Fraudulent hotel websites drawing thousands of visitors