How the scam operates.
この活動は、確立されたバケーションレンタル管理ソフトウェアに関連する命名規則を悪用し、正規の不動産予約ポータルを装っています。その表向きの体裁には、予約画面風のインターフェース、専門的に見える確認手続きのワークフロー、そして本物のホスピタリティテクノロジー分野から借用した信頼を示すシグナルが含まれるのが通例であり、これらはすべて、宿泊サービスを求める不動産所有者、管理者、または宿泊客にとって信頼できるものに見えるよう設計されています。
この種のドメインに共通する詐欺の手口は、支払いや認証情報の提出を求める前に、説得力のある予約またはアカウントアクセスの手続きへと被害者を誘導するものです。運営者は、予約の確定、管理手数料の処理、またはアカウントの再有効化といった名目のもとで、資金、あるいは正規のプラットフォームで再利用可能なログイン認証情報を収集します。被害者は、取引が完了したという錯覚を強める自動確認メールを受け取ることが少なくありません。
破綻が表面化するのは通常、予約したはずの物件が存在しない、主張されたアカウントへのアクセスが一向に付与されない、または連絡の試みに返答がない、といった段階です。この時点で運営者は、連絡を完全に断つか、被害者が支払いに異議を申し立てる猶予期間を使い果たさせるために設計された手続き上の遅延でかわします。暗号資産、電信送金、プリペイド手段といった取消不能な方法で送金された資金が、従来の手段を通じて回収されることはまれです。
Red flags we documented.
- 01Domain impersonates a recognised reservation-platform brandThe domain combines 'reservations' with a term closely associated with legitimate vacation-rental management software, a deliberate naming choice designed to exploit brand recognition and lower the victim's guard before any financial or credential exchange occurs.
- 02Listed on CryptoScamDB blacklistThe domain appears in the CryptoScamDB community blacklist, a collaboratively maintained register of addresses associated with fraudulent or malicious activity. Inclusion reflects reported harm, not merely suspicion.
- 03No documented operator or registered business identityOperations of this pattern typically present no verifiable company registration, regulatory licence, or named principal. The absence of accountable organisational identity is a consistent feature of platforms designed to extract value and disappear.
- 04Phishing infrastructure signalThe construction of the domain, appending a generic TLD to a recognisable brand term, matches the technical pattern of credential-harvesting infrastructure, where the goal is not to deliver a service but to capture authentication data or payment details under a trusted appearance.
- 05No legitimate dispute or recovery pathwayPlatforms operating under this pattern do not maintain regulated payment processing, formal terms of service, or accessible dispute mechanisms. Victims who transfer funds have no contractual recourse against an operator whose identity and jurisdiction are undisclosed.
What you can do now.
Open a free 24-hour case assessment with CryptoLeek +
Tell us what happened. A senior analyst reads your file within 24 hours and replies with an honest yes/no/conditional on recovery. The assessment is free. If we cannot recover the funds we say so plainly, including which (free) regulator channel you should use instead. If we accept the case, we open a numbered case file and issue a written quote for a flat investigation retainer before any work begins, scoped to case complexity, the jurisdictions involved, and the on-chain trail.
Trace your funds on-chain with our analysts +
We trace stolen crypto across BTC, ETH, EVM L2s, Solana, Tron, and major stablecoins using the same toolchain as regulators and tier-1 exchange compliance teams. The output is a forensic report anchored to specific transaction hashes and block heights, the evidence that exchanges, payment processors, and counsel actually act on. Recovery starts here.
Recover with counsel where civil action makes sense +
Where the trace lands in a jurisdiction with cooperative banks and courts, we coordinate with bar-licensed counsel in our 40+ jurisdiction network for civil action and asset-freezing orders (Mareva-style). Counsel bill you directly; the CryptoLeek investigation retainer is independent of counsel fees. The outcome is funds released back to your nominated wallet or bank account.