Malaysian Travel fraud

# Malaysian Travel Scratch Card fraud

**This fraud has been running for over 9 years. It uses over 400 web sites to lend credibility to their mail campaigns.**

**It runs an "Advanced Fee Fraud" pretending the victim has won a large 2nd prize of $220,000, then asking the victim to pay a tax of 1.5% in advance.**

**Once the victim pays $3,300 the scam is complete, and the victim will never see the prize money.**

The Royal Selangor Hotel in Malaysia has revealed that this is a fraud.

The scratch cards that come with this fraud lists some sponsors. One of those is the Royal Selangor in Malaysia.
In 2018 The Royal Selangor has responded with this information:

```
We've recently received multiple complains and confirmation regarding some
scratch and win card offered by multiple travel agency and an investigation
is currently ongoing at the moment regarding this.

```

```
Be assured that Royal Selangor is not involved in any scratch and win
activities nor in any way involved in any of these activities.
Kindly ignore all these scratch and win contests and DO NOT ever
provide any form of information to them.

```

This scratch card fraud was detected on the street in Malaysia in 2015, as shown in a press report in The Star, Malaysia

From there it became more sophisticated, using hundreds of similar travel brochure web sites. Each site currently has a reference to a "16th Anniversary Promotion" (in previous years the 10th Anniversary or 12th Anniversary or 15th Anniversary). Once the fake web site is set up, the perpetrators print off thousands of glossy brochures based on the web site name, a fake sponsoring finance company name, two unique Malaysian phone contact numbers, and two scratch cards. One of the scratch cards wins no prize, but the other reveals that the holder has won a prize, typically second prize of US $220,000. The aim of this fraud is to appear credible. The brochure lists the web site URL, so a victim can load it to see if it exists. Also there will be a web site for the fake "platinum" sponsor.

The brochure also has country-specific information.

For *New Zealand*:

```
This year we have invested USD 5 million on the establishment of a new
5 star hotel with a new adventure theme park in *New Zealand*.

```

For *Australia*:

```
This year we have invested USD 5 million on the establishment of a new
5 star hotel with a new adventure theme park in *Australia*.

```

This is a false claim.

They also reference in the brochure a sponsor e.g. *Sabrina & Rachel Holdings* for sponsoring the first, second and third prizes.

```
{*Fake travel company name*} would like to thanks our platinum sponsor
{*fake finance company name*} for sponsoring the first, second and third prizes.

```

This prize sponsor is supposedly a Hong Kong investment company. However, their web site is hosted in Kuala Lumpur, and the domain name was registered on August 20 2018. This is just one of over 100 "...holdings" domain names and web sites with similar characteristics hosted on the same Malaysian IP addresses. For example

```
aikenadneyholdings.com (suspended by OnlineNIC)
copenhagenholdings.com (suspended by OnlineNIC)
kaylabenholdings.com (suspended by OnlineNIC)
oliviaowenholdings.com (suspended by OnlineNIC)
sabrinakyleholdings.com (Suspended by PDR)
sabrinarachelholdings.com (suspended by PDR)
sharonjacksonholdings.com (suspoended by NetEarth)
stevenmaryholdings.com (suspoended by NetEarth)
summersamuelholdings.com (Suspended by PDR)
susanromeoholdings.com (suspoended by NetEarth)
talishareaganholdings.com (Suspended by PDR)

```

It is obvious that this prize sponsor is just another fake company, part of the fraud to try to lend credibility to this scam.
The fake finance company sites were registered with the same registrars as the travel sites, namely PDR, NetEarth One, Web Werks, Online Nic, WEBCC. Each finance company has a custom designed logo to enhance the credibility.

# Fingerprints

*Historical information*
How can you tell if a web site is a member of the Travel frauds?

Historical information:

The fake travel sites used to have some distinctive features that could be used to prove it is one used in this fraud.

* "15th Anniversary Promotional Event"
* "16th Anniversary Promotional Event"
* "18th Anniversary Promotional Event"

This was on the front page in a pic\_001.jpg image.

* "16TH ANNIVERSARY PROMOTIONAL EVENT"

with a link "Contact us for more information".
This loaded a URL with "/anniversary.html"

* Menu tab contained "Promotions"

Selecting this tab used to produce a pull-down

```
16th Anniversary Promotional Event
General Information

1. These terms and conditions, together with the terms and
conditions  that are specific to any Competition (as defined
below) (the 'Competition Terms')  are known as the 'Rules'.
Words used in the Competition Terms shall have the same
meaning when used here. In the event of any conflict between
the Competition Terms and the Standard Terms, the
Competition Terms shall prevail.

```

etc

Upon discovering that their finger-print had become too well known, they removed the incriminating evidence.

Nevertheless they are still running the same sophisticated operation

1. fake travel company sites
2. fake sponsor sites
3. customized brochures
4. fake scratch cards
5. help desk that responds to the phone call and negotiates the advance fee
6. help desk to handle email from the victims for each travel domain
7. fake company address supposedly located in a floor space in a large multi-story Malaysian building

# Summary of live sites per registrar

Registrars sponsoring the domain names are listed below. The worst performer is Canadian firm TUCOWS (a safe haven for crime), followed by Malaysian firm WEBCC headquartered in Kuala Lumpur itself.

# Registrars with domain names

Malaysia's own WEBCC has the most live fraud sites of all registrars, followed by Canada's TUCOWS Inc. All other registrars have acted responsibly, and quickly suspended the obviously illegal domains registered with their service. TUCOWS is the *only* registrar refusing to terminate their service contract with these cyber-criminals.

## WebNic or WEBCC

This is a list of domains sponsored by Malaysian registrar **WebNIC** in Kuala Lumpur, that were live in December 2019.

### Suspended

Suspended by the registrar in July - December 2019

```
asiantravellegacy.com
smartravelholiday.com
astanaviewvacation.com
elegancetravelling.com
kingshillholiday.com
northernhilltour.com
seanoramaholiday.com
alamrecreationtour.com
ariamastravels.com
casariaholiday.com
crazyridetour.com
emeraldwesttourism.com
esplanadeholiday.com
goldencrownholiday.com
greenwoodsholiday.com
idamantravelling.com
kepongvillagetour.com
montforttravelling.com
onepaviliontravel.com
palmspringtravelling.com
putramastours.com
redmapleholiday.com
redsunshinetour.com
springgoldvacations.com
armaneeholiday.com
marinoxskytravelling.com
royalmasvacations.com
theastroholiday.com
georgialeolimited.com
novaacetourism-my.com
pronteratravelling
novaacetourism-my.com
kochitra.com
littleindiatr.com
travellegacytours.com
atlanticworldholiday.com
fanaltravel.com
greenhaventravel.com
kingswayvac.com
massapphiretravels.com
masterpiecevacation.com
nexustravelling.com
perdanapealingvac.com
rosevalleytours.com
thetrinitytr.com
dcelestialtra.com
tophilltourism.com
domaintravelling-my.com
miracletimetours.com
newdreamtourism.com
paramounthol.com
piscesstarvacation.com
rainbowcleartour.com
sakuratra.com
skyridgetravel.com
starhilltravel.com

```

Suspended by registrar June 2019

```
centarasholiday-my.com
gloriousskytour.com
kuchingholiday-my.com
superbsevenholiday.com

```

### Suspended by ISP

```
grandestvacation.com
sentosatourism.com
starshinetour.com
amazingflytourism-my.com
aquariatourism-my.com
bestlifeworldtravel-my.com
blingseatra.com
flightpodtra.com
geoventuretravelandtours-my.com
gorgeoustravelling-my.com
greatphantomholiday-my.com
kochitravelling-my.com
littleindiatours.com
newdreamtourism.com
shuttletourism-my.com
spectrumtravelling-my.com
summerlovertravel.com
thecreativetravel-my.com
wonderlandworldtravel-my.com
worldtreetr.com

```

### WEBCC Domains seized

These domains were seized by the Malaysian reseller, **Net Onboard Sdn Bhd**

alltimetravelling.com
ampangparkholiday.com
asiantigertour.com
bayuputeritravelling.com
bestlifeworldtravel.com
bestmemoriestravel.com
beyondyourdreamstour.com
bintangstartravelling.com
bluemarinetravelling.com
blueskytravelling.com
dangabayholiday.com
dreamcasterstour.com
flaminggloryholiday.com
flyingsifutourism.com
foxyladyvacation.com
fraserparkholiday.com
groveholiday.com
hybridsholiday.com
jungleprincevacation.com
loverboyholiday.com
mistikatourism.com
moonshinevacation.com
myroyaleholiday.com novaacetourism.com
passionqueentravel.com
primetouchtravel.com
thecreativetravel.com
threesixfiveholiday.com
trulylovetr.com

These expired after one year
homeclubvacation.com
kluniversaltravel.com
seasonsrockvacation.com
starlighttravelling.com
theinsighttour.com
clubfourvacation.com
fareasttravelling.com
klflytravelling.com
landmarktravelling.com
twingalaxyholiday.com
dreamishtravelling.com
asianfocustourism.com
goldenpacifictours.com
goodmemoryholiday-my.com
greenseatourism-my.com
ivorystarvacation-my.com
jungleprincevacation-my.com
redlotustravelling-my.com
royalgoldtour-my.com
setiaskyholiday-my.com
stardreamtourism-my.com
sunsuriatravelling-my.com
theheritagetravel-my.com
topasiantours-my.com
eternalmastourism.com
freedomsflamesvacation.com
greycloudtourism.com
lakeviewtourism.com
littlemiracleholiday.com
magiccarpettourism.com
airflytravelling.com
fantastikatravelling.com
newbalancetour.com
palassupremeholiday.com
pristinetravelling.com
sevenwondersholiday.com

## Tucows Inc.

These domains used for obvious fraud are sponsored by Canadian registrar **TUCOWS INC.** This registrar is rapidly becoming seen as a safe haven for these Malaysian criminals. Tucows is headed up by Elliot Noss, President and Chief Executive Officer.

Screen captures of the fraud sites can be seen at TUCOWS\_frauds and TUCOWS\_frauds\_2

### Awaiting action

```
**lakevilletours.com**

```

### Suspended by ISP

These were suspend on request, but by the ISP, not by TUCOWS

```
primabaytours.com
klcompasstravel.com
seaqueentravel.com
rivervilletours.com
bountystartour.com
deroyaletours.com
dorsetttours.com
gorgeoustourism.com
greatstartour.com
harmonitours.com
impianatours.com
kasihsayangtravel.com
mycintatourism.com
orkidstours.com
richmoontour.com
sereniatours.com
tiarahillstours.com
verticatours.com
worldconnecttravelling-my.com
blingseatravel.com
cherryblossomvacation.com
dcelestialtravelling.com
dreamuniontravel.com
fabuloustravelling.com
genesistravelling.com
grandeurtravelling.com
greaterviewtour.com
greatmastravelling.com
greatphantomholiday.com
mascreationtravelling.com
onespiritualtour.com
perdanapealingvacation.com
reallifetourism.com
thetrinitytour.com
topplanningtravel.com
twistythrilltour.com
wonderlandworldtravel.com
worldtreetour.com
younglivingholiday.com

```

### Suspended by Realtime

The registrar suspended these domains in May 2019

```
alltimetravelling-my.com
desasritravel.com
domaintravelling.com
gemilangcitytours-my.com
newwingholiday.com
oneparadisetour.com
superlimovacation.com
tripventuretour.com

```

Suspended in April

blueparadisevacation-my.com
goldentropicaltravel-my.com
meridintravel.com
pioneerandspiritholiday-my.com
tanjunglangittravel-my.com
worldlighttravelling.com
blazingholiday-my.com
ivorystarvacation.com
prioritytravelling-my.com
theheroictravel.com
triplemoontour-my.com
visitworldtourism-my.com

### Suspended by NetEarth

droyaltravel.com
precisionholiday.com
calisatravelandtour.com
croatianstyletour.com
flyhightravelling.com
gemilangcitytours.com
grandeagletourism.com
greenseatourism.com
hotspottourism.com
hotspringtravelling.com
jesseltonplaceholiday.com
mypacifictravel.com
passionaterosetravel.com
setiaskyholiday.com
theunforgettabletravel.com
timeoutkltour.com
topasiantours.com
travelmastertourism.com
tropikaislandtravel.com
trueartsvacation.com
bluehavenholiday.com
castellholiday.com
jayaselatantravel.com

### Suspended by CNOBIN

```
beyondyourdreamstour-my.com
blueskytravelling-my.com
mistymoontourism.com
oceanspirittour.com
miharjatravelling.com

```

## OnlineNIC, Inc.

### Awaiting action

ALL SUSPENDED

Response April 15 2019:

*OnlineNIC value the safety and security of legitimate Internet users and will cooperate fully in taking whatever action is necessary to stop the illegal act.*

*We have asked the domain name service Provider... mesrahosting.net ... to review the information and take appropriate action to remove any illegal content as soon as possible. If the problem still persists after two working days, you may contact us for further help.*

### Suspended OnlineNIC domains

```
altistourism.com
amazingtotour.com
ampangparkholiday-my.com
bandarbarattour-my.com
bluemarinetravelling-my.com
botanictravel-my.com
centarasholiday.com
fairylandtravelling.com
flyingsifutourism-my.com
globalseekertourism.com
greenvalletvacation.com
jayaselatantravel-my.com
kuchingholiday.com
northfaceholiday.com
nusentralholiday-my.com
oceanpacifictour-my.com
theleasuretour.com
thewaterfronttourism.com
tropicalworldvacation.com
verticaholiday.com

```

## Shinjiru Technology Sdn Bhd

Shinjuru is a Malaysian registrar located in Kuala Lumpur, abuse[at]ilovewww[dot]com

ALL SUSPENDED BY SHINJURU

### Suspended Shinjuru domains

greatakasiaholiday.com
suteramastravel.com
xperttourism.com
goldenglowholiday.com
mysticalmagictour.com
skyhorizontravel.com
ampanghilltravelling.com
asiatictour.com
ecocityholiday.com
flyingbeautytour.com
sabahantravel.com
worldtravelerstour.com

## Public Domain Registry

Registrar PDR had 82 sites registered, and immediately suspended all of the 15th and 16th Anniversary Malaysian Travel frauds.

ALL SUSPENDED

### Suspended PDR domains

```
journalmnk.info (Awesome Fly Tour)
kingswayvacation.com (suspended July 2019)
jayaninevacation.com (suspended 6 July 2019
flightpodtravel.com (suspended May 2019)
brightstarholiday.com (suspended 30 April 2019)
kochitravelling.com (suspended 30 April 2019)
royalasiantourism.com (suspended 30 April 2019)
spectrumtravelling.com (suspended 30 April 2019)

```

(Compressed list)
neweratourism.com
tanjungalamtour.com
airshinetravelling.com
airvalenciatravel.com
allintravelling.com
amazingflytourism.com
anmourtravel.com
aquariatourism.com
asianfantasyvacation.com
asiangoldentour.com
blazingholiday.com
blueparadisevacation.com
botanictravel.com
bukithijautravel.com
butterflytravelling.com
changkattravel.com
comfortlineholiday.com
crownpalacetravel.com
desariangtourism.com
ezasiatourism.com
faberparktravel.com
feathercanyonholiday.com
firstnighttour.com
geoventuretravelandtours.com
glamourtourism.com
goldenexplorervacation.com
goldentropicaltravel.com
gorgeoustravelling.com
gravitycloudtour.com
highrollerholiday.com
historicstour.com
hotspottravelling.com
iskandarholiday.com
jagongmastravel.com
justvictoryholiday.com
klinternationaltravel.com
littlebitvacation.com
littlecreamertourism.com
lovelyprincesstour.com
maisonplacetourism.com
marvelloustourism.com
moonlightkissholiday.com
naturegreentravel.com
northernmiracletravel.com
northwingtravel.com
nusentralholiday.com
oceanpacifictour.com
palaceindahtravel.com
paradisemomentholiday.com
prioritytravelling.com
razakholiday.com
redlotustravelling.com
redroseholiday.com
redspringtravel.com
reedsholiday.com
rionaholiday.com
rivervalleyholiday.com
royalmutiaratravelling.com
safariworldtravelling.com
sassyvelvettour.com
seasonstravelling.com
shamelintravelling.com
skyrockholiday.com
splendidtourism.com
stardreamtourism.com
sunsuriatravelling.com
tanjunglangittravel.com
theheritagetravel.com
theonlyvacation.com
theroofvacation.com
travelpassionvacation.com
trinityworldtravel.com
tropicalgatewayholiday.com
tropicanatour.com
trueleasureholidays.com
urbanheritagetour.com
vertigovacation.com
visitworldtourism.com
vivastarholiday.com
wonderlandrosevacation.com

### Suspended Web Werks domains

```
damansaravacation.com
shuttletourism.com
rafflesiaholiday.com
holidayguardiantourism.com
niveaholiday.com
purplemoontravel.com
utopiatourism.com
lawastraveling.com
tawauholiday.com
casatropikatravel.com
bluegalaxytravel.com
pioneerandspiritholiday.com
royalgoldtour.com

```

# Evidence of fraud

The Malaysian Scratch Card advance fee fraud is extensively documented. Among the many advisories from Australian, New Zealand and even Malaysian government authorities:

* November 2019 NZ Commission for Financial Capability https://www.cffc.org.nz/news-and-media/news/warning-over-malaysian-travel-scam/
* August 2018 Kiwis targeted again, News Report https://www.stuff.co.nz/travel/travel-troubles/106616823/kiwis-targeted-again-by-malaysian-travel-scratchie-scam
* June 2018 Otago Daily Times featuring goldenpacifictours.com sponsored by WEBCC in Malaysia
* March 2018 NZ Herald - featuring eternalmastourism.com from WEBCC
* August 2018 Stuff News - bestmemoriestravel.com from WEBCC
* November 2017 Stuff News https://stuff.co.nz/business/99313885/kiwis-warned-to-steer-clear-of-malaysian-travel-scratchie-scam
* November 2015 AU Northern Star https://www.northernstar.com.au/news/scam-watch-dodgy-scratch-tickets-promise-thousands/2840121/
* October 2017 ABC TV Network https://abc.net.au/news/2017-10-05/scratchie-scams-robbing-canberrans-of-thousands-of-dollars/9011248
* November 2015 NZ Govt Netsafe https://netsafe.org.nz/have-i-won-165000-malaysian-travel-scratch-and-win-cards-explained/
* AU Govt warning https://commerce.wa.gov.au/announcements/wa-residents-warned-about-travel-scratchie-scam-nova-victory-travel
* AU Govt scam warning https://scamnet.wa.gov.au/scamnet/Scam\_types-Unexpected\_winnings-Travel\_prize\_scams-Sentosa\_Traveling\_Group\_Enjoi\_Vacation\_\_Phantasi\_Holiday\_\_Lavender\_Holiday\_.htm
* August 2015 The Star Malaysia https://thestar.com.my/metro/community/2015/08/22/three-lose-savings-to-scratchandwin-scam/ in Malaysia, 2015
* June 2012 https://www.scam-detector.com/article/malaysian-lottery-brochure-fake scam detector 2012-2018
* March 2009 AU Govt Scamnet warning https://www.scamnet.wa.gov.au/scamnet/Scam\_types-Unexpected\_winnings-Scratchie\_scams-Malaysia\_Starize\_Travelling\_Group.htm

# IP Addresses

By June 2018 all sites were located on Cloudflare addresses in the range 104.18.36.73 to 104.31.93.202. Why Cloudflare? They provide a reverse proxy, pass-through security service. They do not provide a hosting service. The actual IP address is therefore obscured, allowing the fraudster to hide the hosting site. Cloudflare is being used as a barrier to hide behind.

```
Exceptions - 103.6.198.32 and 202.75.55.212 both in Malaysia.

```

## Fake finance company sponsors

```
202.75.32.200
202.71.110.21
112.137.167.164
112.137.162.105

```

## Fake travel companies

Not on CloudFlare:

```
91.121.164.202
91.121.232.242
202.75.45.59
202.71.109.233
202.75.41.117
202.75.55.212

```

Malaysia:

```
103.6.198.31
103.6.244.6
103.8.25.90
103.27.74.211

```

CloudFlare:

Compressed list

104.18.36.73
104.18.37.73
104.18.38.104
104.18.39.104
104.18.44.208
104.18.45.208
104.18.52.134
104.18.53.134
104.18.56.7
104.18.57.7
104.18.60.88
104.18.61.88
104.24.100.151
104.24.101.151
104.24.112.88
104.24.113.88
104.27.128.56
104.27.129.56
104.27.134.93
104.27.135.93
104.27.162.34
104.27.163.34
104.27.168.161
104.27.169.161
104.27.178.217
104.27.178.97
104.27.179.217
104.27.179.97
104.27.182.55
104.27.183.55
104.27.184.35
104.27.185.35
104.27.188.141
104.27.189.141
104.28.20.98
104.28.21.98
104.28.22.160
104.28.23.160
104.28.4.73
104.28.4.89
104.28.5.73
104.28.5.89
104.28.6.62
104.28.7.62
104.31.70.160
104.31.71.160
104.31.82.121
104.31.83.121
104.31.84.162
104.31.85.162
104.31.88.128
104.31.88.152
104.31.89.128
104.31.89.152
104.31.90.13
104.31.91.13
104.31.92.202
104.31.93.202

# Registrars and fake finance company sponsors

## CNOBIN

```
kelvinjenniferholdings-hk.com
randygabrielholdings-hk.com

```

## NetEarth One Inc. d/b/a NetEarth

```
zoeloganholdings.com

```

## OnlineNIC, Inc.

```
aikenadneyholdings.com  (suspended)
audreyjordanholdings.com  (suspended)
carolinedanielholdings.com (suspended)
copenhagenholdings.com  (suspended)
jacobbenjaminholdings.com (suspended)
josephanthonyholdings.com (suspended)
justinbrendaholdings.com  (suspended)
katejackholdings.com  (suspended)
kaylabenholdings.com  (suspended)
oliviaowenholdings.com  (suspended)
tommasonholdings.com (suspended)

```

## PDR LTD.

```
amandaaidenholdings.com
waynerussellholdings.com

```

## Realtime Register B.V.

```
arturharoldholdings.com
georgecoraholdings.com
katiecarterholdings.com
lincolnkayleeholdings-hk.com
madisonvincentholdings-hk.com
natezaraholdings.com
parkervenessaholdings.com
paulfrancisholdings.com
philipmargaretholdings.com
tamelarosaholdings.com

```

## Web Werks India Pvt. Ltd d/b/a ZenRegistry.com

```
ashleybrandonholdings.com
dianawilmaholdings.com
markmarvinholdings.com
mayaeliholdings.com
olivialucasholdings.com
sabrinakyleholdings.com
waynelouisholdings.com

```

## WEBCC dba WebNic.cc

```
cadenliamholdings.com
kylejoshuaholdings-hk.com
talishareaganholdings-hk.com

```

# Fake Finance Companies removed

## CNOBIN

```
annabellebentleyholdings.com (Suspended)
mathewellaholdings.com (Suspended)

```

## NetEarth One Inc. d/b/a NetEarth

```
anthonymasonholdings.com (suspended)
bryantedwardsholdings.com (suspended by registrar)
colleyvivianholdings.com  (suspended by registrar)
ericjohnnyholdings.com  (suspended by registrar)
gracealanholdings.com  (suspended by registrar)
loganelijahholdings.com  (suspended by registrar)
noahemmaholdings.com (suspended by registrar)
sharonjacksonholdings.com (suspended by registrar)
stevenmaryholdings.com  (suspended by registrar)
susanromeoholdings.com  (suspended by registrar)

```

## OnlineNIC, Inc.

```
dorothycharlotteholdings.com (suspended)
noelloganholdings.com  (suspended)
samanthanickholdings.com (suspended)

```

## PDR LTD.

```
andreaaustinholdings.com (suspended by registrar)
adammorrisholdings.com (suspended by registrar)
alyssachrisholdings.com (suspended by registrar)
amandajimmyholdings.com (suspended by registrar)
ambergeorgeholdings.com (suspended by registrar)
calvinzoeholdings.com (suspended by registrar)
carllindseyholdings.com (suspended by registrar)
charlotteavaholdings.com (suspended by registrar)
codyclaytonholdings.com (suspended by registrar)
codygavinholdings.com (suspended by registrar)
colemanwhiteholdings.com (suspended by registrar)
davisrossholdings.com (suspended by registrar)
dylansarahholdings.com (suspended by registrar)
emilynathanholdings.com (suspended by registrar)
emmaseanholdings.com (suspended by registrar)
francisjasperholdings.com (suspended by registrar)
harpergavinholdings.com (suspended by registrar)
jackjackyholdings.com (suspended by registrar)
jackvictoriaholdings.com (suspended by registrar)
jeffmorganholdings.com (suspended by registrar)
kelvinjenniferholdings.com (suspended by registrar)
kylejoshuaholdings.com (suspended by registrar)
lauramatthewholdings.com (suspended by registrar)
laurenjoshholdings.com (suspended by registrar)
liamlevisholdings.com (suspended by registrar)
lilycarterholdings.com (suspended by registrar)
lincolnkayleeholdings.com (suspended by registrar)
madisonvincentholdings.com (suspended by registrar)
peterjackholdings.com (suspended by registrar)
rachelgabrielholdings.com (suspended by registrar)
ralphjoshuaholdings.com (suspended by registrar)
randygabrielholdings.com (suspended by registrar)
robinelaineholdings.com (suspended by registrar)
ryanjulianholdings.com (suspended by registrar)
sabrinarachelholdings.com (suspended by registrar)
summersamuelholdings.com (suspended by registrar)
talishareaganholdings.com (suspended by registrar)
tracywilsonholdings.com (suspended by registrar)
victoriatylerholdings.com (suspended by registrar)

```

## Shinjuru

```
annabellebentleyholdings.com (Expired)
mathewellaholdings.com (Suspended by registrar)

```

## Web Commerce Communications Limited dba WebNic.cc

```
addisoncameronholdings.com (Expired)
waltonkellyholdings.com (Expired)
jacobrayholdings.com  (Expired)
marleyjarrellholdings.com
matthewdavidholdings.com (Expired)
noralucasholdings.com (Expired)
rileymiaholdings.com (Expired)

```

## Web Werks India Pvt. Ltd d/b/a ZenRegistry.com

```
amycharlesholdings.com  (Expired)
jessicawilliamholdings.com (Expired)

```

# Current travel fraud site list, July 2019

```
* Domain Name *      	* Site Name *

bountystartour.com      Bounty Star Tour
deroyaletours.com       De Royale Tours
dorsetttours.com        Dorsett Tours
gorgeoustourism.com     Gorgeous Tourism
greatstartour.com       Great Star Tour
harmonitours.com        Harmoni Tours
impianatours.com        Impiana Tours
kasihsayangtravel.com   Kasih Sayang Travel
klcompasstravel.com     KL Compass Travel
lakevilletours.com      Lakeville Tours
orkidstours.com         Orkids Tours
primabaytours.com       Prima Bay Tours
richmoontour.com        Rich Moon Tour
rivervilletours.com     Riverville Tours
seaqueentravel.com      Sea Queen Travel
sereniatours.com        Serenia Tours
tiarahillstours.com     Tiara Hills Tours
verticatours.com        Vertica Tours
worldconnecttravelling-my.com   World Connect Travelling
damansaravacation.com   Damansara Vacation

```

### Fraud web sites hosted by ovh.net

Although the hosting address is masked by Cloudflare, these actually reside in the address space of OVH.

```
bountystartour.com (suspended)
deroyaletours.com (suspended)
dorsetttours.com (suspended)
gorgeoustourism.com (suspended)
harmonitours.com (suspended)
impianatours.com (suspended)
lakevilletours.com
orkidstours.com (suspended)
primabaytours.com (suspended)
rivervilletours.com (suspended)
sereniatours.com (suspended)
tiarahillstours.com (suspended)
verticatours.com (suspended)
worldconnecttravelling-my.com (suspended)

```

### Fraud web sites hosted by PULSANT UK.

Although the hosting address is masked by Cloudflare, these actually reside in the address space of Pulsant.

```
dcelestialtravelling.com (suspended)
fabuloustravelling.com (suspended)
kasihsayangtravel.com (suspended)
klcompasstravel.com (suspended)
reallifetourism.com (suspended)
richmoontour.com (suspended)
seaqueentravel.com (suspended)
thetrinitytour.com (suspended)
worldtreetour.com (suspended)

```

### Fraud web sites hosted by RackRay, Lithuania

Although the hosting address is masked by Cloudflare, these actually reside in the address space of Rackray.

```
genesistravelling.com (suspended)
greatstartour.com (suspended)
onespiritualtour.com  (suspended)
twistythrilltour.com (suspended)
younglivingholiday.com (removed)

```

# Sources for this article

* Fraud alerts from Australian Government consumer protection
* Fraud alerts from New Zealand Government consumer protection
* Fraud alert from Malaysian consumer protection, Gerakan Public Service and Complaints Bureau