Printable View
Hi,
Thank you for the warning
I am currently in the same situation except for the fact they only today, 2 November 2009 requested money in respect of housing etc.
I however decided to look into the matter and found that it is indeed a scam with a new name - OHRLLS - for the rest everything is the same
Regards
If you've got some emails to go with that it may help others avoid them.
:) first of all i would like to thank ST1202 for posting this kind of scam...... we were already on the stage of exchanging e-mail regarding the housing scheme needed for the visa.....but we e-mailed them back that we are not supposed to released any fund as stipulated in the agreement. I came across this site the other day and i have reasoned to belive that we were scammed although we havnt give any money but some information were already sent.
The involved agency are the UNDFS (United Nation Department of Field Support) and Maxwell China International Travel agency. The persons involved are Mr. Mike Waka and Mr Richard Smith both of Office of Human Resources and Management and Mr. Dennis Martins Directors of Human Resources and Management. The following e-mails they used are [human_resources@undfs-site.org], [recruitment@undfs-un.org] and [mike.waka@undfs-site.org]. The sequence of e-mail from ST1202 are very much the same with regards to the contents of the letter.
I hope this people whoever they are will be caught in the future so that they will not victimized innocent human being. I also wanted to share this as a fair warning also for those who are receiving such e-mails from this persons. As to ST1202 i sympathize on your side......may Good Lord guide us all
hi,
the following email addresses could also be part of this scam:
[humanresources@unocha-site.org], [recruitment@unocha-site.org] [jobsrecruitment@uncsd-un.org] and [human_resources@uncsd-un.org].
i'm amazed at how these documents that are sent through are so seamless, but glad that i realised it quite early. thanks for sharing these info. i hope no other people will be scammed.
these 2 email addresses are also fake:
[humanresources@unocha-site.org] and [recruitment@unocha-site.org]
@ ST1202Quote:
Originally Posted by ST1202
seems your question got overlooked by us techie types. I found it when moderating the reply above.
I have run the header through an analysis tool (see the thread at Basic email header analysis tools - a short tutorial for how to do this). The important bits are in red in the quote above.
The "209.191.69.67" and "209.191.108.97" are routing Yahoo mail servers, registered to Yahoo in Sunnyvale, CA, but may be located elsewhere.
68.142.206.146 and 68.142.201.242 are both similarly routing servers, operated by:Quote:
WHOIS - 209.191.69.67
WHOIS - 209.191.108.97
Both come out as
OrgName: Yahoo!
OrgID: YAOO
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
The ultimate origin is:Quote:
WHOIS - 68.142.206.146
WHOIS - 68.142.201.242
Both come out as
OrgName: Inktomi Corporation
OrgID: INKT
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
which is an European AOL email server, possibly in France!Quote:
WHOIS - 195.93.102.3
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Information related to '195.93.64.0 - 195.93.127.255'
inetnum: 195.93.64.0 - 195.93.127.255
netname: AOL-EU-2
descr: AOL Inc
country: US
admin-c: AOL5-RIPE
tech-c: AOL5-RIPE
status: ASSIGNED PA
mnt-by: AOL-EU-MNT
mnt-lower: AOL-EU-MNT
changed: *******@aol.net 20000220
changed: *******@aol.net 20000621
source: RIPE
person: AOL NOC
address: America Online Inc.
address: 22080 Pacific Blvd
address: Sterling, VA 20166
address: USA
phone: +1 703 265 4670
e-mail: *******@aol.net
nic-hdl: AOL5-RIPE
mnt-by: AOL-EU-MNT
changed: *******@aol.net 20000621
source: RIPE
I have a similar story to report. An email ad was circulated in my office at FAO, (ref 04-SOC-UNCSD-2611-R), I filled an application form and e-mail interview form and after a month (today) I received a job offer.
I started doubting it when I could not really find the persons indicated as HR directors anywhere in the web. However, all letters and communicatiosn appeared quite realistic (although not perfect 100%, at least for someone working at the UN like me)
The email addresses involved in the scam are:
[human_resources@uncsd-un.org]
[Jurgen.Adams@uncsd-un.org]
and the telephone number:
Mark Stanford
Director, Human Resources Department
+1-212-796-5874.
I hope this can help other people falling prey to these scams.
The site is a parking space.
http://uncsd-un.org/
uncsd-un.org
welcome to:
uncsd-un.org The domain is registered through
This is the location of our future web site. Please visit us again soon!
Domain Name:UNCSD-UN.ORG
Created On:09-Apr-2009 22: 34:02 UTC
Last Updated On:10-Dec-2009 08: 00:10 UTC
Expiration Date:09-Apr-2010 22: 34:02 UTC
Sponsoring Registrar:007 Names, Inc (R8-LROR)
Status:OK
Registrant ID:BHR9ZXBUTL
Registrant Name:walter nelson
Registrant Street1:8101 Sandy Spring Road Suite 220 No.5830
Registrant Street2:
Registrant Street3:
Registrant City:laurel
Registrant State/Province:MD
Registrant Postal Code:20707
Registrant Country:US
Registrant Phone:+202.3995678
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: boostingdazz@yahoo.com Red Flagged
Admin ID:AAQSIGITMG
Admin Name:walter nelson
Admin Street1:8101 Sandy Spring Road Suite 220 No.5830
Admin Street2:
Admin Street3:
Admin City:laurel
Admin State/Province:MD
Admin Postal Code:20707
Admin Country:US
Admin Phone:+202.3995678
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: boostingdazz@yahoo.com - Red Flagged
The Address : 8101 Sandy Spring Road laurel MD 20707 USA leads to a mall with no organisation remotely associated with the UN.
I received the same employment offers from OCHA but all the phone numbers on it were wrong, they didn't reply to Emails with questions, and when I spoke to the switchboard at an OCHA Geneva number I got through researching, they said the people named in the offers did not work for OCHA.
The real UN never asks people to pay for visa fees, housing, travel, accommodation, they either pay for it or give you allowances to cover it, in advance. Had I reached that stage, I would not have paid because I know this due to having some experience with the UN. What I did learn from it is that ALL real UN Email addresses should end in un.org or in [name of organisation]. org - eg ocha.org, unhcr.org, wfp.org . If you don't see addresses like that, don't waste your time. I hope these people who pray on innocent victims are caught.
If I'd checked the Email address for these jobs more carefully, maybe the alarm bells might have rung, and I wouldn't have wasted all that time on "applications to nowhere ..." Hope this helps someone else.
I was just today about to transfer money for an apartment in Geneva, and thought I'd double-check as I hadn't actually spoken with anybody throughout this recruitment process. I am devastated, and feeling not too clever.
Has anyone had any contact with OCHA about this? Or what can one do about the identity theft?
To help others avoid this scam, here is some additional information:
- the original e-mail came from [hresources@undp.org], which led me to believe it was authentic
- subsequent contact was with [hr@ocha-site.org], [housing@ocha-site.org] and [jnguyen@ocha-site.org]
[I've tried to send the header but I get an error about image tags, limit of 6 images per message.]