Murray

Dear Online Abuse Team: Please investigate and suspend the following fraudulent domain: ubabengroup.com URL: http://www.ubabengroup.com This domain is hosted on your servers. This domain is fraudulent because: 1. It impersonates the legitimate United Bank for Africa. The real site is here: http://www.ubagroup.com/ 2. It maintains a non-secure customer bank account login access: http://www.ubabengroup.com/ubdirect.html which is used to solicit customer bank account information. Legitimate financial institutions maintain secure customer account logins. This is evidence of fraud. 3. Its WHOIS domain name is registered for only one year 19 April 2012 - 19 April 2013. A legitimate bank would likely register its domain name for a period grater than one year. This is indicative of fraud. 4. The domain is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/fakebanksview.php?key=68667 If you require additional information or assistance to investigate and shut down this website, please contact me. Thank you, Murray Stanvall Artists Against 419 http://www.aa419.org EDIT: The account has been suspended.

Dear Online Abuse Team: Please investigate and suspend the following fraudulent domain: queensgardenhotel.co.uk URL: http://queensgardenh...o.uk/index.html This domain is hosted on your servers. Summary: This site is being used to conduct 419 Internet Advanced Fee Fraud by impersonating a non-existent hotel. Under this common 419 Fraud ruse (commonly targeting victims from developing countries), fake non-profit organizations offer round trip air transportation to email recipients to attend non-existent international conferences. Email recipients are then asked pay hotel registration fees in advance by money order or bank wire transfer. After fees are paid, the promised round trip airline tickets are never provided. A description of conference scams can be found here: http://www.scamwarne...hp?f=40&t=18787 and here: http://www.bbc.co.uk...onment-12219472 Reasons why queensgardenhotel.co.uk is fraudulent: 1. The fake Queens Garden Hotel is not listed in the United Kingdom's Companies House registry of authorized businesses (http://wck2.companie...cessCompanyInfo). This is evidence of fraud. 2. The fake Queens Garden Hotel web pages have illegally copied symbols, logos, format, and web page format and content of the legitimate Washington Mayfair Hotel (real site here: http://www.washington-mayfair.co.uk/) - http://www.copyscape...&w=145&i=1&r=10 3. The fraudulent domain's contact web page ( http://queensgardenh...contact_us.html ) lists the following as its address: 36 Earls Court Gardens,Earls Court,London SW5 0TR United Kingdom. However, the legitimate Earls Court Gardens Hotel and not the Queens Garden Hotel is located at this address: http://www.travelsta...GardenHotel.htm , http://www.easytoboo...-gardens-hotel/ This is evidence of fraud. 4. The fraudulent domain's contact web page ( http://queensgardenh...contact_us.html ) lists the following telephone numbers: +44 (0) 703 594 9645 and +44 (0) 702 407 2530 as main contact telephone numbers. This telephone numbers resolve to be personal (non-business) telephone number ( http://www.numbering...sis&sub=phonenr ). A legitimate hotel hosting an international conference would not use personal telephone numbers as main contact telephone numbers. This is an indication of fraud. 5. The fake Queens Garden Hotel website claims to have been established in 1913 ( http://queensgardenh...o.uk/index.html ). However, it has one year domain registration was very recent (07 April 2012). A hotel in London established in 1913 would likely have a domain registration more than several weeks old. This is an indication of fraud. 6. This website is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/...w.php?key=67207 7. This fake hotel is referenced by fraudulent conference scam website: http://iccc12.co.uk/venue.htm. This fake conference domain is also listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/...w.php?key=67185 If you need additional information to suspend this fraudulent domain, please contact me. Thank you. Murray Stanvall Artists Against 419 http://www.aa419.org

Thank you all. You're wonderful!

Dear Online Abuse Team: Please investigate and suspend the following fraudulent domain: queenslondonhotel.co.uk URL: http://queenslondonhotel.co.uk/ This domain is hosted on your servers. Summary: This site is being used to conduct 419 Internet Advanced Fee Fraud by impersonating a non-existent hotel. Under this common 419 Fraud ruse (commonly targeting victims from developing countries), fake non-profit organizations offer round trip air transportation to email recipients to attend non-existent international conferences. Email recipients are then asked pay hotel registration fees in advance by money order or bank wire transfer. After fees are paid, the promised round trip airline tickets are never provided. A description of this scam can be found here: http://www.scamwarne...hp?f=40&t=18787 Reasons why queenslondonhotel.co.uk is fraudulent: 1. The fake Queens London Hotel is not listed in the United Kingdom's Companies House registry of authorized businesses (http://wck2.companie...cessCompanyInfo). This is evidence of fraud. 2. The fake Queens London Hotel web pages have illegally copied symbols, logos, format, and web page format and content of the legitimate Washington Mayfair Hotel (real site here: http://www.washington-mayfair.co.uk/) - http://www.copyscape...&w=145&i=1&r=10 3. The fraudulent domain's contact web page ( http://queenslondonhotel.co.uk/index.html ) lists the following as its address: 124 Kentish Town Road, London, NW1 9QB United Kingdom. The Abbey Tavern and not the Queens London Hotel is located at this address: http://www.londonnet...abbeytavern.html This is evidence of fraud. 4. The fraudulent domain's contact web page ( http://queenslondonh...contact_us.html ) lists the following telephone numbers: +44 (0) 702 403 7303 and +44 (0) 702 406 6710 as a main contact telephone numbers. This telephone numbers resolve to be personal (non-business) telephone number ( http://www.numbering...sis&sub=phonenr ). A legitimate hotel hosting an international conference would not use personal telephone numbers as main contact telephone numbers. This is an indication of fraud. 5. The fake Queens London Hotel website has a one year domain registration was very recent (05 January 2012). An established hotel in London would likely be more than two months old. This is an indication of fraud. 6. This website is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/...w.php?key=64681 If you need additional information to suspend this fraudulent domain, please contact me. Thank you. Murray Stanvall Artists Against 419 http://www.aa419.org

Thank you for removing this domain! Murray

Dear Online Abuse Team, Please investigate and suspend the following fraudulent domain: isccecc.org/ URL: http://isccecc.org/ This domain is hosted on your nameservers. PLEASE BEWARE THIS DOMAIN MIGHT CONTAIN A TROJAN. Summary: This site is being used to conduct 419 Internet Advanced Fee Fraud by impersonating the non-existent "3rd International Scientific Conference on Clean Energy and Climate Change" in London, UK. Under this common 419 Fraud ruse (commonly targeting victims from developing countries), fake non-profit organizations offer round trip air transportation to email recipients to attend non-existent international conferences. Email recipients are then asked pay hotel registration fees in advance by money order or bank wire transfer. After fees are paid, the promised round trip airline tickets are never provided. Descriptions of this scam can be found here: http://www.scamwarners.com/forum/viewtopic.php?f=40&t=19126 and http://www.uia.be/fraud_monitor Reasons why isccecc.org/ is fraudulent: 1. The fake conference's fake sponsor - Working Group on Climate Change - is not listed as an authorized Non-Governmental Organization (NGO) in the United Kingdom: http://www.charitycommission.gov.uk/index.aspx even though the fake site ( http://isccecc.org/aboutus.htm ) claims to have been founded in 1999. This is evidence of fraud. 2. The fake Working Group on Climate Change offers "free" airline tickets: " " here: http://isccecc.org/invitation.htm Registration is free of charge for delegates from developing countries. Also free flight ticket, travel insurance, visa fees and per diem to be provided for all paper presenters and participating delegates. 3. Its contact web page ( http://isccecc.org/contactus.htm ) lists the following telephone numbers: +44 702 406 8488 and +44 702 402 0466 as main contact telephone numbers. These telephone numbers resolve to be a personal (non-business) telephone numbers ( http://www.numberingplans.com/?page=analysis&sub=phonenr ). A legitimate Non-Governmental Organization sponsoring an international conference would not use personal telephone numbers as main contact telephone numbers. This is an indication of fraud. 4. The fake Working Group on Climate Change claims to have been established in 1999 (http://isccecc.0rg/contactus.htm ), however its one year domain registration was very recent (02 January 2012). This is indicative of fraud. 5. The fake Working Group on Climate Change ( http://isccecc.org/venue.htm ) claims that its international conference will be held at the (non-existent) Queens London Hotel, 124 Kentish Town Road, London, NW1 9QB. The United Kingdom's Companies House registry of business has no listing of any "Queens London Hotel": http://www.companieshouse.gov.uk/toolsToHelp/WCInfo.shtml . This is evidence of fraud. 6. The fake website claiming to be the (non-existent) Queens London Hotel at 124 Kentish Town Road, London, NW1 9QB is located here: http://queenslondonhotel.com/index.html This domain is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/fakebanksview.php?key=64681 and has been reported for abuse. 7. The fake Working Group on Climate Change website is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/fakebanksview.php?key=64932 If you require additional information or assistance to investigate and shut down this website, please contact me. Thank you. Sincerely, Murray

Please investigate and suspend the following fraudulent domain: queenslondonhotel.com URL: http://queenslondonhotel.com/index.html This domain is hosted on your servers. Summary: This site is being used to conduct 419 Internet Advanced Fee Fraud by impersonating a non-existent hotel. Under this common 419 Fraud ruse (commonly targeting victims from developing countries), fake non-profit organizations offer round trip air transportation to email recipients to attend non-existent international conferences. Email recipients are then asked pay hotel registration fees in advance by money order or bank wire transfer. After fees are paid, the promised round trip airline tickets are never provided. A description of this scam can be found here: http://www.scamwarners.com/forum/viewtopic.php?f=40&t=18787 Reasons why queenslondonhotel.com is fraudulent: 1. The fake Queens London Hotel is not listed in the United Kingdom's Companies House registry of authorized businesses (http://wck2.companieshouse.gov.uk/adeece23d9538e876368822cba8b5aaf/wcframe?name=accessCompanyInfo). This is evidence of fraud. 2. The fake Queens London Hotel web pages have illegally copied symbols, logos, format, and web page format and content of the legitimate Washington Mayfair Hotel (real site here: http://www.washington-mayfair.co.uk/) - http://www.copyscape.com/view.php?o=76202&u=http%3A%2F%2Fwww.washington-mayfair.co.uk%2F&t=1325140420&s=http%3A%2F%2Fwww.queenslondonhotel.com&w=145&i=1&r=10 3. The fraudulent domain's contact web page ( http://queenslondonhotel.com/index.html ) lists the following as its address: 124 Kentish Town Road, London, NW1 9QB United Kingdom. The Abbey Tavern and not the Queens London Hotel is located at this address: http://www.londonnet.co.uk/clubs/venues/theabbeytavern.html This is evidence of fraud. 4. The fraudulent domain's contact web page ( http://queenslondonhotel.com/contact_us.html ) lists the following telephone numbers: +44(0)702 401 9540 and +44(0)702 405 1744 as a main contact telephone numbers. This telephone numbers resolve to be personal (non-business) telephone number ( http://www.numberingplans.com/?page=analysis&sub=phonenr ). A legitimate hotel hosting an international conference would not use personal telephone numbers as main contact telephone numbers. This is an indication of fraud. 5. The fake Queens London Hotel website has a one year domain registration was very recent (05 December 2011). An established hotel in London would likely be more than four days old. This is an indication of fraud. 6. This website is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/fakebanksview.php?key=64681 If you need additional information to suspend this fraudulent domain, please contact me. Thank you. Murray

Please investigate and suspend this fraudulent domain. This domain is related to thepalacegardenhotel.com site reported recently. URL: http://www.iccecc.org.uk/ This fraudulent domain is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/fakebanksview.php?key=63923 + Site is an imposter site being used by scammers for online conference scams. They are pretending to be the legitimate organization located here: http://www.climateandbusiness.com/ + Site is used to entice professionals to attend a pretend conference where the scammers collected fees and refer the attendees to fake hotels to place deposits for reservations. Of course there is no conference and the hotel is fake so there is no reservations. + On the contact page the address is a rental mailbox and the phone numbers are mobile redirects that can be forwarded anywhere in the world. + The registrant details on the WHOIS are either stolen or fake. This site was submitted by a victim of this scam. Many Thanks! Murray

Maybe its a matter of time? Whois shows: Domain Name: THEPALACEGARDENHOTEL.COM Registrar: ENOM, INC. Whois Server: whois.enom.com Referral URL: http://www.enom.com Name Server: NS1.HELIOHOST.ORG Name Server: NS2.HELIOHOST.ORG Status: ok Updated Date: 26-nov-2011 Creation Date: 11-nov-2011 Expiration Date: 11-nov-2012 When I went to the URL at the time of the post, it read, "Heliohost Account Queued." or something similar. The URL now indicates the connection cannot be established.

Please investigate and suspend the following fraudulent domain: parkgardenhotel.com URL: http://www.parkgardenhotel.com/ This domain was registered via your service or is hosted on your servers. Summary: This site is being used to conduct 419 Internet Advanced Fee Fraud by impersonating a non-existent hotel hosting the non-existent "The 3rd CCWG International Conference on Renewable Energy and Climate Change" in London, UK. Under this common 419 Fraud ruse (commonly targeting victims from developing countries), fake non-profit organizations offer round trip air transportation to email recipients to attend non-existent international conferences. Email recipients are then asked pay hotel registration fees in advance by money order or bank wire transfer. After fees are paid, the promised round trip airline tickets are never provided. A description of this scam can be found here: http://www.scamwarners.com/forum/viewtopic...=40&t=18787 Reasons why parkgardenhotel.com is fraudulent: 1. The fake Park Garden Hotel is not listed in the United Kingdom's Companies House registry of authorized businesses (http://wck2.companieshouse.gov.uk/adeece23d9538e876368822cba8b5aaf/wcframe?name=accessCompanyInfo). 2. The fraudulent domain's contact web page ( http://www.parkgardenhotel.com/contact-us.html ) lists the following as its address: 36 Earls Court Gardens, Earls Court, SW5 0TR United Kingdom. The real hotel at this address is the Earls Court Hotel, not the Park Garden Hotel. This is evidence of fraud. http://www.tripadvisor.com/Hotel_Review-g1...on_England.html http://www.earlscourtgardenshotel.co.uk/contact.htm 3. The fraudulent domain's contact web page ( http://www.parkgardenhotel.com/contact-us.html ) lists the following telephone numbers: +44 (0) 702 401 4008, +44 (0) 702 401 3433, and +44 (0) 702 409 4303 as main contact telephone numbers. These telephone number resolves to be personal (non-business) telephone numbers ( http://www.numberingplans.com/?page=analysis&sub=phonenr ). A legitimate hotel would not use personal telephone numbers as main contact telephone numbers. This is an indication of fraud. 4. The fake Park Garden Hotel claims to have been established in 1913 ( http://www.parkgardenhotel.com/history.html ), however its one year domain registration was very recent (16 May 2011). This is indicative of fraud. 5. The fake Park Garden Hotel (with address) is referenced on the fraudulent Climate Change Working Group's website: http://www.icrecc.com/contactus.htm 6. The fake Climate Change Working Group offers "free" airline tickets "Registration is free of charge for delegates from developing countries. Also free flight ticket, travel insurance, visa fees and per diem to be provided for all paper presenters and participating delegates" here: http://www.icrecc.com/invitation.htm 7. It is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/fakebanksview.php?key=58989 8. The fake Climate Change Working Group website is listed in the Artists Against 419's database of fraudulent websites: http://db.aa419.org/fakebanksview.php?key=59052 If you require additional information or assistance to investigate and shut down this website, please contact me. Thank you. Sincerely, Murray