URL of Scam: travelpulse-live.com

Type of Scam: Social Engineering Scam / Fake Job Offer (Work-from-Home Scam)
Amount Lost: $13,468 USD
Cryptocurrency Lost: 890.54245 USDT, 12,553.552 USDC (Converted to $13,468 USD)

Victim Description:
The victim encountered an advertisement offering a work-from-home job to rate travel packages for a travel agency. Initially, they were contacted by a “mentor” via WhatsApp using the number +1 (289) 301-4500 and then moved to Telegram for further instructions. The scam promised commissions for rating travel packages with 5-star reviews. The scam progressed as follows:

First transaction: The victim paid $20 to unlock a premium ticket and withdrew $112.
Second transaction: The victim paid $180 to unlock 2 premium tickets and withdrew $289.
Third transaction: The victim received 5 premium tickets, paid $16,500 to unlock them, only to find out there was a 6th ticket requiring an additional $12,000 to withdraw any funds. At this point, the victim realized they were scammed.
The victim made a total payment of $13,468 USD, which was converted from cryptocurrency deposits to unlock the packages.

Cryptocurrency Addresses Used in Scam:

Address 1: TTt2etzd41iay8efzkYyuWACEpjNA6owZe
Address 2: TC6srixpmktrYwowZ8EiG8U2NCc1JyizQg
Address 3: TNRnhxTj5fzdJS3PF4rniwQbUtAdHRWypc
Address 4: 0x6896a162239c55067ebad9b493043ec1365473e9
Address 5: 0x9529491ce9b56b518eac81944c451c265ffe897a
Address 6: 0x959f466546928a526900a9013a5fd96b3c06f67f
Address 7: 0x37114ccb222aa1777f88102c9c90ab014f9927ae
Address 8: 0xa88b5ce6fbede20a17ece6ef2d4e88c2565ac4a2
Address 9: 0x7b1e032a4051c3d5c8c1ef1b56db7681b7d39d97
Address 10: 0x01f07a1644b21d083e688b450aeddfbf65062b6c
Address 11: 0x636b380ed4833e65f501965b892907116334abd2
Address 12: 0x52a980b91ea7291120d3ef8613b5e3c81a2fd788
Address 13: 0x6908432a14c55bf5b54934c38a3f18d33a7f5578
Cryptocurrency Lost:

USDT: 890.54245
USDC: 12,553.552

Scam Domain Details:

Domain Name: travelpulse-live.com (used for the scam platform)
Registrar: Name.com, Inc.
Registered On: September 22, 2023
Expires On: September 22, 2024
Updated On: November 4, 2024
Status:clientHold
clientTransferProhibited
redemptionPeriod
NameServers: pdns1.registrar-servers.com
pdns2.registrar-servers.com
The domain travelpulse-live.com was registered relatively recently in September 2023 and has already been flagged with a clientHold status, which often indicates the registrar has suspended the domain or flagged it due to suspicious activity.

Open-Source Intelligence Analysis: Key Details of travelpulse-live.com Scam
Scam Overview:
The victim was drawn in by a work-from-home advertisement offering commissions for rating travel packages. The scam unfolded in stages: after a few successful (but ultimately fraudulent) withdrawals, the victim was led to pay $16,500 for 5 premium tickets, only to be told there was a 6th premium ticket requiring a further $12,000 deposit. At this point, the victim realized the scam and stopped making payments.

This is a classic social engineering scam where the victim is manipulated into making progressively larger payments under the guise of a legitimate job. It preys on people looking for easy income opportunities, and once the victim is convinced, they are coerced into depositing large sums.

Domain Status:
The clientHold status indicates that travelpulse-live.com has been flagged, either by the registrar or a third party, due to fraudulent activity. The website is likely inactive, but there may still be other ways the scammers are operating (such as through phone numbers or other domains). The domain is still within the redemption period, which means the scammers could potentially renew it and continue their operations.

Recommendations:
Report the Scam:
The victim should report the incident to local law enforcement, the Federal Trade Commission (FTC), and the IC3 (Internet Crime Complaint Center). These platforms can assist with investigations into the scam and potentially halt further activity linked to the domain.
Track Cryptocurrency Transactions:
The victim can use blockchain explorers (such as Etherscan or Blockchain.com) to trace the cryptocurrency transactions related to the scam. This may help identify linked wallets and other participants in the fraudulent operation.
Consult Legal and Financial Experts:
For scams involving substantial amounts of money, it is advisable to seek assistance from a cryptocurrency fraud lawyer. Legal professionals with expertise in cryptocurrency can help the victim explore options for potentially recovering some of their losses.
Avoid Further Contact with Scammers:
The victim should immediately cease all communication with the scammer(s) via WhatsApp, Telegram, or any other communication channels. Scammers often employ multiple tactics to maintain contact and manipulate victims into further financial loss.
Monitor Bank and Credit Accounts:
If the victim used credit cards, bank transfers, or other financial institutions to fund their deposits, they should contact those entities immediately to report the fraud and take steps to block any further transactions.

Conclusion:
The victim lost $13,468 USD through a work-from-home scam involving the fraudulent platform travelpulse-live.com. After being manipulated into making repeated payments to unlock premium tickets, the victim realized they had been scammed. The domain travelpulse-live.com has been flagged for fraudulent activity, but there are still avenues for the victim to recover funds or prevent further damage, such as reporting to authorities and tracking the cryptocurrency transactions.