UNECE eVacancy Services <[email protected]>

By the way, what's the weather in Panama these days?

____________________________________________________________

Domain Name:UNCES.ORG
Domain ID: D176723404-LROR
Creation Date: 2015-06-30T22:33:20Z
Updated Date: 2015-06-30T22:34:53Z
Registry Expiry Date: 2016-06-30T22:33:20Z
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Sponsoring Registrar IANA ID: 48
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibited
Domain Status: serverTransferProhibited -- http://www.icann.org/epp#serverTransferProhibited
Registrant ID:537e559e0ebc27ea
Registrant Name:WhoisGuard Protected
Registrant Organization:WhoisGuard, Inc.
Registrant Street: P.O. Box 0823-03411
Registrant City:Panama
Registrant State/Province:Panama
Registrant Postal Code:00000
Registrant Country:PA
Registrant Phone:+507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email:[email protected]
Admin ID:537e559e0ebc27ea
Admin Name:WhoisGuard Protected
Admin Organization:WhoisGuard, Inc.
Admin Street: P.O. Box 0823-03411
Admin City:Panama
Admin State/Province:Panama
Admin Postal Code:00000
Admin Country:PA
Admin Phone:+507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email:[email protected]
Tech ID:537e559e0ebc27ea
Tech Name:WhoisGuard Protected
Tech Organization:WhoisGuard, Inc.
Tech Street: P.O. Box 0823-03411
Tech City:Panama
Tech State/Province:Panama
Tech Postal Code:00000
Tech Country:PA
Tech Phone:+507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email:[email protected]
Name Server:NS1.PROSPEROSERVER.COM
Name Server:NS2.PROSPEROSERVER.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned

I don't know. It has a different registrar. If it were at the mouth of the Catatumbo River, it would certainly be hit by lightning by now.

I don't know. It has a different registrar. If it were at the mouth of the Catatumbo River, it would certainly be hit by lightning by now.

But the registrar is in the US and under jurisdiction of this country. Maybe they need more messages with headers?

Hi Guys
I have a new one from the same people:
And it looks like they have an other domain UNCEG.org ( It is for United Nations Center for Economic Grow)
Also I like to thank you for this forum it help me not to be an other victim .

Thi is it:

Dear Removed (BW)
Your request to assist you in the process of obtaining your needed H-3 visa is received and so,we would immediately proceed with the filing of a H-3 Visa petition with the USCIS on your behalf in line with the US authorities guidelines from our office here in Beijing,China.
Non-American Citizen Trainees are required to obtain an H-3 Visa to participate in the new Hire Orientation and training scheduled for the Months of September, October and November 2015.
Our staff in charge of staff Travel and Accommodation arrangement would through the services of an Immigration attorney (Visadesk) file Form I-129 and nominated receiving agent (Messers DING TING CO.LTD.) for your region, Petition for Non immigrant Worker, with the U.S. Citizenship and Immigration Services (USCIS) on your behalf for the procurement of a H-3 Visa from the U.S Embassy in your country of residence.
Please see attached documents for your prompt attention and action,viz: VISA PRO and I-129
You would be required to Complete the part 3 ONLY(BENEFICIARY INFORMATION) and put your signature with corresponding date on part 7 ONLY on Form i-129 as attached , Petition for a Non immigrant Worker.You can hand write or type in,which ever is convenient for you.For the VISA DESK form,please complete all blank spaces.
The other portions on the Form i-129 that concerns your employers or that you do not understand shall be completed by us.
What is the purpose of the H-3 visa?
The United States issues H-3 Temporary Trainee Visas to foreign nationals employed outside the U.S. and who come to the U.S. to undertake an established training program
What is the next step once the petition from USCIS is received?
The petition is sent to the trainee country of residence along with other training documents.He/She would now submit a non immigrant visa application with the U.S. consulate in his or her country along with the notice of approval, Form I-797 obtained from the USCIS for the immediate issuance of a H-3 Visa to attend the training.
Note that with your USCIS visa petition approved with the processing by VISA DESK,you would not need any more to go through the rigorous process in obtaining special training visas from the US embassy in your country.This is the basic advantage of using them(VISA DESK)through us.
If you are to be accompanied to the training, he/she would require another form to be filled.Let us know so that we can forward that relevant form to him/her through you.
Please note that Holders of U.S Business or Tourist Visa (B1/B2) cannot participate in the Training with such Visas a. A petition for Non Immigrant worker must be filed and obtained for each trainee who is not a U.S Citizen.
The Legal fee is the fee charged to process and obtain the petition by Visa Desk. This is applicable for both the Regular and Premium Process and the Charge is the same for both cases.
The breakdown of the charges is stated below for Premium Process:
1. USCIS Filing Fee $1,320.00 USD.
2. Visa Desk Legal Fee $1,390.00 USD.
3. Form I-129 filing fee $1,350.00 USD.
4. Delivery & Courier charges-Depending on Location
This is suitable for any of the Training session for September and October 2015.
The breakdown of the charges is stated below for Regular Process:
1. USCIS Filing Fee $320.00 USD.
2. Visa Desk Legal Fee $1,390.00 USD.
3. Form I-129 filing fee $1,000.00 USD.
4. Delivery & Courier Charges-Depending on Location
This is suitable for any training session for November 2015
Application Process:
In order to obtain H-3 classification, the U.S. employer or organization must file a Form I-129, Petition for Non immigrant Worker. The petition must be filed with the information provided above
Do Visit Visa Desk webpage to confirm associated fees and charges -http://www.visadesk.com/H3-Visa.asp
WHY CHOOSE VISA DESK?
Visa Desk Attorneys have handled thousands of immigration matters successfully. Visa Desk enjoys one of the industry’s highest success rates as evidenced by client testimonials. Visa Desk has experience representing clients from every state in the United States and from over 40 countries around the world. Visa Desk’s experienced attorneys deliver proven results. Visa Desk's state-of-the-art online visa processing technology combined with old-fashioned customer service offers you economical but effective legal service.
Therefore,please contact Mr. Henry Stevenson of our accounts department via the email address as follows:
[email protected] for our nominated bank account details and invoice for the payment of your USCIS Visa Petition processing and delivery charges stating clearly which of the methods between REGULAR and PREMIUM that suits you.
Kindly note that the Regular processing method takes 1- 3 months in processing while the Premium processing method take 4-15 working days to process.
Thank you for your co-operation and awaiting your response
Regards,
Dr. Joe Adjei
Administrative Officer
Beijing Office,UNCEG

Thank you for your reply.... Since last their domain wasn't killed despite the Law, I am directly teasing these guys, and this is indeed fun...And this new domain is surely my new victim.... Don't know how yet...

Seriously, guys... American legislation doesn't work! Please help me to entice these bastards to my country... Here they'll face the real justice!

But, unfortunately, I don't think these guys would come to Kazakhstan...Because recently I was upset and wrote what I think about these scamers frankly.... Sorry, I also sent them some pictures, which they surely didn't like.... They stopped responding me... These dudes're quite vulnerable...Let's try Russia... I can arrange...

Hi Alex
you like more fun they have a new domain....
I' sending you a new mail I receive today.
I will tray to make them to react asking for more info
Have fun




El 29/08/2015, a las 1:45, UNCEG eVacancy Services <[email protected]> escribió:

Dear xxxxxxxxxx,

Since no body has heard anything from you,may we safely conclude that you
are no longer interested in pursuing this employment.?

Therefore,you are directed to send in your job decline letter ASAP to
enable us delete your details from our system.

We wish you the best of luck in all your future endeavors.

Regards,

Thomas Ankerstjerne Lundum
Head, Executive Support Unit /eRecruitment Unit
Human Resources Management Service(UNCEG)
Millbank Tower (21st Floor)
21–24 Millbank
London SW1P 4QH
United Kingdom
Alternative email: [email protected]
Tel:+447937150660

Oscar, thanks for the post and welcome to scamwarners. Can you please post the complete ( full ) headers of the email you posted? If you don't know how to reveal the complete headers, see the link at the bottom of my post for info on your email program.

Information on phone number range +44 79371XXXXX
Number billable as mobile number
Country or destination United Kingdom
City or exchange location
Original network provider* Jersey Telecom


there does not seem to be a website there, so it must be used for only email.
canonical name unces.org.
aliases
addresses 208.79.237.170
Domain Whois record

Queried whois.publicinterestregistry.net with "unces.org"...

Domain Name:UNCES.ORG
Domain ID: D176723404-LROR
Creation Date: 2015-06-30T22:33:20Z
Updated Date: 2015-08-25T15:38:05Z
Registry Expiry Date: 2016-06-30T22:33:20Z
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Sponsoring Registrar IANA ID: 48
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibited
Domain Status: serverTransferProhibited -- http://www.icann.org/epp#serverTransferProhibited
Registrant ID:537e559e0ebc27ea
Registrant Name:WhoisGuard Protected
Registrant Organization:WhoisGuard, Inc.

DNS records

name class type data time to live
unces.org IN SOA
server: ns15.qservers.net
email: [email protected]
serial: 2015082503
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
unces.org IN NS ns15.qservers.net 86400s (1.00:00:00)
unces.org IN NS ns16.qservers.net 86400s (1.00:00:00)
unces.org IN A 208.79.237.170 14400s (04:00:00)
unces.org IN MX
preference: 0
exchange: unces.org
14400s (04:00:00)

unces.org has already been reported for fraud and has jumped. Could you post an email from you to unces.org, with complete headers, and the reply thereto, with complete headers? That may be needed to convince the new hoster that the site is on their server and is in use for fraud.

unceg.org has been disabled.

Hi
Here is the header:

I hope it helps, I will send them a response to gain more time.

Please Stay in touch

Responder a: [email protected]
X-Filter-Id: s0sct1PQhAABKnZB5plbIaom3P9kJPrAUxMQeJLNP7tTq+DOZDJzZf/t1imnym9Bx1wTMkEUUoeb KIhkyzl2dLPlSdlVrh68K9QZrdsmAxEoxMAVTiTBaKdqMQwqgOlCP0M9G/Ob0PL4ZGtkVyDn7Q7z IivwCosuxiMvJQkwbRDhnqfPUlgYQ7AqJLUDm4PjbvnbX2Uvcpccggw/yeROGTAqBnesAYQmaNbm qVXZkprG1qQKfSYwusLvbFJ23adJfNU0d5457x7k8EbKSuPt/sgg/BTQdyv+mlK2aB4XoSnRA+kJ Q5wMpUj3D781oGvPPBfyCUQPGRfAuQJyQcUhQ7yf3cXNu6nUVBjMIUudpH0O9+edzTv6gzO1hbUY Iuwsk/FA+YYsza6E4ppyaS4KeleBP+eMXrBnVSGGwsdPbY9hexjuk+m52LttQtfiBalj4Q2PNXpC IFixjoqJyx84iFRA0LWI/bE2pIOvEHVFkE+/IsLVvFNKTmoioIWtAYKmuSn4K28EqnCgDL8FjYhQ Y+idX4Ts4xdG+C13IyWeZaKW1TKFQs0C4I3c7KXIYXCkrFHOwsmRBgksbGxA19jWIA==
X-Confirm-Reading-To: "UNCEG eVacancy Services" <[email protected]>
Disposition-Notification-To: "UNCEG eVacancy Services" <[email protected]>
X-Spam-Level:
X-Spamexperts-Evidence: Combined (0.65)
X-Recommended-Action: accept
X-Filter-Fingerprint: IFrWXGses7OKB5S5G8/dJfl+3wvwn7+SNaMrU0HGnolA3cTUQ1R++keuE7RDJ8Kg3RbMLUalw1oC mj99/u+Poh38tEMU4IgC4sNz49qn3HHnhRv/ZJ3kEy8bfiAr+Fb/UpndEJ0YoaLytXXo8BMTaX2p Mk7LBarWD9Fj4R3eIu5amSKkALoA6KDzkQ8jq89Qglr+eUaqsXi6ilYykBRNmy1w3rhXI7ypWHcC zReLskSoC1jzfYuYzO5TaopJL1l0EkXKTCB9mgAH2nNvM1GFDcH5C2MO7hTENZJE35bUvwA=
X-Sender-Warning: Reverse DNS lookup failed for 96.30.48.102 (failed)
User-Agent: SquirrelMail/1.5.2 [SVN]
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on serv01.siteground198.com
Authentication-Results: mailspamprotection.com; dkim=pass header.i=unces.org
Return-Path: <[email protected]>
X-Report-Abuse-To: [email protected]
Envelope-To: <removed. MW>
X-Antiabuse: This header was added to track abuse, please include it with any abuse report
X-Antiabuse: Primary Hostname - seven.qservers.net
X-Antiabuse: Original Domain - elvod.com
X-Antiabuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-Antiabuse: Sender Address Domain - unces.org
Delivery-Date: Sat, 29 Aug 2015 01:45:28 -0500
X-Spam-Status: No, score=0.8 required=4.0 tests=BAYES_40,RDNS_NONE, T_DKIM_INVALID shortcircuit=no autolearn=no autolearn_force=no version=3.4.0
Message-Id: <[email protected]>
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Received: from elvod by serv01.siteground198.com with local-bsmtp (Exim 4.80.1) (envelope-from <[email protected]>) id 1ZVZtB-0004pk-9h for xxxxxxxxxx; Sat, 29 Aug 2015 01:45:28 -0500
Received: from [96.127.176.250] (port=41104 helo=se3.mailspamprotection.com) by serv01.siteground198.com with esmtps (UNKNOWN:RC4-SHA:128) (Exim 4.80.1) (envelope-from <[email protected]>) id 1ZVZtB-0004pX-4W for xxxxxxxxxx; Sat, 29 Aug 2015 01:45:21 -0500
Received: from [96.30.48.102] (helo=seven.qservers.net) by se3.mailspamprotection.com with esmtps (TLSv1.2:DHE-RSA-AES256-SHA:256) (Exim 4.85) (envelope-from <[email protected]>) id 1ZVZt9-0005co-Gl for xxxxxxx; Sat, 29 Aug 2015 01:45:22 -0500
Received: from localhost ([127.0.0.1]:42151 helo=unces.org) by seven.qservers.net with esmtpa (Exim 4.85) (envelope-from <[email protected]>) id 1ZVZt7-000iUV-4J; Sat, 29 Aug 2015 07:45:17 +0100
Received: from 70.39.98.68 ([70.39.98.68]) (SquirrelMail authenticated user [email protected]) by unces.org with HTTP; Sat, 29 Aug 2015 07:45:17 +0100
Content-Type: text/plain;charset=iso-8859-1
Return-Receipt-To: "UNCEG eVacancy Services" <[email protected]>
X-Get-Message-Sender-Via: seven.qservers.net: authenticated_id: [email protected]
X-Spamexperts-Class: unsure
Dkim-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=unces.org; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Reply-To:Cc:To:From:Subject:Date:Message-ID; bh=6aBQ+u8ZbT5g3kQx0tnQdHYNOZwsFJtR5ZaTG7JeIoY=; b=vgqWNVieZTbem5xYjyFPUADvtwxoKpH0lJHyqA4BXoi+TJiXs9yzwrxwJ/+YCGK+eL2kBZcb76BBKuHI2FSo00N+vOgWA2uMmfkm5NnvSAz7unUr4qN5fr+aW4i+fKtF5mdfsi5knwGfuL1E8XT9zGkqz9QJ+UXKGsQ19IpB6DmxVzgGGvbZ+QB4hhUVznznWS1UrTeqFMl6woqovPF53tMnb0SRL2l4NBUNNXeMYrDd7JaQER+/iuGlidiTlMtDMXAJqjRdS1i9fOAUvHMu9LTvwHWuwf1PPLx1oXUSlOoKzWlVuWFS14kQYAwOXkH6oyuA3BDloEfash0cHBdZag==;
Job offer Decline?

Thanks, those are good headers. The IP address is in some ISP called Sharktech, but that's all I could find about it.

Hi Alex
you like more fun they have a new domain....
I' sending you a new mail I receive today.
I will tray to make them to react asking for more info
Have fun




El 29/08/2015, a las 1:45, UNCEG eVacancy Services <[email protected]> escribió:


Thomas Ankerstjerne Lundum
Head, Executive Support Unit /eRecruitment Unit
Human Resources Management Service(UNCEG)
Millbank Tower (21st Floor)
21–24 Millbank
London SW1P 4QH
United Kingdom
Alternative email: [email protected]
Tel:+447937150660

Dear Oscar,
Thank you. But these guys already have been my pen pals for a while. They think I'm a bit rude and do not want to talk to me any more. The previous mail address was quite interesting. But here also the dudes became shy when I sent them an application filled by hand. Probably they recognized my handwriting... Unfortunately there's no way to fill their bloody application digitally...
I am glad they've already moved to UK. Travelling is good for nerves and mood...

If the form you are using is a PDF I can convert it to a .DOCX for you.

unces.org has already been reported for fraud and has jumped.

How could they jump? I've provided mail with headers. Actually in my country, if internet company refuses to close website of scammer I can apply to special department of police and this company will be in trouble. For the first time they will have to pay a big fine and will be forced to close a scammer, for the second time the company itself will be closed and its directors will be relocated behind the bars... Doesn't US legislation regulate internet fraud issues or closing the scammer is fully at discretion of the registrar?