Star Travel scam

Star Travel Fraud

Don't Bear Internet Fraud

Star Travel screenshot (25-Apr-2009)

This fraudster should not be confused with any legitimate company of the same or similar name - the above website graphics and the evidential data below clearly identify the fake website and these criminal fraudsters.

Star Travel is just a standard scam website that has been set up to form a front for a money laundering job spamming campaign, (example below).The site content is exactly the same as used for their other aliases, Vestiga Travel, Paradise Touristics, Eurostars Travel Inc. and Phaselis Travel Inc - this is a serial fraudster. Their domain startravelcompany.com was only registered on 31-Mar-2009 with Melbourne IT (Yahoo as reseller), for the usual criminal domain one year period and the bogus location/contact details are the same as for their Vestiga Travel and Paradise Touristics aliases and are easily demonstrated to be fake. A Google search shows that "Star Travel" have absolutely no web presence at all, (not to be confused with a UK company of the same name or any other similar company). This particular company is not listed in the Spanish company register (CORPME).

Star Travel : Evidence of Criminal Fraud

i) Star Travel claim on their website home page "The tour operator Star Travel has been successfully operating in the travel services market since 1997", but the criminal's domain startravelcompany.com was only registered with MELBOURNE IT LTD, (Yahoo as reseller), on 31-Mar-2009 for the usual criminal domain period of one year. A clear indication of a fraudulent registration. It is hosted on the Yahoo 'Small Business Network' which is used by many of these fraudsters.

ii) A Google search shows absolutely no internet presence at all for this particular Star Travel, (not to be confused with a UK company of the same name or any other similar company). If they had indeed been in business since 1997 they would have a large presence. The fact that they do not is clear evidence of a fake company.

iii) Fake Website Contact Details:
San Bernardo 44 28013

San Bernardo 44 28013
Telephone +34 915 470 294
Fax. +34 915 881 407

• - The postcode for the address San Bernardo 44, Madrid is incorrect - a check on the Spanish postcode website shows it should be 28015 and not 28013.
• - The corrected address San Bernardo 44 28015 Madrid Spain actually belongs to the "Escuela Superior de Canto de Madrid" or the "Top Singing School of Madrid" - here's the Google street view of it showing no sign of any of these crooks. Absolutely irrefutable evidence of fake address details and fraud.
• - The above address and telephone number are identical to their Vestiga Travel, Paradise Touristics, Eurostars Travel Inc. and Phaselis Travel Inc. aliases - clear evidence of fraud.
• - There are no Google hits for the telephone number +34 915 470 294
• - There are no Google hits for the Fax. number +34 915 881 407

iv) This particular Star Travel company are not registered in the Spanish company register (CORPME) - irrefutable evidence of a fake company and fraud.

v) The fraud site content is exactly the same as the site content for their other aliases, Vestiga Travel, Paradise Touristics, Eurostars Travel Inc. and Phaselis Travel Inc.

vi) The website job advert:

Inviting & Advantages
Why do we invite you to our Company:
•You have the opportunity for professional growth in Company.
•Company provides well-managed, challenging work conditions that allow team members to realize their potential, work in a friendly atmosphere, and enjoy the common spirit of cooperation of the Company team.
•Company operates with a flexible salary policy. Salaries are reviewed after the initial probation period and depend on the complexity of the assigned tasks and the experience and abilities of the team member.
•Company does a lot to foster employee satisfaction and relationship-building, which makes for a stronger team. Professional training, courses, and sports activities are always available. Self-education and knowledge-sharing within the company are encouraged.

More advantages of working at Company:
•In addition to regular salary, team members are rewarded for each job.
•Free swimming pool and gym for team members.
•English courses held in the company office.
•Team members are free to establish the routine of work to their convenience.
•No overtimes because the Companys activities are well-planned and organized.
•Fully-paid leaves and sick-lists.
•Air-conditioned offices.
•Quality tea and aromatic coffee at the expense of the Company

Our agents say about us >

Star Travel currently has following vacancies

Corporate Event Manager for the Corporate Service Department >
Economist (hot vacancy) >
Customer Service Manager (work at the implant office-office - issue of air tickets) >
Tour - Manager (hot vacancy) >

If you are interested in any of our job positions, please send your detailed CV

vii) The Spam:

StarTravel <manager@startravelcompany.com> Fri, Apr 3, 2009 at 2:11 PM
Reply-To: manager@startravelcompany.com

Dear xxxxxxx

We have the free vacancies

This is easy job, but your help is very important for us and our clients.

This job does not require any special education. This job wouldn't bring you millions, we do not suggest huge earnings.

You wouldn't have look clients for us or sell our production. You wouldn't have to pay us for taking you on our list. However we guaranteee stable income.

FINANCIAL REPRESENTATIVE

We are looking for people who can control the payment of our customers from your state / region. The responsibilities of work included compiling monthly reports on the overall turnover of funds, sending documents on each transfer.

Job Requirements

- Good knowledge of Microsoft Windows/PC/internet usage
- Uphold a high level of integrity and ethics.
- Ability to follow directions
- Good responsibility to company requests
- Proved ability to work independently
- Knowledge of basic accounting
- Honesty and responsibility in performing corporate tasks
- Willingness to coordinate personal results, work independently
- Fluent English
- maturity age

Minimum qualifications include:

- Well developed analytical, communication, and interpersonal skills
- Strong operational background and knowledge
- Exceptional people skills
- Problem solving skills
- Top notch communication and writing skills
- A drive to be the best

If you are interested in this position please respond to me.

My e-mail: manager@startravelcompany.com

viii) If you respond to the spam, you get this back:

Hello xxxxxx,

As your future personal manager I am glad that you decide to accept our offer.

My name is Anatoly Blohin and I will be your personal manager.
My principal task is to lead you through the whole process of work as a Tour Manager and explain what you are supposed to do.

You will find in this letter all your future duties. They are simple enough, so I think you understand everything quite easy. As for our company - Star Travel. It is still the leading travel agency in Central and West Europe. The head office is situated in Madrid, Spain and it has also office in UK, Poland, KDR ,Netherlands, Ukraine, Russia and several countries of South America.

It offeres such services as the best selection of flights, hotels and vacation packages using innovative search, packaging and booking engines.

Our traditional device is to give the client everything he wants. Because we depends on clients.
That's why we do our best in order to provide customers with the best flights and travel tours. And customers by their end pay us money for it.
This is especially actual when global financial crisys is spread all over the world. I am honored to inform you that you are our new member and worker. Because your resume was passed our expectations succesfully. And now we would like to suggest you to become our TOUR MANAGER. This position is limited to a certain number of person, so think wisely about your decesion.
Application process:
1.Please read DESCRIPTION.pdf and respond me back with you questions and/or confirmation to work with us.
2.If You agree you need to fill Employment Agreement and Application and send back filled out by e-mail or fax: (909)-382-9912
3.I will forward your application documents to our HR department.
4. You may find more information on our web-site or feel free to ask any questions about your job duties and salary.

Our web-site: www.sttrcompany.com For read PDF file, please use free Adobe Reader 9: http://get.adobe.com/reader/ From my side I will do my best in order to provide you with all necessary instructions and answers to your questions. You can ask me for any information you will be interested in.

Please inform me as soon as possible about your decesion, whether it is positive or not. Because we have another candidates and we need to activate our human resource challange. Please give your answer for two working days.

With respect, Anatoly Blohin
Personal e-mail box: Manager.StarTravel@gmail.com
Tel: (919)709-0277 My Fax: (909)382-9912

It's an excellent example of the usual 'Runglish' you get from these crooks from the rather 'unspanish' sounding 'Anatoly Blohin'

ix) and here's the 'Job Description' (DESCRIPTION.pdf) that they refer to above:

TRAVEL COORDINATOR JOB DESCRIPTION

POSITION DESCRIPTION:
We would like to offer you the vacant position of the Travel Coordinator. What comes within duties of this specialist? On behalf of our Company the Travel Coordinator presents the whole range of services to the clients, his duties include the whole chain – from selecting the necessary tour, travel presentation to the final meeting at the airport after arrival. The Travel Coordinator should be as much as possible customer oriented and should take into account the customer’s requirements and interests. In some cases the Travel Coordinator also assists in processing payments from clients for the tour if it is necessary. This can be needed if the client from the USA wants to pay by check (cheque) and intends to visit e.g. Tunisia. As it is already clear the USA check are not effective in some countries while the network of American banking subsidiaries is undeveloped as yet. Or the client wants to select an individual tour including visits to distant places. In this case we rent a private house for the accommodation of our client. Many owners of such houses also do not have full access to bank transactions therefore in this case our Company pays for the rent and related services in cash through P2P systems. I.e., if we deal with such a client you should receive from him the check for the tour prepayment, inform your manager of all details, negotiate the check and transfer the amount through fast money transfer systems (Western Union, Money Gram) to our branch or directly to the PH owner. You will receive all money transfer details by e-mail from your manager. It is also important that your compensation will directly depend on the number of clients, at the initial stage it will amount to 5% of the prepayment sum. However there is an obligatory term: you should complete the whole money transfer process within 4 hours. The Travel Coordinator provides the Company with one more incontestable advantage. Our clients are serviced as quick as possible, they get all necessary documents (i.e. tickets, reservation etc.) promptly. It means that maximum 12 hours passes from the moment of the tour payment till the 100% of readiness to welcome and service the client. No one can offer the same!
WE OFFER:
•    Private online training (person-to-person)
•    Opportunity of stable career promotion and persona development
•    In-depth training and work in dynamic friendly air in benevolent team
•    Competitive wage (3000 USD +)
•    Wage plus-bonus system by results (5% from completed payments processed by You)
•    Comprehensive Benefits Package Health-care coverage 401(k)
•    Paid holidays and paid travel in any point of the world for You and Your family

HOURS OF WORK:
Its part time position and you have free time on day. Work takes only 1-2 hours on day (5-10 hours on week). This position may require work after regular business hours or on weekends.

FEES, WAGE & PAYROLL:
We provide one payroll period. You base monthly salary will be 3000.00 USD. If You also process payments from clients You will have + 5% bonus per each order completed (usually in total from 500.00 USD up to 5000.00 USD per month). Your salary will be paid in form of direct deposit or by any other comfortable for You form of payment. We do not provide any tax forms you will pay your local taxes by yourself. Payroll period – 30 calendar days from date of registration in Our company (usually it is 2-10 days after signing EMPLOYMENT AGREEMENT) payment will be made at the end of the payroll period.

The illegal 'job' is the clear 'Money Mule' function of accepting fake or stolen funds into your bank account and immediately transferring back 95% of them to these criminals in Russia or the Ukraine via Moneygram or Western Union. It will get your bank account closed, your assets frozen and could earn you a criminal record - do not be tempted

The above evidence clearly demonstrates beyond any doubt that the Star Travel website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Star Travel Fraudsters - hosting details

Main Domains, Registrars and Hosts

Domain

startravelcompany.com
startravelinc.net
startravelinc.org
withstartravel.com
sttrcompany.com

Registrar

MELBOURNE IT LTD, (Yahoo as reseller) - 31-Mar-2009
MELBOURNE IT LTD, (Yahoo as reseller) - 06-apr-2009
MELBOURNE IT LTD, (Yahoo as reseller) - 06-Jul-2009
TUCOWS INC. (GX Networks/123-reg.co.uk) - 29-Sep-2009
MELBOURNE IT LTD, (Yahoo as reseller) - 15-Apr-2009

Host Network

Yahoo
Yahoo
AltaVista Company/Yahoo
Pipex/GX Networks/123-reg.co.uk
Yahoo

Host IP

See data
See data
216.39.57.104
194.154.164.103
68.180.151.74

Key:
Active
Suspended or Inactive
Still active but website inaccessible, (forbidden notice - Maildrop domain?).
Parked

Please notify me of any other current domains used by this criminal.

Network Data (startravelcompany.com)
How I am searching:

Searching for startravelcompany.com A record at k.root-servers.net [193.0.14.129]: Got referral to d.gtld-servers.net. (zone: com.)
Searching for startravelcompany.com A record at d.gtld-servers.net. [192.31.80.30]: Got referral to yns1.yahoo.com. (zone: startravelcompany.com.)
Searching for startravelcompany.com A record at yns1.yahoo.com. [98.136.43.32]: Reports startravelcompany.com. Response:

Domain	Type	Class	TTL	Answer
startravelcompany.com.	A	IN	1200	68.180.151.106
startravelcompany.com.	A	IN	1200	68.180.151.111
startravelcompany.com.	A	IN	1200	68.180.151.73
startravelcompany.com.	NS	IN	86400	ns9.san.yahoo.com.
startravelcompany.com.	NS	IN	86400	yns1.yahoo.com.
startravelcompany.com.	NS	IN	86400	yns2.yahoo.com.
startravelcompany.com.	NS	IN	86400	ns8.san.yahoo.com.

Looking up at the 2 startravelcompany.com. parent servers:

Server	Response
yns2.yahoo.com [66.196.84.168]	68.180.151.106 68.180.151.111 68.180.151.73
yns1.yahoo.com [98.136.43.32]	68.180.151.106 68.180.151.111 68.180.151.73

This criminal's website is hosted by Yahoo on IPs 68.180.151.106, 68.180.151.111 and 68.180.151.73. Yahoo are currently an unresponsive host for a large number of these criminal fraudsters.

***Latest News*** Initial entry 25th. April 2009

***Latest News*** 6th. July 2009
The domain startravelcompany.com has been disabled, but the criminal is back up on another Melbourne IT/Yahoo registered domain - startravelinc.org hosted on the AltaVista/Yahoo IP address 216.39.57.104 as per the following network:

DNS Lookup: startravelinc.org A record
Searching for startravelinc.org A record at j.root-servers.net [192.58.128.30]: Got referral to A0.ORG.AFILIAS-NST.INFO. (zone: org.)
Searching for startravelinc.org A record at A0.ORG.AFILIAS-NST.INFO. [199.19.56.1]: Got referral to yns1.yahoo.com. (zone: startravelinc.org.)
Searching for startravelinc.org A record at yns1.yahoo.com. [98.136.43.32]: Reports startravelinc.org.
Response:

Domain	Type	Class	TTL	Answer
startravelinc.org.	A	IN	1200	216.39.57.104
startravelinc.org.	NS	IN	86400	ns8.san.yahoo.com.
startravelinc.org.	NS	IN	86400	yns1.yahoo.com.
startravelinc.org.	NS	IN	86400	ns9.san.yahoo.com.
startravelinc.org.	NS	IN	86400	yns2.yahoo.com.

Looking up at the 2 startravelinc.org. parent servers:

Server	Response
yns2.yahoo.com [66.196.84.168]	216.39.57.104
yns1.yahoo.com [98.136.43.32]	216.39.57.104

The host for this criminal fraudster is AltaVista Company/Yahoo on IP address 216.39.57.104

***Latest News*** 23rd. July 2009
No change to the above situation - this criminal domain and hosting was reported to both Yahoo and Melbourne IT on 06-Jun-2009 and 20-Jun-2009 but neither company has enforced their policy on illegal activity and knowingly continue to host and support it. If you have been conned by this company then you may have a case against Melbourne IT or Yahoo who continue to provide the criminal with services used in the pursuance of crime in contravention of US law codes [¹] despite having been notified of the activity. If you have suffered as a result of this criminal activity, seek legal advice.

[¹]
http://www.law.cornell.edu/uscode/
http://www.law.cornell.edu/uscode/18/1956.html#content
http://www.law.cornell.edu/uscode/html/uscode18/usc_sec_18_00000003----000-.html

***Latest News*** 15th. October 2009

New domain notified by site contact - withstartravel.com registered with TUCOWS INC. (GX Networks/123-reg.co.uk as reseller) on the 29-Sep-2009. The original Yahoo registered and hosted domain startravelinc.org also remains active despite having been reported to both Yahoo and Melbourne IT. Here's the latest spam response sent to me by a site contact:

"As your future personal manager I am glad that you decide to accept our offer.

My name is Miguel Rodriguez and I will be your personal manager.
My principal task is to lead you through the whole process of work as a Tour Manager and explain what you are supposed to do.

You will find in this letter all your future duties. They are simple enough, so I think you understand everything quite easy. As for our company - Star Travel. It is still the leading travel agency in Central and West Europe. The head office is situated in Madrid, Spain and it has also office in UK, Poland, KDR ,Netherlands and several countries of South America.

It offers such services as the best selection of flights, hotels and vacation packages using innovative search, packaging and booking engines.

Our traditional device is to give the client everything he wants. Because we depends on clients.
That's why we do our best in order to provide customers with the best flights and travel tours. And customers by their end pay us money for it.
This is especially actual when global financial crisis is spread all over the world. I am honored to inform you that you are our new member and worker. Because your resume was passed our expectations successfully. And now we would like to suggest you to become our TOUR MANAGER. This position is limited to a certain number of person, so think wisely about your decision.
Application process:
1.Please read DESCRIPTION.pdf and respond me back with you questions and/or confirmation to work with us.
2.If You agree you need to fill Employment Agreement and Application and send back filled out by e-mail.
3.I will forward your application documents to our HR department.
4. You may find more information on our web-site or feel free to ask any questions about your job duties and salary.

Our web-site: www.withstartravel.com For read PDF file, please use free Adobe Reader 9: http://get.adobe.com/reader/ From my side I will do my best in order to provide you with all necessary instructions and answers to your questions. You can ask me for any information you will be interested in.

Please inform me as soon as possible about your decision, whether it is positive or not. Because we have another candidates and we need to activate our human resource challenge. Please give your answer for two working days.

With respect, Miguel Rodriguez
Personal e-mail box: M.Rodriguez@withstartravel.com
Tel: (919)709-0278"

DNS Lookup: withstartravel.com A record
Searching for withstartravel.com A record at g.root-servers.net [192.112.36.4]: Got referral to B.GTLD-SERVERS.NET. (zone: com.)
Searching for withstartravel.com A record at B.GTLD-SERVERS.NET. [192.33.14.30]: Got referral to ns2.123-reg.co.uk. (zone: withstartravel.com.)
Searching for withstartravel.com A record at ns2.123-reg.co.uk. [92.51.159.40]: Reports withstartravel.com.
Response:

Domain	Type	Class	TTL	Answer
withstartravel.com.	A	IN	86400	194.154.164.103

Looking up at the 2 withstartravel.com. parent servers:

Server	Response
ns2.123-reg.co.uk [92.51.159.40]	194.154.164.103
ns.123-reg.co.uk [212.67.202.2]	194.154.164.103

The host of the latest criminal's domain withstartravel.com is Pipex/GX Networks/123-reg.co.uk on IP address 194.154.164.103.

***Latest News*** 15th. October 2009
The above domain withstartravel.com is now showing a 'Forbidden' notice, but it could still be being used as a maildrop domain.

This criminal is atill going strong on a new MelbourneIT/Yahoo registered and hosted domain, sttrcompany.com:

DNS Lookup: sttrcompany.com A record
Searching for sttrcompany.com A record at k.root-servers.net [193.0.14.129]: Got referral to h.gtld-servers.net. (zone: com.)
Searching for sttrcompany.com A record at h.gtld-servers.net. [192.54.112.30]: Got referral to yns1.yahoo.com. (zone: sttrcompany.com.)
Searching for sttrcompany.com A record at yns1.yahoo.com. [98.136.43.32]: Reports sttrcompany.com.
Response:

Domain	Type	Class	TTL	Answer
sttrcompany.com.	A	IN	1200	68.180.151.74
sttrcompany.com.	NS	IN	86400	ns9.san.yahoo.com.
sttrcompany.com.	NS	IN	86400	yns1.yahoo.com.
sttrcompany.com.	NS	IN	86400	yns2.yahoo.com.
sttrcompany.com.	NS	IN	86400	ns8.san.yahoo.com.

Looking up at the 2 sttrcompany.com. parent servers:

Server	Response
yns2.yahoo.com [66.196.84.168]	68.180.151.74
yns1.yahoo.com [98.136.43.32]	68.180.151.74

The host for this criminal fraudster is Yahoo on IP address 68.180.151.74