Anyone heard of final-flights.com?

[samh004]

I think they have made their money and gone.

Bugger, I wanted to head to the UK in F next week

 

[beardoc]

Does anyone that's been emailing this person have the <X-Originating-IP> header at all? It would be interesting if they hadn't spoofed it and were broadcasting where they were from.

 

[drron]

i asked for a quote for J from Perth to London in September. No response at all apart from the automated email. That was 48 hours ago. I think they have made their money and gone.

I suspect if he was in the travel industry then he most likely knew about this website (AFF) and has been monitoring the comments here over the past few days.

He would of known when it was time to pull the plug and go back to Nigeria.

The apparent original scammer using this technique was a South African.A disgruntled ex Flight centre South Africa employee.A search indicates though that it has been used throughout the Western worlld for several years now with perps from all over the world.Vietnam is a frequent host of the scammers.

 

[FoFuey]

I asked for a quote for a flight BNE BKK in J a day ago and got the following response. I have gone back and asked for further information but they have not come back yet. I wouldn't even contemplate sending these people any money.

Good evening Andrew,

Thank you for your flight request, we appreciate your inquiry, and we hope we can answer any questions you may have and assist you in finding the cheapest airfare! We are able to book flights from Brisbane to Bangkok at $2,199 return per person – Business class - this is inclusive of all airport fees and taxes and also includes full comprehensive insurance. There are no other fees to pay outside of the price we quote you, insurance is included at no additional cost to you as an added bonus, and we also provide this to ensure security and peace of mind for all our passengers.

Please let me know if this suits you, and if you'd like us to go ahead and book your flights. If you have any particular preferred times of travel on the day these can be arranged as well, but bear in mind that flights at certain times of the day tend to be more higher priced, the quote we have given you is the cheapest on the day.

Please let me know if I can be of any further assistance!


Best regards,
Andrew Vezeley
Final Flights support

Final Flights
..anyone, anywhere, anytime

Thats EXACTLY the same email I received, except mine was for BNELAXBNE @ $799 lol.....

 

[extracta]

Does anyone that's been emailing this person have the <X-Originating-IP> header at all? It would be interesting if they hadn't spoofed it and were broadcasting where they were from.

I am not sure if this is what you are after as I had forwarded the message from a hotmail account to another email account.

I still have the message on the hotmail account but cannot work out how to view the originating IP in the hotmail screen.

X-Originating-IP: [60.231.109.76]

 

[FoFuey]

I am not sure if this is what you are after as I had forwarded the message from a hotmail account to another email account.

I still have the message on the hotmail account but cannot work out how to view the originating IP in the hotmail screen.

X-Originating-IP: [60.231.109.76]

Is this IP that you posted yours or the IP attached to the incoming email from Final Flights?? Because this IP seems to be coming out of the city (Brisbane)

 

[equus]

Regarding eligibilty to register .com.au domains

You need to at least be a business; an ABN is sufficient.

A number of other things are also good. Registrered trademarks, registered business names etc are also sufficient to register that domain name.

 

[markis10]

Regarding eligibilty to register .com.au domains



A number of other things are also good. Registrered trademarks, registered business names etc are also sufficient to register that domain name.

Registration will also be removed if its discovered any of the details are false, including address and contact details.

 

[ozmille]

(He's stated that you'd be flying Malaysian, but you've pointed out they don't fly to Abu Dahbi; are you willing to take the chance when things aren't adding up?)

Not saying you should trust the guy but MH do offer codeshare flights to AUH;

1 MH 140 C 15FEB 3 SYDKUL HK1 1 2155 0320+1 772 E 0 M
2 MH9193 C 16FEB 4 KULMCT HK1 M 1405 1635 333 E 0 M
OPERATED BY OMAN AIR
3 MH9493 C 16FEB 4 MCTAUH HK1 2325 0025+1 320 E 0 M
OPERATED BY ETIHAD AIRWAYS
4 MH9492 C 25FEB 6 AUHMCT HK1 3 0245 0350 320 E 0 M
OPERATED BY ETIHAD AIRWAYS
5 MH9199 C 25FEB 6 MCTKUL HK1 1005 2100 332 E 0 M
OPERATED BY OMAN AIR
6 MH 123 C 25FEB 6 KULSYD HK1 M 2240 0935+1 744 E 0 M

Pricing comes in at AUD9800

 

[Archphoto]

I just requested First Class flights for 3 from BKK.

Header information from their original response:

Delivered-To: [email protected] Received: by 10.223.109.69 with SMTP id i5cs155340fap; Wed, 13 Apr 2011 00:55:07 -0700 (PDT) Received: by 10.52.166.3 with SMTP id zc3mr2945738vdb.28.1302681300470; Wed, 13 Apr 2011 00:55:00 -0700 (PDT) Return-Path: <[email protected]> Received: from web03.wufoo.com (web03.wufoo.com [204.232.136.84]) by mx.google.com with ESMTP id bt5si200041vbb.66.2011.04.13.00.54.58; Wed, 13 Apr 2011 00:54:59 -0700 (PDT)

I'm waiting with baited breathe for the wonderful price I'll get for 3x First class flights!

 

[extracta]

Is this IP that you posted yours or the IP attached to the incoming email from Final Flights?? Because this IP seems to be coming out of the city (Brisbane)

Then that will probably be mine.

 

[extracta]

Does anyone that's been emailing this person have the <X-Originating-IP> header at all? It would be interesting if they hadn't spoofed it and were broadcasting where they were from.

This should contain it. Please tell me were it is from

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtTQ0w9Mg==
X-Message-Status: n
X-SID-PRA: Andrew Vezeley [Final Flights #Support] <[email protected]>
X-AUTH-Result: NONE
X-Message-Info: JGTYoYF78jFnmX2zJc83CrveGH3+6ZbXTWE6y5Csq5hUaChNltO+Rex90pCwhFNAMtJGB1WxB7opleQlZIxcfS58P61iZfsNq3zoLbObxG8=
Received: from pandora.urlnameserver.com ([66.7.218.216]) by col0-mc4-f22.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 10 Apr 2011 05:01:11 -0700
Received: from [120.17.172.162] (port=50150 helo=RaidonPC)
by pandora.urlnameserver.com with esmtpsa (TLSv1:AES128-SHA:128)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q8tK9-0006vw-Rh

 

[Archphoto]

66.7.218.216 - HostDime.com
120.17.172.162 - Vodafone AU

According to IP Address Lookup (Email Trace) the address is in Waterford QLD - using the entire header you provided.

(Even gives you a satellite map!)

 

[drron]

Well white pages has no andrew Vezeley in QLD.
A google search doesn't come up with any Andrew vezeley.
Flies under the radar.

 

[Archphoto]

Well white pages has no andrew Vezeley in QLD.
A google search doesn't come up with any Andrew vezeley.
Flies under the radar.

Not too far - he has a listing on LinkedIn:

Andrew Vezeley | LinkedIn

But no connections. . . . . . .

 

[Mal]

Registration will also be removed if its discovered any of the details are false, including address and contact details.

I was thinking of referring the site to Auscert today.... Partially for this reason, partially for other reasons related to the site.

 

[thewinchester]

I was thinking of referring the site to Auscert today.... Partially for this reason, partially for other reasons related to the site.

Not hosted in Australia, nor is it on an Australian domain name - Auscert couldn't do a dammed thing about it.

Having said that however, there would be nothing stopping anyone from filing an Acceptable Use Policy (AUP) violation with the NOC of the ISP providing him any internet connectivity and transit services.

If the person is sending emails from an Australian-based ISP, it is generally accepted that using the service to commit or consider the comission of a criminal act is a breach of the AUP.

The ISP would need to investegate the complaint of a illegal act using their network (use of the internet connection for the purposes of sending emails associated with the commission of a fraud), and I can assure you as someone who used to work in this sphere they have highly developed contacts with law enforcment if they found something which warranted further investegation.

If they failed to investegate, they would be considered in violation of Telecommuncations Act (Cwlth) 1956 as they would knowingly be allowing such an illegal activity to take place using their transmission equipment, thus losing their right to a 'safe harbour' defence. Needless to say, serious reports are taken seriously if only to protect their own backsides.

The best beyond that anyone can do is report it to their local Consumer Protection agency if they've not used their services, or to the Police if a fraud is suspected or has taken place.

 

[NM]

Looks like the site has been taken down. And nobody is reporting any contact beyond the initial auto-response email for several days. So looks like someone has caught up with the alleged fraudster.

 

[Misha]

AFF strikes! Who says the people don't have power:?:

I wonder if there were any lucky devils out there who at the initial stages of the scam did get a RTW fare on F for a couple of grand? :mrgreen:

From now on I will keep my eyes peeled for fraudsters. I could handle a RTW on F for a fraction of the normal cost - and those points and SC won't go astray either

 

[Red Roo]

Just an update.

We are aware of this website and a number of investigations have been taking place. We’ve been advised that the ISP hosting www.final-flights.com has now taken the site down.

Qantas has no affiliation with this site whatsoever.