS REGISTRAR NAME SUSPENDED LIVE
8 CNOBIN INFORMATION TECHNOLOGY LIMITED 8 0
38 NetEarth One Inc. d/b/a NetEarth (UK) 38 0
19 OnlineNIC, Inc. (China) 19 0
87 Public Domain Registry PDR LTD 87 0
22 Realtime Register 22 0
18 Shinjiru Technology Sdn Bhd (Malaysia 18 0
35 Tucows Domains Inc 6 29
96 Web Commerce Communications (WebNIC Kuala Lumpur) 96 0
12 Web Werks India Pvt. Ltd (ZenRegistry.com) 12 0

Registrars with domain names

TUCOWS has the most live fraud sites of all registrars, followed by Malaysia's own WEBCC. All other registrars hve acted responsibly and suspended the obviously illegal domains registered with their service. On June 19 2019 WebCC suspended the last of their domains, leaving TUCOWS as the only registrar refusing to terminate their service contract. Dazzle.pie

Tucows Inc.

These domains used for obvious fraud are sponsored by Canadian registrar TUCOWS INC.

Awaiting action

bountystartour.com
dcelestialtravelling.com
deroyaletours.com
dorsetttours.com
fabuloustravelling.com
genesistravelling.com
gorgeoustourism.com
greaterviewtour.com
greatstartour.com
harmonitours.com
impianatours.com
kasihsayangtravel.com
klcompasstravel.com
lakevilletours.com
onespiritualtour.com
orkidstours.com
primabaytours.com
reallifetourism.com
richmoontour.com
rivervilletours.com
seaqueentravel.com
sereniatours.com
thetrinitytour.com
tiarahillstours.com
twistythrilltour.com
verticatours.com
worldconnecttravelling-my.com
worldtreetour.com
younglivingholiday.com

Suspended

These were suspend on request by the ISP, not by TUCOWS

blingseatravel.com
dreamuniontravel.com
grandeurtravelling.com
greatphantomholiday.com
mascreationtravelling.com
topplanningtravel.com
wonderlandworldtravel.com

WebNic or WEBCC

This is a list of domains sponsored by Malaysian registrar WebNIC in Kuala Lumpur, that were live in May 2019.

Suspended

centarasholiday-my.com (suspended by registrar June 2019)
gloriousskytour.com (suspended by registrar June 2019)
kuchingholiday-my.com (suspended by registrar June 2019)

Suspended by ISP

amazingflytourism-my.com
aquariatourism-my.com
bestlifeworldtravel-my.com
geoventuretravelandtours-my.com
gorgeoustravelling-my.com
greatphantomholiday-my.com
kochitravelling-my.com
littleindiatours.com
spectrumtravelling-my.com
summerlovertravel.com
thecreativetravel-my.com
wonderlandworldtravel-my.com

WEBCC Domains seized

These domains were seized by the Malaysian reseller, Net Onboard Sdn Bhd alltimetravelling.com ampangparkholiday.com asiantigertour.com bayuputeritravelling.com bestlifeworldtravel.com bestmemoriestravel.com beyondyourdreamstour.com bintangstartravelling.com bluemarinetravelling.com blueskytravelling.com dangabayholiday.com dreamcasterstour.com flaminggloryholiday.com flyingsifutourism.com foxyladyvacation.com fraserparkholiday.com groveholiday.com hybridsholiday.com jungleprincevacation.com loverboyholiday.com mistikatourism.com moonshinevacation.com myroyaleholiday.com passionqueentravel.com primetouchtravel.com thecreativetravel.com threesixfiveholiday.com

These expired after one year homeclubvacation.com kluniversaltravel.com seasonsrockvacation.com starlighttravelling.com theinsighttour.com clubfourvacation.com fareasttravelling.com klflytravelling.com landmarktravelling.com twingalaxyholiday.com dreamishtravelling.com asianfocustourism.com goldenpacifictours.com goodmemoryholiday-my.com greenseatourism-my.com ivorystarvacation-my.com jungleprincevacation-my.com redlotustravelling-my.com royalgoldtour-my.com setiaskyholiday-my.com stardreamtourism-my.com sunsuriatravelling-my.com theheritagetravel-my.com topasiantours-my.com eternalmastourism.com freedomsflamesvacation.com greycloudtourism.com lakeviewtourism.com littlemiracleholiday.com magiccarpettourism.com airflytravelling.com fantastikatravelling.com newbalancetour.com palassupremeholiday.com pristinetravelling.com sevenwondersholiday.com

Realtime Register B.V.

ALL SUSPENDED BY REALTIME REGISTER

Suspended by Realtime

The registrar suspended these domains in May 2019

alltimetravelling-my.com
desasritravel.com
domaintravelling.com
gemilangcitytours-my.com
newwingholiday.com
oneparadisetour.com
superlimovacation.com
tripventuretour.com

Suspended in April

blueparadisevacation-my.com goldentropicaltravel-my.com meridintravel.com pioneerandspiritholiday-my.com tanjunglangittravel-my.com worldlighttravelling.com blazingholiday-my.com ivorystarvacation.com prioritytravelling-my.com theheroictravel.com triplemoontour-my.com visitworldtourism-my.com

NetEarth One

ALL SUSPENDED

Suspended by NetEarth

droyaltravel.com precisionholiday.com calisatravelandtour.com croatianstyletour.com flyhightravelling.com gemilangcitytours.com grandeagletourism.com greenseatourism.com hotspottourism.com hotspringtravelling.com jesseltonplaceholiday.com mypacifictravel.com passionaterosetravel.com setiaskyholiday.com theunforgettabletravel.com timeoutkltour.com topasiantours.com travelmastertourism.com tropikaislandtravel.com trueartsvacation.com bluehavenholiday.com castellholiday.com jayaselatantravel.com

CNOBIN

ALL SUSPENDED BY CNOBIN

Suspended by CNOBIN

beyondyourdreamstour-my.com
blueskytravelling-my.com
mistymoontourism.com 
oceanspirittour.com 
miharjatravelling.com

OnlineNIC, Inc.

ALL SUSPENDED BY ONLINENIC

Response April 15 2019:

OnlineNIC value the safety and security of legitimate Internet users and will cooperate fully in taking whatever action is necessary to stop the illegal act.

We have asked the domain name service Provider... mesrahosting.net ... to review the information and take appropriate action to remove any illegal content as soon as possible. If the problem still persists after two working days, you may contact us for further help.

Suspended OnlineNIC domains

ampangparkholiday-my.com bluemarinetravelling-my.com centarasholiday.com fairylandtravelling.com flyingsifutourism-my.com jayaselatantravel-my.com kuchingholiday.com nusentralholiday-my.com thewaterfronttourism.com verticaholiday.com botanictravel-my.com northfaceholiday.com theleasuretour.com thewaterfronttourism.com verticaholiday.com oceanpacifictour-my.com bandarbarattour-my.com tropicalworldvacation.com amazingtotour.com globalseekertourism.com greenvalletvacation.com

Shinjiru Technology Sdn Bhd

Shinjuru is a Malaysian registrar located in Kuala Lumpur, abuse[at]ilovewww[dot]com

ALL SUSPENDED BY SHINJURU

Suspended Shinjuru domains

greatakasiaholiday.com suteramastravel.com xperttourism.com goldenglowholiday.com mysticalmagictour.com skyhorizontravel.com ampanghilltravelling.com asiatictour.com ecocityholiday.com flyingbeautytour.com sabahantravel.com worldtravelerstour.com

Public Domain Registry

Registrar PDR had 82 sites registered, and immediately suspended all of the 15th and 16th Anniversary Malaysian Travel frauds.

ALL SUSPENDED BY PDR

Suspended PDR domains

flightpodtravel.com (suspended May 2019
brightstarholiday.com (suspended 30 April 2019)
kochitravelling.com (suspended 30 April 2019)
royalasiantourism.com (suspended 30 April 2019)
spectrumtravelling.com (suspended 30 April 2019)

(Compressed list) neweratourism.com tanjungalamtour.com airshinetravelling.com airvalenciatravel.com allintravelling.com amazingflytourism.com anmourtravel.com aquariatourism.com asianfantasyvacation.com asiangoldentour.com blazingholiday.com blueparadisevacation.com botanictravel.com bukithijautravel.com butterflytravelling.com changkattravel.com comfortlineholiday.com crownpalacetravel.com desariangtourism.com ezasiatourism.com faberparktravel.com feathercanyonholiday.com firstnighttour.com geoventuretravelandtours.com glamourtourism.com goldenexplorervacation.com goldentropicaltravel.com gorgeoustravelling.com gravitycloudtour.com highrollerholiday.com historicstour.com hotspottravelling.com iskandarholiday.com jagongmastravel.com justvictoryholiday.com klinternationaltravel.com littlebitvacation.com littlecreamertourism.com lovelyprincesstour.com maisonplacetourism.com marvelloustourism.com moonlightkissholiday.com naturegreentravel.com northernmiracletravel.com northwingtravel.com nusentralholiday.com oceanpacifictour.com palaceindahtravel.com paradisemomentholiday.com prioritytravelling.com razakholiday.com redlotustravelling.com redroseholiday.com redspringtravel.com reedsholiday.com rionaholiday.com rivervalleyholiday.com royalmutiaratravelling.com safariworldtravelling.com sassyvelvettour.com seasonstravelling.com shamelintravelling.com skyrockholiday.com splendidtourism.com stardreamtourism.com sunsuriatravelling.com tanjunglangittravel.com theheritagetravel.com theonlyvacation.com theroofvacation.com travelpassionvacation.com trinityworldtravel.com tropicalgatewayholiday.com tropicanatour.com trueleasureholidays.com urbanheritagetour.com vertigovacation.com visitworldtourism.com vivastarholiday.com wonderlandrosevacation.com

Web Werks India

ALL SUSPENDED BY WEB WERKS

Suspended Web Werks domains

shuttletourism.com
rafflesiaholiday.com
holidayguardiantourism.com
niveaholiday.com
purplemoontravel.com
utopiatourism.com
lawastraveling.com
tawauholiday.com
casatropikatravel.com
bluegalaxytravel.com
pioneerandspiritholiday.com
royalgoldtour.com

Evidence of fraud

The Malaysian Scratch Card advance fee fraud is extensively documented. Among the many advisories from Australian, New Zealand and even Malaysian government authorities:

IP Addresses

By June 2018 all sites were located on Cloudflare addresses in the range 104.18.36.73 to 104.31.93.202. Why Cloudflare? They provide a reverse proxy, pass-through security service. They do not provide a hosting service. The actual IP address is therefore obscured, allowing the fraudster to hide the hosting site. Cloudflare is being used as a barrier to hide behind.

With few exceptions, the IP addresses where these fraud sites had been hosted, were located in Malaysia itself.

Fake finance company sponsors

202.75.32.200
202.71.110.21
112.137.167.164
112.137.162.105

Fake travel companies

Not on CloudFlare:

91.121.164.202
91.121.232.242
202.75.45.59
202.71.109.233
202.75.41.117
202.75.55.212

Malaysia:

103.6.198.31
103.6.244.6
103.8.25.90
103.27.74.211

CloudFlare:

Compressed list

104.18.36.73 104.18.37.73 104.18.38.104 104.18.39.104 104.18.44.208 104.18.45.208 104.18.52.134 104.18.53.134 104.18.56.7 104.18.57.7 104.18.60.88 104.18.61.88 104.24.100.151 104.24.101.151 104.24.112.88 104.24.113.88 104.27.128.56 104.27.129.56 104.27.134.93 104.27.135.93 104.27.162.34 104.27.163.34 104.27.168.161 104.27.169.161 104.27.178.217 104.27.178.97 104.27.179.217 104.27.179.97 104.27.182.55 104.27.183.55 104.27.184.35 104.27.185.35 104.27.188.141 104.27.189.141 104.28.20.98 104.28.21.98 104.28.22.160 104.28.23.160 104.28.4.73 104.28.4.89 104.28.5.73 104.28.5.89 104.28.6.62 104.28.7.62 104.31.70.160 104.31.71.160 104.31.82.121 104.31.83.121 104.31.84.162 104.31.85.162 104.31.88.128 104.31.88.152 104.31.89.128 104.31.89.152 104.31.90.13 104.31.91.13 104.31.92.202 104.31.93.202

Registrars and fake finance company sponsors

CNOBIN

annabellebentleyholdings.com (Suspended)
mathewellaholdings.com (Suspended)

NetEarth One Inc. d/b/a NetEarth

anthonymasonholdings.com (suspended)
bryantedwardsholdings.com (suspended by registrar)
colleyvivianholdings.com  (suspended by registrar)
ericjohnnyholdings.com  (suspended by registrar)
gracealanholdings.com  (suspended by registrar)
loganelijahholdings.com  (suspended by registrar)
noahemmaholdings.com (suspended by registrar)
sharonjacksonholdings.com (suspended by registrar)
stevenmaryholdings.com  (suspended by registrar)
susanromeoholdings.com  (suspended by registrar)
zoeloganholdings.com

OnlineNIC, Inc.

audreyjordanholdings.com 
dorothycharlotteholdings.com (suspended)
noelloganholdings.com  (suspended)
samanthanickholdings.com (suspended)
aikenadneyholdings.com
copenhagenholdings.com
kaylabenholdings.com
oliviaowenholdings.com

PDR LTD.

andreaaustinholdings.com (suspended by registrar) 
adammorrisholdings.com (suspended by registrar) 
alyssachrisholdings.com (suspended by registrar) 
amandajimmyholdings.com (suspended by registrar) 
ambergeorgeholdings.com (suspended by registrar) 
calvinzoeholdings.com (suspended by registrar) 
carllindseyholdings.com (suspended by registrar) 
charlotteavaholdings.com (suspended by registrar) 
codyclaytonholdings.com (suspended by registrar) 
codygavinholdings.com (suspended by registrar) 
colemanwhiteholdings.com (suspended by registrar) 
davisrossholdings.com (suspended by registrar) 
dylansarahholdings.com (suspended by registrar) 
emilynathanholdings.com (suspended by registrar) 
emmaseanholdings.com (suspended by registrar) 
francisjasperholdings.com (suspended by registrar)
harpergavinholdings.com (suspended by registrar) 
jackjackyholdings.com (suspended by registrar) 
jackvictoriaholdings.com (suspended by registrar) 
jeffmorganholdings.com (suspended by registrar) 
kelvinjenniferholdings.com (suspended by registrar)
kylejoshuaholdings.com (suspended by registrar) 
lauramatthewholdings.com (suspended by registrar) 
laurenjoshholdings.com (suspended by registrar) 
liamlevisholdings.com (suspended by registrar) 
lilycarterholdings.com (suspended by registrar) 
lincolnkayleeholdings.com (suspended by registrar)
madisonvincentholdings.com (suspended by registrar)
peterjackholdings.com (suspended by registrar) 
rachelgabrielholdings.com (suspended by registrar)
ralphjoshuaholdings.com (suspended by registrar) 
randygabrielholdings.com (suspended by registrar) 
robinelaineholdings.com (suspended by registrar) 
ryanjulianholdings.com (suspended by registrar) 
sabrinarachelholdings.com (suspended by registrar)
summersamuelholdings.com (suspended by registrar) 
talishareaganholdings.com (suspended by registrar)
tracywilsonholdings.com (suspended by registrar) 
victoriatylerholdings.com (suspended by registrar)

Shinjuru

annabellebentleyholdings.com (Expired)
mathewellaholdings.com (Suspended by registrar)

TUCOWS INC

floraannaholdings.com (not loading)

Web Commerce Communications Limited dba WebNic.cc

addisoncameronholdings.com (Expired)
cadenliamholdings.com 
waltonkellyholdings.com (Expired)
jacobrayholdings.com  (Expired)
marleyjarrellholdings.com
matthewdavidholdings.com (Expired)
noralucasholdings.com (Expired)
rileymiaholdings.com (Expired)
talishareaganholdings-hk.com

Web Werks India Pvt. Ltd d/b/a ZenRegistry.com

amycharlesholdings.com  (Expired)
ashleybrandonholdings.com
isaacleviholdings.com 
jessicawilliamholdings.com (Expired)
olivialucasholdings.com 
sabrinakyleholdings.com
dianawilmaholdings.com
markmarvinholdings.com
mayaeliholdings.com
waynelouisholdings.com

Current list, July 2019

* Domain Name *      	* Site Name *
bountystartour.com      Bounty Star Tour
dcelestialtravelling.com        D Celestial Travelling
deroyaletours.com       De Royale Tours
dorsetttours.com        Dorsett Tours
fabuloustravelling.com  Fabulous Travelling
genesistravelling.com   Genesis Travelling
gorgeoustourism.com     Gorgeous Tourism
greaterviewtour.com     Greater View Tour
greatstartour.com       Great Star Tour
harmonitours.com        Harmoni Tours
impianatours.com        Impiana Tours
kasihsayangtravel.com   Kasih Sayang Travel
klcompasstravel.com     KL Compass Travel
lakevilletours.com      Lakeville Tours
onespiritualtour.com    One Spiritual Tour
orkidstours.com Orkids Tours
primabaytours.com       Prima Bay Tours
reallifetourism.com     Real Life Tourism
richmoontour.com        Rich Moon Tour
rivervilletours.com     Riverville Tours
seaqueentravel.com      Sea Queen Travel
sereniatours.com        Serenia Tours
thetrinitytour.com      The Trinity Tour
tiarahillstours.com     Tiara Hills Tours
twistythrilltour.com    Twisty Thrill Tour
verticatours.com        Vertica Tours
worldconnecttravelling-my.com   World Connect Travelling
worldtreetour.com       World Tree Tour
younglivingholiday.com  Young Living Holiday


Fraud web sites hosted by ovh.net

Although the hosting address is masked by Cloudflare, they actually reside in the address space of OVH.

deroyaletours.com
dorsetttours.com
harmonitours.com
impianatours.com
lakevilletours.com
orkidstours.com
primabaytours.com
rivervilletours.com
sereniatours.com
tiarahillstours.com
verticatours.com
worldconnecttravelling-my.com

Fraud web sites hosted by PULSANT UK.

Although the hosting address is masked by Cloudflare, they actually reside in the address space of Pulsant.

dcelestialtravelling.com
fabuloustravelling.com
kasihsayangtravel.com
klcompasstravel.com
reallifetourism.com
richmoontour.com
seaqueentravel.com
thetrinitytour.com
worldtreetour.com

Where to report this fraud

Tucows compliance@opensrs.org legal@tucows.com
WebNic / WEBCC support@webnic.cc
OVH ISP https://www.ovh.com/world/abuse/
PULSANT ISP abuse@gbservers.co.uk support@pulsant.com
Realtime Register support@realtimeregister.com
PDR abuse@publicdomainregistry.com
Web Werks compliance@zenregistry.com
CNOBIN support@cnobin.com


Sources for this article

  • Fraud alerts from Australian Government consumer protection
  • Fraud alerts from New Zealand Government consumer protection
  • Fraud alert from Malaysian consumer protection, Gerakan Public Service and Complaints Bureau