MyTripsTime - Travel scam

[bobbes]

Scammer number: +1-833-6107654
Scammer website: https://mytripstime.com, currently down

---

Call script:

---

Additional websites and numbers of the same group:
Website: https://www.findurtickets.com/
Number: +1-877-853-0310 (answering as mortgage company, might be a dead number, thanks ScammerJammer007)

Website: https://www.findurflights.com/
Number: +1-866-669-0830 (not in service, might be a dead number, thanks ScammerJammer007)

Website: https://www.findurfare.com/
Number: +1-877-268-0970 (Def. My Trips Time, thanks ScammerJammer007)

Website: https://www.ticketsnfares.com/
Number: +1-855-303-8009

Website: https://www.bookurrental.com/
Number: +1-855-607-0089

Website: https://hotelsandcar.com/
Number: +1-844-655-5216

Website: https://tripswallet.com/
Number: +1-866-455-2080

Any other scammer information:

---

These are the scammers from mondays stream.
They are based out of Gurugram (Delhi), India
Big call center for travel scams, quickbooks, printer support (Canon) and some other tech scams. They basically do black hat SEO, which means they use link building by posting to forums, bulletin boards, but also with Google Ads, to rank themselfs higher than the legit companies, hoping that someone that searches for specific keywords
stumble across their number for a flight reservation.

The payment information form seems to lead nowhere, although I believe from
the code, it’s either collected in Stripe or PayDiverse.

CEO and Managers: (at least until 2023)
Mahendra Singh Shekhawat (Operational Manager)
Devesh Kumar Tyagi (Manager Customer Service)
Satender Singh(Ajay) (Manager Marketing)

Location:
445, Ground Floor, AIHP Horizon,
Udyog Vihar, Phase-V, Sector-19,
Gurugram - 122008

IP: 121.241.58.156
SSID’ s: (might you be in the neighborhood, without proper internet access… DM me for the passwords)
Airtel_UNI2.4
Airtel_UNI5
Spectra_UNI5.0

Picture from inside (part of):

[Broken]

Just checked and it looks like the site is back up, but not looking like it did yesterday.

Phone number is showing again too. ( 1-833-610-7654)

[bobbes]

Yeah looks like they are working to bring it back up. At least their ‘checkout’ or ‘payment’ page seems not to be there, yet. Yesterday it was just a text, stating: “Coming soon”, seems they now have a simple landing page to at least show their number. But it looks nowhere near to a travel agency, so that helps a lot to save people from being scammed.

[ScammerRevolts]

Ay let’s go, good work getting all this info on these guys. Stream was absolutely crazy yesterday!

[Dee_Zombie]

The number is up an working…

Callback: 1-833-610-7654

[Lumine]

@Dee_Zombie

833-610-7654

Site is different now looks like they’re trying to remake the site and struggling

[Haileyk]

Wow, they’re still answering

[bobbes]

Coming soon… new website.

[Haileyk]

These guys are still answering not today, but the number still works

[bobbes]

Found some sites of the same scammers. Haven’t checked activity because it’s sunday, but these numbers are on the websites

Website: https://www.findurtickets.com/
Number: +1-877-853-0310 (answering as mortgage company, might be a dead number, thanks ScammerJammer007)

Website: https://www.findurflights.com/
Number: +1-866-669-0830 (not in service, might be a dead number, thanks ScammerJammer007)

Website: https://www.findurfare.com/
Number: +1-877-268-0970 (Def. My Trips Time, thanks ScammerJammer007)

Website: https://www.ticketsnfares.com/
Number: +1-855-303-8009

Website: https://www.bookurrental.com/
Number: +1-855-607-0089

Website: https://hotelsandcar.com/
Number: +1-844-655-5216

Website: https://tripswallet.com/
Number: +1-866-455-2080

---

Oh and say hi to the Blackhat SEO team of late 2018

[Cali4niya]

All Namecheap sites created around the same time….December 2022.
Seems awfully fishy.

[scammerjammer007]

+1-877-853-0310 - answers as a mortgage company with American sounding people but with the typical scammer hold music.

+1-866-669-0830 - NIS

+1-877-268-0970 - answering as “My Trips Time” and same scammers

[scammerjammer007]

they are answering on 866-455-2080

[Dee_Zombie]

Awesome job @bobbes !!!..……

[M33strPriestr]

Guess they noticed they were hacked.

[bobbes]

Yes they did. At the end of the stream, when we uploaded the background image of the “huh-what-happened-to-my-website”-looking Indian guy, they took it down in one wipe. The one moment I was snooping around, the second after they uploaded a page, with quickly written (noticeable by the spelling mistake that someone was in a rush): “Coming soon”, and the day after or something, this page came up. First without number, later with a number.

But they have still some websites left, it is a big callcenter with several types of scams. QuickBooks, Canon / Printer support, different travel scams that we added later to this post.

So, they have what they call: Client projects, and in-house projects. Those client projects seem real, that is not the problem. The in-house projects is where it gets shady. All these websites are “helpdesk”-type sites. Targeting products where they are not the owner of nor the offical helpdesk or booking desk.

So the pictures of the Santa’s is what they call the Blackhat SEO team, PPC (pay-per-click) team and Content Team. Basically they just fill message boards, forums, etc. with their number, hoping the search engines will pick it up (which they do), and push their numbers higher in the ranking. Next to that, they do Google Ads. So they pay to be ranked higher in the results, sometimes even to be on the absolute top of the results. They know very well how to do this. They rent AWS-servers that are in the US or Canada to post these ads to rank higher on their target audience. It’s one shitty, big group, with the know-how to do this. That made it an even bigger sweet taste of revenge to get them.

They keep records of what posts they made / ranked per type of post.
So for example, if you search: “Spirit wifi refund”, you probably come across a post for this website.

---

Then there is the call center part. They work in teams for day- and night shifts. I’ve seen the night shift do all the calling. Guess where it is night, when the target audience is awake. Ding ding ding, you guessed it!
They use several SIP-accounts (basically connecting phone numbers to the internet), with way too many numbers to be a normal company. Well, you heard that part in the stream ofcourse.

[Dee_Zombie]

In case you missed it or don’t know about SR Call….

TAKING OVER A FLIGHT SCAMMERS WEBSITE! FULL CALL!

[scammerjammer007]

they are answering on 833 610 7654

[Dee_Zombie]

I’m already blocked with the number!!!..…

[Adrienne_00120222]

Here you go…