info@commwealthbankau.com

[firefly]

The fake site impersonates the Royal Bank of Scotland. The domain is used only for the email address.

From a warning report posted online in a romance scam case:

How are you? As for me am fine just over stressful at today's work I really appreciate your sincerity, to help me buy a very good apartments in your country and I am pleased and i know that 550.000 Dollars will buy a very good apartments in your country. I thank Almighty God that finally found a sincere woman like you,
So I want you to get the fund that i deposited in the Royal Bank of Scotland, so that you will have enough money
on hand to start the legal procedures necessary to buy an apartment in your country without my presence, because it is very important that you're ready to buy a flat pending my arrival to meet with you in your country.
So! Today I sent a letter to the Royal Bank of Scotland to introduce you as my next of kin and my future partner to stand to get the money deposited in the bank.
So I want you to contact the bank to confirm, and I've already put in place conditions for the bank to ensure that you get the money without any difficulty. please my love don't disappoint me or betray my trust and confidence i have deposited on you.

Royal Bank of Scotland.
Email: accountinquiry@rbsonlinelondon.com
Address: 280 Bishopsgate London
EC2M 4RB
Tele: 0044-131-549-8888
Contact Person:
Ewen Stevenson
Chief Financial Officer
Phone: +44-2032894132

Honey! Please understand that I trusted you with all my heart, So i gave you the bank contact, please, please, for God's sake do not betray the trust i have bestowed upon you.
Please let me know as soon as you forward the letter to the bank.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122104:
Domain Name: rbsonlinelondon.com
Update Date: 2016-04-22
Creation Date: 2016-04-22
Registrar Registration Expiration Date: 2017-04-22
Registrar: Wild West Domains, LLC
Reseller: Crystal Registry

Registry Registrant ID: Not Available From Registry
Registrant Name: aremo gbenga
Registrant Street: suite 100
Registrant Street: cross avenue
Registrant City: gandhinagar
Registrant State/Province: Gujarat
Registrant Postal Code: 382010
Registrant Country: IN
Registrant Phone: +91.8036435894
Registrant Email: gbegab2@yahoo.com

[firefly]

The fake site impersonates RegioBank Netherlands, founded in 2007.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122105:

Domain Name: REGIOBKNL.COM
Updated Date: 2016-10-21
Creation Date: 2016-10-21
Registrar Registration Expiration Date: 2017-10-21
Registrar: CRAZY DOMAINS FZ-LLC
Reseller: GLOBEHOST INDIA PRIVATE LIMITED

Registry Registrant ID: 21340309
Registrant Name: ARE GAB
Registrant Street: BLOCK 100, JAKANDE ESTATE,
Registrant City: ISOLO
Registrant State/Province: LAGOS
Registrant Postal Code: 23401
Registrant Country: NG
Registrant Phone: +234.48023323327
Registrant Email: gbegab2@yahoo.com

[firefly]

The fake site impersonates United Bank for Africa, founded in 1949.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122106:
Domain Name: REMITTANCEDEPT-UBAONLINE.COM
Updated Date: 2016-05-19
Creation Date: 2016-03-19
Registrar Registration Expiration Date: 2017-03-19
Registrar: BigRock Solutions Ltd

Registry Registrant ID: Not Available From Registry
Registrant Name: paul grace
Registrant Street: 1156 High Str, Santa Cruz, CA 95064-1077
Registrant City: CA
Registrant Postal Code: 95064
Registrant Country: US
Registrant Phone: +1.8882133782
Registrant Email: davidbright587@yahoo.com

For the first 2 months of activity, the domain had a different registrant:
Registrant Name: aremo gbenga
Registrant Street: suite 104, surulere avenue, ajah
Registrant City: lagos
Registrant State/Province: Other
Registrant Postal Code: 23401
Registrant Country: NG
Registrant Phone: +234.8023313901
Registrant Email: gbegab2@yahoo.com

[firefly]

Sainsbury's Bank plc is a British bank founded in 1997.

sainsbury-b.com is used only for the email address.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122107:
Domain Name: SAINSBURY-B.COM
Updated Date: 2016-08-24
Creation Date: 2016-08-23
Registrar Registration Expiration Date: 2017-08-23
Registrar: CRAZY DOMAINS FZ-LLC
Reseller: GLOBEHOST INDIA PRIVATE LIMITED

Registry Registrant ID: 21190779
Registrant Name: ARE GAB
Registrant Street: BLOCK 100, JAKANDE ESTATE,
Registrant City: ISOLO
Registrant State/Province: LAGOS
Registrant Postal Code: 23401
Registrant Country: NG
Registrant Phone: +234.48023323327
Registrant Email: gbegab2@yahoo.com

snsbnknl-intl.com is a spoof of the same bank. The domain is used only for the email address.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122108:
Domain Name: snsbnknl-intl.com
Updated Date: 2016-04-12
Creation Date: 2016-04-12
Registrar Registration Expiration Date: 2017-04-12
Registrar: 1&1 Internet SE

Registry Registrant ID:
Registrant Name: Oluwagbenga Aremo
Registrant Street: Suite 100, hammer plaza, abuja
Registrant City: Abuja
Registrant State/Province: FC
Registrant Postal Code: 23409
Registrant Country: NG
Registrant Phone: +234.8032323232
Registrant Email: daremcommercial@yahoo.com

[firefly]

The fake site impersonates Sparbanken Öresund, Swedish bank. The domain is used only for the email address.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122110:
Domain Name: sparbnken-oresund.com
Updated Date: 2016-10-20
Creation Date: 2016-10-20
Registrar Registration Expiration Date: 2017-10-20
Registrar: Ascio Technologies, Inc
Domain Status: OK
Registrant Name: aremo gbenga
Registrant Street: block 63 flat 3, jakande estate, mile 2
Registrant City: 01
Registrant Postal Code: 234
Registrant Country: NG
Registrant Phone: +234.8023313901
Registrant Email: gbegab2@yahoo.com

[firefly]

The fake site was impersonating Security State Bank, an American community bank founded in 1903.

The fake site was active for 3 years...

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122111:
Domain Name: SSBNKWA.COM
Updated Date: 2016-01-29
Creation Date: 2013-01-28
Registrar Registration Expiration Date: 2016-01-28
Registrar: ENOM, INC.
Reseller: NAMECHEAP.COM

Registrant Name: CUSTOMER JAPAN
Registrant Street: BLOCK 63 FLAT 3, JAKANDE ESTATE
Registrant City: MILE 2
Registrant State/Province: LAGOS
Registrant Postal Code: 23401
Registrant Country: NG
Registrant Phone: +234.8023313901
Registrant Email: GBEGAB2@YAHOO.COM

[firefly]

The real bank abused in this case is Standard Chartered PLC, a British multinational banking and financial services company headquartered in London, founded in 1969.

standardbank-london.com was used only for the email address. The domain is used and reused in scams for over 6 years now.
In the period of time when the scam syndicate documented here was using it, the fake site got reported a month after being registered and the site was suspended.

From the fake site details - http://db.aa419.org/fakebanksview.php?key=111964:
Domain Name: STANDARDBANK-LONDON.COM
Updated Date: 2016-03-19
Creation Date: 2016-03-19
Registrar Registration Expiration Date: 2017-03-19
Registrar: BigRock Solutions Ltd

Registry Registrant ID:
Registrant Name: Aremo Gbenga
Registrant Street: Greek Lane
Registrant City: Garki
Registrant State/Province: Other
Registrant Postal Code: 23401
Registrant Country: NG
Registrant Phone: +234.8023456648
Registrant Email: richard.klems100@gmail.com

standardcbkonline.com - the domain is used and reused in online frauds since 2009. The scam syndicate documented here was using it only for the email address.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122112:
Domain Name: STANDARDCBKONLINE.COM
Updated Date: 2016-06-06
Creation Date: 2016-04-06
Registrar Registration Expiration Date: 2017-04-06
Registrar: Domainshype.com, Inc

Registry Registrant ID: Not Available From Registry
Registrant Name: Jimi cage
Registrant Organization: jimidomains
Registrant Street: 25 River St, Apt 4
Registrant City: Hartford
Registrant State/Province: Connecticut
Registrant Postal Code: 06101
Registrant Country: US
Registrant Phone: +1.3024657326
Registrant Email: academyglobalxyz@gmail.com

The initial registrant details:
Registrant Name: aremo gbenga
Registrant Street: suito100, amadu plaza, abuja
Registrant City: abuja
Registrant State/Province: Abuja Capital Tercltory
Registrant Postal Code: 23409
Registrant Country: NG
Registrant Phone: +234.8023131313
Registrant Email: gbegab2@yahoo.com

[firefly]

The domain is active online for over 12 years. Once deleted or expired, someone else buy it and use it. The last one using it now - https://db.aa419.org/fakebanksview.php?key=122113:

Domain Name: SWIFTEXPRESSCOURIER.COM
Updated Date: 2017-01-03
Creation Date: 2016-11-03
Registrar Registration Expiration Date: 2017-11-03
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: darem
Registrant Organization:
Registrant Street: block 63 flat 3, jakande estate, mile 2
Registrant City: mile 2
Registrant State/Province: Lagos
Registrant Postal Code: 23401
Registrant Country: NG
Registrant Phone: +234.8023313901
Registrant Email: daremcommercial@yahoo.com

[firefly]

The fake site impersonated a Swiss company. The domain si now suspended.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122115:
Domain Name: SWISSTRUST.ORG
Updated Date: 2016-12-25
Creation Date: 2016-10-25
Registry Expiry Date: 2017-10-25
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: DI_61506923
Registrant Name: are gab
Registrant Street: block 100, jakande estate,
Registrant City: isolo
Registrant State/Province: lagos
Registrant Postal Code: 23401
Registrant Country: NG
Registrant Phone: +234.48023323327
Registrant Email: gbegab2@yahoo.com

[firefly]

The domain is used only for the email address.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=122116:
Domain Name: treasurydpmt.com
Updated Date: 2016-04-06
Creation Date: 2016-04-06
Registrar Registration Expiration Date: 2017-04-06
Registrar: 1&1 Internet SE
Domain Status: addPeriod
Registry Registrant ID:
Registrant Name: Oluwagbenga Aremo
Registrant Street: Suite 100, hammer plaza, abuja
Registrant City: Abuja
Registrant State/Province: FC
Registrant Postal Code: 23409
Registrant Country: NG
Registrant Phone: +234.8032323232
Registrant Email: daremcommercial@yahoo.com