Wie kommst du denn ständig auf diese Seiten? Nur durch Werbe Banner?
Betreff: Strafanzeige wegen gewerbsmäßigen Betrugs, Netzwerk gefälschter
Reiseportale (§ 263, ggf. § 263a, § 267 StGB)
Sehr geehrte Damen und Herren,
hiermit erstatte ich Strafanzeige gegen Unbekannt wegen des Verdachts des
gewerbsmäßigen Bandenbetrugs.
Sachverhalt:
Ein Betreiber unterhält ein Netzwerk aus mindestens 15 Webseiten
(opotrips.com, wizflights.com, levitours.com, eskytrips.com und weitere,
Liste als Anlage), die sich als Online-Reisebüros ausgeben. Kunden werden
zur Vorkasse per Banküberweisung auf Privatkonten bewegt; es werden keine
Flugtickets ausgestellt. Zur Täuschung werden eine fremde britische
ATOL-Lizenznummer (2885, tatsächlicher Inhaber: Elegant Resorts Ltd,
Chester, UK) sowie eine frei erfundene ABTA-Mitgliedsnummer (W6262)
verwendet. Eine vorgebliche „unabhängige“ Buchungsprüfstelle
(bookingstatuscheck.com) und ein vorgeblicher „Treuhandservice“
(onwardtrust.com, mit nachweislich falschen Handelsregister- und
Steuerdaten in Luxemburg) gehören zum selben Betreiber und dienen der
Täuschung misstrauisch gewordener Kunden.
Verifizierte Zielkonten für die Vorkasse-Zahlungen:
1) IBAN IT59K0311501000000000018537, BIC FIDMIT3F, Findomestic Banca
S.p.A., Empfänger „ROMANO FODDIS“
2) IBAN DE39 5003 1900 0020 8933 20, BIC BBVADEFFXXX, BBVA Deutschland
(Niederlassung Frankfurt am Main), Empfänger „JACQUELINE RADDATZ“
Server-Infrastruktur: 157.230.76.10 (DigitalOcean, Rechenzentrum
Frankfurt) und 62.60.226.69 (FEMO IT Solutions Ltd.).
Ich bitte um Prüfung, ob ein Anfangsverdacht besteht, sowie um
Kontosperrung im Wege der Rechtshilfe. Eine ausführliche Dokumentation mit
Screenshots, Domainregistrierungsdaten und technischen Nachweisen kann ich
auf Anforderung übermitteln.
Meine Kontaktdaten:
[Name, Anschrift, Telefon, E-Mail]
Mit freundlichen Grüßen
[Name]Subject: Report of fraudulent use of account IT59K0311501000000000018537
Dear Sir or Madam,
I am reporting suspected fraudulent use of an account held at your
institution:
IBAN: IT59K0311501000000000018537
BIC: FIDMIT3F
Account holder shown to victims: "ROMANO FODDIS"
This account is used as the payment destination on a network of fake
travel-booking websites (opotrips.com, wizflights.com, levitours.com,
confirmed via test bookings on 21 and 23 August 2026, same IBAN each
time). Customers are directed to wire full prepayment to this account for
flights that are never issued. The operators falsely claim UK ATOL
licence 2885 (actually held by an unrelated company, Elegant Resorts Ltd)
and a non-existent ABTA membership number (W6262).
I would appreciate your review of this account for suspicious activity
and appropriate action, including a suspicious transaction report to the
UIF (Unità di Informazione Finanziaria, Banca d'Italia) if warranted.
I am available to provide screenshots and further evidence on request.
[Name, Anschrift, Telefon, E-Mail]
Kind regards,
[Name]Betreff: Meldung des Verdachts der betrügerischen Kontonutzung, IBAN
DE39 5003 1900 0020 8933 20
Sehr geehrte Damen und Herren,
ich möchte Sie auf die mutmaßlich betrügerische Nutzung eines bei Ihrem
Haus geführten Kontos hinweisen:
IBAN: DE39 5003 1900 0020 8933 20
BIC: BBVADEFFXXX
Angezeigter Kontoinhaber: „JACQUELINE RADDATZ“
Dieses Konto wird als Zahlungsziel eines vorgeblichen „Treuhandservice“
namens OnwardTrust (onwardtrust.com) genutzt, der auf mehreren
gefälschten Reiseportalen (u.a. opotrips.com) als „unabhängiger,
regulierter Escrow-Dienst“ beworben wird. Tatsächlich verfügt der
Betreiber laut eigenen AGB über keinerlei Zulassung als Zahlungs- oder
E-Geld-Institut; das angegebene Luxemburger Impressum enthält eine laut
EU-VIES-Prüfung ungültige USt-IdNr. sowie eine im Quellcode als
Platzhalter erkennbare, nie ausgefüllte Handelsregisternummer. Zwei
Testbuchungen am 21. und 23.08.2026 ergaben identisch dieses Konto.
Ich bitte um Prüfung des Kontos und ggf. um Meldung an die zuständige
Stelle (FIU Deutschland / Zoll).
[Name, Anschrift, Telefon, E-Mail]
Mit freundlichen Grüßen
[Name]Subject: Misuse of ATOL number 2885 by opotrips.com and related sites
Dear ATOL Team,
I would like to report the unauthorised use of ATOL number 2885 by a
network of fake travel booking websites, none of which are the legitimate
holder (Elegant Resorts Ltd).
The following sites publish ATOL 2885 as their own licence and promise
customers an "ATOL certificate" upon booking confirmation:
- opotrips.com (help article: "Warum bitten wir um Banküberweisungen..."
/ ATOL article explicitly cites "ATOL number 2885, issued by the CAA")
- Support pages at support.opotrips.com list the same claim
No genuine flights or ATOL certificates are ever issued; customers are
instead directed to wire prepayment to private bank accounts in Italy or
Germany. I checked the official ATOL holder search on 21 August 2026 and
confirmed ATOL 2885 belongs to Elegant Resorts Ltd, Chester Business
Park, Chester CH4 9QE, with no connection to Opotrips.
The same network also falsely claims ABTA membership number W6262.
Happy to provide screenshots and further documentation on request.
[Name, E-Mail]
Kind regards,
[Name]Subject: Fake ABTA membership number used by opotrips.com and network
Dear Sir or Madam,
opotrips.com and related sites (wizflights.com, levitours.com,
eskytrips.com) claim ABTA membership number W6262 in their website
footers and help centre ("Opotrips LTD is an accredited travel agent,
license nr. 2885 / W6262"). A search of the ABTA member database for both
"W6262" and "opotrips" returns no results.
These sites also display a Trustpilot-style rating badge that links only
to their own internal reviews page, not to Trustpilot, and falsely claim
UK ATOL number 2885 (verified as belonging to an unrelated company,
Elegant Resorts Ltd).
I am reporting this so the number is not associated with a genuine ABTA
member and to support any action ABTA may wish to take.
[Name, E-Mail]
Kind regards,
[Name]Subject: Fraud network hosted on your infrastructure: [Domain einsetzen]
Dear Abuse Team,
I am reporting [Domain] as part of an active fraud network of fake
flight-booking websites. Customers are directed to prepay by bank
transfer for flights that are never issued; the site falsely claims a UK
ATOL licence (2885, actually held by an unrelated company) and a
non-existent ABTA membership number (W6262). A related "escrow" site
(onwardtrust.com) uses a fabricated Luxembourg company registration.
Payment details observed: IBAN IT59K0311501000000000018537 (Italy) and
IBAN DE39 5003 1900 0020 8933 20 (Germany), confirmed via test bookings
on 21 and 23 August 2026.
Related domains on the same infrastructure: opotrips.com, wizflights.com,
levitours.com, eskytrips.com, onwardtrust.com, bookingstatuscheck.com.
Please investigate and take appropriate action under your abuse policy.
Screenshots and further evidence available on request.
[Name, E-Mail]
Regards,
[Name]
Die sind so günstig, dass jeder Depp den Fake erkennen sollte.
Wie erfolgte die Bezahlung? Bei Zahlung mit einer Kreditkarte könnte man wenigstens Cahrgeback versuchen...
Leider via Echtzeitüberweisung nach Italien. Meiner 72 jährigen Mutter kam das komisch vor, aber klick hat es erst gemacht als das Geld schon weg war.
Eigentlich auch über Whop. Aber es scheint keinen zu kümmern. Ich finde das furchtbar. All diese Seiten sind immernoch online. Die Poilzei hat es noch nicht einmal geschafft die Webseiten abzuschalten.siehe Recherche meiner KI:
Und damit ist eigentlich klar, wie man sie recht einfach an den Eiern kriegen kann...
SerpApi: Plans and Pricing
Choose your plan. Month to month contract. Cancel anytime. SerpApi provides simple pricing to suit your every need.serpapi.com
Lieben Dank, dann haben wir mit cheap-trips die ID 21!
Der Fund war richtig gut!!!
Subject: Fraud: fake travel agencies on 157.230.76.10 (condortrips.com and 6 more domains)
Hello,
the droplets behind 157.230.76.10 host a network of fake online travel agencies. Customers pay by bank transfer for flights that are never booked. All sites were online on 14 October 2026 and are currently being advertised on Facebook.
IP: 157.230.76.10, 2a03:b0c0:3:f0:0:2:c280:3000 (FRA1)
Droplet hostnames: omio-proxy-fra1, omio-edge-2-fra1
common names of the self-signed certificates the IP returns without SNI
Domains on this IP: condortrips.com, cheap-trips.com, gowaytrips.com, opotrips.com, wizflights.com, levitours.com, onwardtrust.com – each with stats.* (Matomo) and support.* (Chatwoot)
Also served from here: live chat and analytics of eskytrips.com and jet2trips.com (their front end is behind Cloudflare)
Known damage: EUR 1,021 lost by a 72-year-old customer of condortrips.com in October 2026, police case Bonn 261010-0806-IP6473
How to verify:
- The sites claim to be established companies (“Condortrips Sarl, a Luxembourg travel agency … since 2024”), but the domains were registered or bought in August and September 2026.
- Card payment does not work. The sites' own help centre explains why customers have to pay into a private person's account:
https://support.condortrips.com/hc/condortrips/articles/condortrips-en-why-do-we-ask-for-bank-transfers-to-a-personal-account
- All brands share one phone number (+44 7418 624404), one site template, one Matomo instance (site IDs 14, 16–22) and one Chatwoot account (desk.luminexworldwide.com).
- The brand names imitate Condor, Jet2, Wizz Air, eSky, Opodo and Goway.
Please take the droplets offline, including any other droplets in the same account, and keep the account and server data available for a law enforcement request under the case number above.Subject: Fraud: 9 GoDaddy domains used for fake travel agencies (condortrips.com, jet2trips.com, cheap-trips.com ...)
Hello,
the nine domains below are registered with GoDaddy and used for fake online travel agencies. Customers pay by bank transfer for flights that are never booked. All were online on 14 October 2026; condortrips.com is currently being advertised on Facebook in Germany.
Domain: Registered: Imitates
condortrips.com: 27 Aug 2026: Condor
jet2trips.com: 13 Sep 2026: Jet2
cheap-trips.com: taken over 14 Sep 2026: –
eskytrips.com: 21 Aug 2026: eSky
gowaytrips.com: 23 Aug 2026: Goway
opotrips.com: 16 Aug 2026: Opodo
wizflights.com: 06 Aug 2026: Wizz Air
levitours.com: taken over Aug 2026: –
onwardtrust.com: 12 Aug 2026: fake escrow service for the same sites
Known damage: EUR 1,021 lost by a 72-year-old customer of condortrips.com in October 2026, police case Bonn 261010-0806-IP6473.
How to verify:
- Each site claims to be a company trading “since 2023” or “since 2024” (e.g. “Condortrips Sarl, a Luxembourg travel agency”), although the domains were registered or taken over in August and September 2026.
- Card payment does not work. The sites' own help centre explains why customers have to pay into a private person's account:
https://support.condortrips.com/hc/condortrips/articles/condortrips-en-why-do-we-ask-for-bank-transfers-to-a-personal-account
- All nine share one server (157.230.76.10, DigitalOcean; eskytrips.com and jet2trips.com behind Cloudflare), one phone number (+44 7418 624404) and one site template.
- onwardtrust.com presents itself as an independent escrow service, but quotes a Luxembourg VAT number that is invalid in VIES (LU72839201) and runs on the same server.
Please suspend all nine domains under your Universal Terms of Service. Six of them use Domains By Proxy – please also check the customer account(s) behind them for further domains and keep the account data available for a law enforcement request under the case number above.Subject: Re: [3454f48ba9c26570]: Response to your Phishing report - www.jet2trips.com
regarding report 3454f48ba9c26570 (www.jet2trips.com): the site is a fake shop, so an automated malware/phishing scan will not flag it. Please review it manually. Specific evidence on the site itself:
1. Fake company history: the site presents itself as "Jet2trips Sarl", trading "since 2024". The domain was registered on 13 Sep 2026 (RDAP, GoDaddy).
2. Payment to private persons: card payment is shown but disabled. The site's own help centre explains why customers must transfer money to a private person's account:
https://support.jet2trips.com/hc/jet2trips/articles/jet2trips-en-why-do-we-ask-for-bank-transfers-to-a-personal-account
https://support.jet2trips.com/hc/jet2trips/articles/jet2trips-en-why-was-my-credit-card-declined
3. Brand impersonation: the name copies Jet2 (Jet2.com Ltd, UK airline).
4. Same operator as condortrips.com, cheap-trips.com, eskytrips.com, gowaytrips.com, opotrips.com, wizflights.com and levitours.com (identical template, phone +44 7418 624404). The live chat widget of jet2trips.com loads from 157.230.76.10 (DigitalOcean), which hosts the other brands.
5. Real damage: a 72-year-old customer of the network lost EUR 1,021 in October 2026, police case Bonn (Germany) 261010-0806-IP6473.
Please forward this to the hosting provider and place a phishing/fraud warning interstitial on the zone, and keep the account data for a law enforcement request.Subject: Fraud: bookingstatuscheck.com, luminexworldwide.com, hopfares.com, omegatrips.com
Hello,
the four domains below are registered with CNOBIN and belong to a network of fake online travel agencies that take bank-transfer payments for flights that are never booked.
bookingstatuscheck.com: fake “independent booking verification”. It confirms the network's fake booking references as genuine (test booking 2QFYEQ on opotrips.com, 21 Aug 2026, was shown as “booked”). Online on 14 Oct 2026.
luminexworldwide.com: desk.luminexworldwide.com runs the operator's support system (Chatwoot) for all fake agencies; e.g. the help centre of condortrips.com loads its files from there.
hopfares.com, omegatrips.com: earlier brands of the same network, still registered and ready to be reused.
The current brands are condortrips.com, cheap-trips.com, jet2trips.com, eskytrips.com, gowaytrips.com, opotrips.com, wizflights.com and levitours.com. Known damage: EUR 1,021 lost by a 72-year-old customer of condortrips.com in October 2026, police case Bonn 261010-0806-IP6473.
Please suspend the four domains and keep the registrant data available for a law enforcement request under that case number.Subject: Abuse: Google Cloud DNS and Google Workspace used by a fraud network (condortrips.com and 8 more domains)
Hello,
the domains below belong to a network of fake online travel agencies. Customers pay by bank transfer for flights that are never booked. The network uses Google Cloud DNS (ns-cloud-*.googledomains.com) and Google Workspace for e-mail. All sites were online on 14 October 2026.
Domain: Cloud DNS: Workspace: google-site-verification
condortrips.com: yes: yes: QuDFep7xZCqBFHZ35KBuwlT8QMYcCiDrpnJh7tTpL7Q
cheap-trips.com: yes: yes: m1RSvOtj-_fUwJlXvcdq1XDwIE_o6qhZtopppgui66U
gowaytrips.com: yes: yes: PTMDZowP66SdtnIKBltd0j2Xigme9tz5QmfGqX76vy4
opotrips.com: yes: yes: QGGVS7UZwMI7KwRDtTuYUDRQhtD8_pBdnEAfz0wSJ-0
wizflights.com: yes: yes: gohe1TM4PYKw6SWTcUQNECKU1E8vPLe479EY0Ku-2mA
levitours.com: yes: yes: s8vFsK4OcVmoBM5IHUWBUluzbYdN3X-mVt9R3lb36Ak
onwardtrust.com: yes: yes: FHyoraVp1VUhQEXAupWpDaHqDCZbJzlygmqJDE44HMQ
eskytrips.com: –: yes: TzIZxJUoisFQRstxyz6eWIAd0OVaCkkpsKUHy3WkwOM
luminexworldwide.com: –: yes: – (operator's own domain, runs the support system of all brands)
Known damage: EUR 1,021 lost by a 72-year-old customer of condortrips.com in October 2026, police case Bonn 261010-0806-IP6473.
How to verify:
- The sites claim to be companies trading “since 2023” or “since 2024”, although the domains were registered or taken over in August and September 2026.
- Card payment does not work. The sites' own help centre explains why customers have to pay into a private person's account:
https://support.condortrips.com/hc/condortrips/articles/condortrips-en-why-do-we-ask-for-bank-transfers-to-a-personal-account
- All brands share one server (157.230.76.10, DigitalOcean), one phone number (+44 7418 624404) and one site template.
Please suspend the Cloud DNS zones and Workspace tenants of these domains and keep the account and billing data available for a law enforcement request under the case number above.Gesetz: § 263 StGB (Betrug), gewerbsmäßig nach § 263 Abs. 3 StGB: https://www.gesetze-im-internet.de/stgb/__263.html
Begründung:
Die Facebook-Seite „Condortrips“ (facebook.com/condortripscom) bewirbt seit dem 13.10.2026 in Deutschland die Website condortrips.com, ein gefälschtes Online-Reisebüro. Kunden zahlen dort per Überweisung auf Privatkonten für Flüge, die nie gebucht werden. Eine 72-jährige Kundin hat im Oktober 2026 auf diesem Weg 1.021 EUR verloren; Strafanzeige beim Polizeipräsidium Bonn, Vorgangsnummer 261010-0806-IP6473.
Gemeldete Inhalte (Meta-Werbebibliothek):
- Anzeigen 1396027262572744, 2173180543269843, 4468508443464977, 4499452453635099 (aktiv seit 13.10.2026, Zielgruppe Deutschland 18-65+, Werbetreibender und Zahler „CONDORTRIPS SARL“)
- Seite facebook.com/condortripscom
Belege, von außen überprüfbar:
1. Die Website gibt sich als „Condortrips Sarl, a Luxembourg travel agency ... since 2024“ aus; die Domain wurde erst am 27.08.2026 registriert.
2. Kartenzahlung funktioniert nicht. Das eigene Hilfecenter erklärt, warum Kunden auf das Konto einer Privatperson zahlen sollen: https://support.condortrips.com/hc/condortrips/articles/condortrips-de-warum-bitten-wir-um-bankuberweisungen-auf-ein-personliches-konto
3. Derselbe Betreiber führt weitere Seiten mit identischer Vorlage und derselben Telefonnummer (+44 7418 624404): cheap-trips.com, jet2trips.com, eskytrips.com, gowaytrips.com, opotrips.com, wizflights.com, levitours.com.
4. Meta hat die Vorgängerseiten bereits wegen Verstoßes gegen die Werbestandards gesperrt: „Condortrips“ (ID 1309220848940137) und „CheapTrips“ (ID 1362924910230467). Der Betreiber wirbt jetzt mit einer neuen Seite und einem neuen Werbekonto weiter.
Bitte sperren Sie die Anzeigen, die Seite facebook.com/condortripscom und das Werbekonto, das als „CONDORTRIPS SARL“ zahlt.Subject: Fraud report: Whop companies "Condortrips" and "CheapTrips" (owner user_MznJNKNvECETb)
Hello Trust & Safety team,
two Whop companies are used by a network of fake online travel agencies, and Whop paid for the Facebook ads that bring victims to these sites. Customers pay by bank transfer for flights that are never booked.
Owner: user_MznJNKNvECETb, created 29 Aug 2026
Companies: biz_tJn3SE1PxHTTPr “Condortrips” (website condortrips.com, created 13 Sep 2026)
biz_KXGCzR0Rd8WacK “CheapTrips” (website cheap-trips.com, created 15 Sep 2026; Whop pixel with this ID is embedded on www.cheap-trips.com)
Deleted company: biz_Ybp4Wcv5s4Xwow, pixel was embedded on www.eskytrips.com (same network)
Ads paid by Whop: Meta Ad Library names “Whop, Inc.” as advertiser and payer for the pages “Condortrips” (ID 1309220848940137, ads in Germany, Sep–Oct 2026) and “CheapTrips” (ID 1362924910230467, ads in Belgium and the Netherlands, 15–21 Sep 2026). Meta has since disabled both pages.
Known damage: EUR 1,021 lost by a 72-year-old customer of condortrips.com in October 2026, police case Bonn 261010-0806-IP6473
How to verify: the sites claim to be companies trading “since 2023/2024” although the domains were registered or taken over in Aug/Sep 2026; card payment does not work and the sites' own help centre explains why customers have to pay into a private person's account (https://support.condortrips.com/hc/condortrips/articles/condortrips-en-why-do-we-ask-for-bank-transfers-to-a-personal-account).
Please suspend user_MznJNKNvECETb with all companies, pixels, ad budgets and payout accounts, and keep the account data (sign-up e-mail, login IPs, verification, payment and payout details) available for a law enforcement request under the case number above.Fake online travel agency (fake shop). The sites show real flight prices, card payment is disabled, customers must pay by bank transfer to private persons' accounts, and no ticket is ever issued. The site's own help centre explains why customers must pay a private person:
https://support.condortrips.com/hc/condortrips/articles/condortrips-en-why-do-we-ask-for-bank-transfers-to-a-personal-account
Same operator: condortrips.com, cheap-trips.com, jet2trips.com, eskytrips.com, gowaytrips.com, opotrips.com, wizflights.com, levitours.com, onwardtrust.com (fake escrow service), bookingstatuscheck.com (fake booking check). Names copy Condor, Jet2, eSky, Opodo, Goway and Wizz Air; domains registered Aug/Sep 2026 although the "companies" claim to trade since 2023/2024. Shared phone +44 7418 624404, server 157.230.76.10. Victim lost EUR 1,021, police case Bonn (Germany) 261010-0806-IP6473.https://www.condortrips.com/
https://www.cheap-trips.com/
https://www.jet2trips.com/
https://www.eskytrips.com/
https://www.gowaytrips.com/
https://www.opotrips.com/
https://www.wizflights.com/
https://www.levitours.com/
https://onwardtrust.com/
https://bookingstatuscheck.com/Subject: URGENTE - IBAN IT13 A010 0513 1960 0000 0002 252 usato per truffe online - richiesta di blocco
Gentile Ufficio Reclami,
vi prego di inoltrare con urgenza questa segnalazione all'ufficio Antiriciclaggio / Antifrode.
IBAN: IT13 A010 0513 1960 0000 0002 252
Intestatario indicato: ALEANDRO OTTONE VALMORI
Utilizzo: incasso dei pagamenti di false agenzie di viaggio online (levitours.com, opotrips.com, eskytrips.com e altre)
Danno noto della rete: EUR 1.021, bonifico istantaneo verso l'Italia, ottobre 2026, vittima di 72 anni residente in Germania – denuncia alla Polizia di Bonn, pratica 261010-0806-IP6473
Fonte dell'IBAN: familiari di una vittima
Le vittime arrivano tramite annunci su Facebook e Instagram, pagano il volo con bonifico e non ricevono mai il biglietto. I conti usati in precedenza dalla stessa rete (Findomestic, BBVA) sono stati bloccati e sostituiti con nuovi conti intestati a persone fisiche.
Vi chiedo di bloccare il conto e i fondi residui, di valutare una segnalazione di operazione sospetta all'UIF e di conservare i dati delle operazioni in entrata per le autorità.
English summary: the IBAN above collects payments for a network of fake online travel agencies; no tickets are ever issued. Please block the account and remaining funds, consider a suspicious transaction report and preserve the transaction data for law enforcement (Bonn police case 261010-0806-IP6473).Subject: URGENTE - IBAN ES04 0081 2711 6400 0645 8255 utilizado para fraude online - solicitud de bloqueo (Cumplimiento / Prevención de Blanqueo)
Estimados señores:
les ruego que trasladen este aviso con urgencia al departamento de Cumplimiento / Prevención del Blanqueo de Capitales.
IBAN: ES04 0081 2711 6400 0645 8255
Titular indicado: DANIEL ALEXANDRE VIDAL MARINO
Uso: cobro de pagos de agencias de viajes online falsas (condortrips.com, cheap-trips.com, gowaytrips.com, wizflights.com, jet2trips.com)
Daño conocido: la misma red causó en octubre de 2026 una pérdida de EUR 1.021 a una mujer de 72 años en Alemania – denuncia ante la Policía de Bonn, n.º 261010-0806-IP6473
Origen del IBAN: familiares de una víctima
Las víctimas llegan a través de anuncios en Facebook e Instagram, pagan el vuelo por transferencia y nunca reciben un billete. Las cuentas que la red utilizaba antes (Findomestic, BBVA) fueron bloqueadas y sustituidas por nuevas cuentas a nombre de particulares.
Les solicito que bloqueen la cuenta y los fondos restantes, valoren una comunicación de operación sospechosa al SEPBLAC y conserven los datos de las operaciones entrantes para las autoridades.
English summary: the IBAN above collects payments for a network of fake online travel agencies; no tickets are ever issued. Please block the account and remaining funds, consider a suspicious transaction report to SEPBLAC and preserve the transaction data for law enforcement (Bonn police case 261010-0806-IP6473).Subject: condortrips.com - Betrugsseite unter Ihrer Marke, aktuell mit Facebook-Werbung in Deutschland
Sehr geehrte Damen und Herren,
unter condortrips.com betreibt ein Betrugsnetzwerk ein gefälschtes Reisebüro mit Ihrem Namen. Kunden zahlen per Überweisung für Flüge, die nie gebucht werden. Seit dem 13.10.2026 läuft dafür wieder Werbung auf Facebook und Instagram in Deutschland, mit dem Rabattcode „CONDOR26“. Bitte leiten Sie diese Nachricht an Ihre Rechtsabteilung bzw. den Markenschutz weiter.
Domain: condortrips.com, registriert am 27.08.2026 bei GoDaddy (abuse@godaddy.com)
Server: DigitalOcean, 157.230.76.10 (abuse@digitalocean.com)
Facebook-Seite: facebook.com/condortripscom
Aktive Anzeigen: 1396027262572744, 2173180543269843, 4468508443464977, 4499452453635099 (Meta-Werbebibliothek)
Auftritt: „Condortrips Sarl, a Luxembourg travel agency … since 2024“
Bekannter Schaden: 1.021 EUR, 72-jährige Kundin, Oktober 2026, Polizeipräsidium Bonn 261010-0806-IP6473
Meldungen von Privatpersonen haben die Seite bisher nicht vom Netz gebracht. Als Markeninhaber erreichen Sie eine Sperre deutlich schneller. Ich bitte Sie,
- die Anzeigen und die Seite bei Meta über das Formular für Markenrechtsverletzungen zu melden,
- bei GoDaddy und DigitalOcean eine Beschwerde einzureichen und
- ein UDRP- oder URS-Verfahren zu prüfen, damit die Domain nicht weiterverwendet werden kann.Subject: Abuse: SearchApi account powers a fraud network - identifiable request 2026-10-14 09:55:53 UTC
Hello,
one of your customer accounts supplies the flight prices for a network of fake online travel agencies. The sites show real Google Flights fares, take payment by bank transfer and never issue a ticket.
Request to look up: 2026-10-14 09:55:53 UTC, Google Flights, one-way LEJ → PMI, 19 Nov 2026, 1 adult, economy – triggered by a search on condortrips.com, server 157.230.76.10 (DigitalOcean)
Sites using the account: condortrips.com, cheap-trips.com, jet2trips.com, eskytrips.com, gowaytrips.com, opotrips.com, wizflights.com, levitours.com
Evidence: the public file /assets/js/search-results.js on these sites says “departure_token tells SearchAPI which outbound was selected”
Known damage: EUR 1,021 lost by a 72-year-old customer in October 2026, police case Bonn 261010-0806-IP6473
Please suspend the account and keep its registration and payment data available for a law enforcement request.Subject: Fraud network using Kiwi.com flight data (condortrips.com and 7 more sites)
Hello,
a network of fake online travel agencies uses Kiwi.com flight data as a fallback price source. The sites show real fares, take payment by bank transfer and never issue a ticket.
Sites: condortrips.com, cheap-trips.com, jet2trips.com, eskytrips.com, gowaytrips.com, opotrips.com, wizflights.com, levitours.com
Server: 157.230.76.10 (DigitalOcean)
Evidence: the public file /assets/js/search-results.js describes the server-side search as “retry ladder + Kiwi fallback”
Known damage: EUR 1,021 lost by a 72-year-old customer in October 2026, police case Bonn 261010-0806-IP6473
If this traffic comes through a partner or API account (e.g. Tequila) or through scraping from 157.230.76.10, please block it and keep the account data available for a law enforcement request.Wie soll die deutsche Polizei das auch?
Und das Skript lassen sie frei zugreifbar?