Cybersecurity analysts have identified a sophisticated scam campaign targeting online sellers through a network of seven interconnected domains, all sharing the same underlying infrastructure. The domains allhinreports.com, www.allhinreports.com, account.velviene.com, www.hourglasscosmetic.com, klystaa.com, impecaby.com, and thebeedisplay.com were all registered through GoDaddy.com, LLC between October 19-26, 2025, indicating coordinated campaign deployment. These domains are connected through 18 documented relationships showing shared infrastructure with moderate confidence levels of 0.50, suggesting the operators are using common hosting resources to manage their fraudulent network.
The campaign specifically targets individuals selling boats and other vehicles on platforms like Craigslist and Facebook Marketplace. Community reports reveal a consistent pattern where scammers pose as interested buyers, often using names like "Jordan," and request sellers obtain paid reports from fake websites, particularly allhinreports.com. The fraudsters claim these "AHR reports" or "AVI reports" are necessary for the purchase and promise reimbursement after the transaction, a classic advance fee fraud tactic. The domain allhinreports.com has been directly linked to REPORTS, INC., a debt collection company with 10 Consumer Financial Protection Bureau complaints, through co-reporting relationships with 0.35 confidence.
Consumer impact data shows multiple victims have been targeted through this scheme, with reports documenting pressure tactics including repeated messaging to coerce sellers into purchasing fraudulent reports. The scammers leverage the legitimate-seeming nature of boat history reports to exploit sellers' desire to accommodate serious buyers, making this a particularly effective social engineering attack against the online marketplace community.
To protect yourself from this and similar scams, never purchase reports or pay fees upfront when selling items online, regardless of buyer requests or promises of reimbursement. Legitimate buyers will obtain their own vehicle history reports if needed. If contacted by suspicious buyers requesting paid reports, hang up immediately, do not click any provided links, and block the number. Verify the legitimacy of any website by checking domain registration dates and searching for scam reports online. Report suspected fraud to the Federal Trade Commission at reportfraud.ftc.gov or file complaints with the FCC for phone-based scams. You can also check if a number or domain has been reported as fraudulent by searching consumer protection databases and community reporting platforms.
This campaign represents a moderate threat level due to its coordinated infrastructure and targeted approach toward online sellers. The recent registration dates of all domains and shared hosting infrastructure indicate an active, organized operation. Consumers should exercise heightened caution when selling vehicles online and immediately report any encounters with these domains or similar buyer verification scam attempts to relevant authorities to help disrupt this fraudulent network.