Pages in topic:   < [1 2 3 4 5] >
Translators please beware of fake email accounts
Thread poster: Somya Translators Pvt. Ltd.
Jeff Whittaker
Jeff Whittaker  Identity Verified
United States
Local time: 07:34
Member (2002)
Spanish to English
+ ...
Report to Yahoo Jun 13, 2009

You should report this problem to [email protected]

At the very least, they will terminate this e-mail account.


 
Nicole Schnell
Nicole Schnell  Identity Verified
United States
Local time: 04:34
English to German
+ ...
In memoriam
This information might be of interest Jun 13, 2009

I simply googled the IP address - the same address is used for a lottery scam.

Please compare these lines in the email header:

Lottery scam:

Received: from 67.195.23.44 (HELO web111602.mail.gq1.yahoo.com) (67.195.23.44)

The email that Mohamed Kamel received:

Received: from web111602.mail.gq1.yahoo.com (web111602.mail.gq1.yahoo.com [67.195.23.44])


More informat
... See more
I simply googled the IP address - the same address is used for a lottery scam.

Please compare these lines in the email header:

Lottery scam:

Received: from 67.195.23.44 (HELO web111602.mail.gq1.yahoo.com) (67.195.23.44)

The email that Mohamed Kamel received:

Received: from web111602.mail.gq1.yahoo.com (web111602.mail.gq1.yahoo.com [67.195.23.44])


More information:

http://74.125.155.132/search?q=cache:M8tBfVHiVQUJ:www.opgelichtopinternet.nl/cgi-bin/yabb2/YaBB.pl?num=1220715202/46%20"67.195.23.44"&cd=4&hl=en&ct=clnk&gl=us
Collapse


 
Didier Caizergues
Didier Caizergues
Local time: 12:34
English to French
+ ...
How about we stick to known domain names? Jun 13, 2009

Hi all!

I'm new here and I certainly don't want to speak out of turn, but how about we stick to know domain names when we quote? Most of the outsourcers who propose projects on this website do so from their email address in their company's (however small, like mine) domain name (e.g.: [email protected]; that's my domain name).

Any quote request coming from a personal-looking Yahoo! or Gmail,
... See more
Hi all!

I'm new here and I certainly don't want to speak out of turn, but how about we stick to know domain names when we quote? Most of the outsourcers who propose projects on this website do so from their email address in their company's (however small, like mine) domain name (e.g.: [email protected]; that's my domain name).

Any quote request coming from a personal-looking Yahoo! or Gmail, or Hotmail address should, if not ignored, at least investigated before supplying.

What do you think?
Collapse


 
Natalie
Natalie  Identity Verified
Poland
Local time: 12:34
Member (2002)
English to Russian
+ ...

MODERATOR
SITE LOCALIZER
Hi Mohamed Jun 13, 2009

In fact, it would be better to send the headers to support, however, as you have placed them here, I can say that the offender is located in Egypt, not in India...

I can only repeat once more: dear all, please be VERY attentive while accepting jobs whom new outsourcers! please double check everything and remember that company representatives usually do not use hotmail, yahoo and other free email services.


 
Mohamed Kamel
Mohamed Kamel  Identity Verified
Egypt
Local time: 13:34
English to Arabic
Really!!! Jun 13, 2009

Natalie wrote:

In fact, it would be better to send the headers to support, however, as you have placed them here, I can say that the offender is located in Egypt, not in India...

I can only repeat once more: dear all, please be VERY attentive while accepting jobs whom new outsourcers! please double check everything and remember that company representatives usually do not use hotmail, yahoo and other free email services.



Dear Natalie,

When I search about the offender IP address [67.195.23.44], it reflects that the offender is in USA not in Egypt! Could you tell me how did you do that? I will send the headers to support.

Thanks,
Mohamed Kamel

[Edited at 2009-06-14 04:12 GMT]


 
Narasimhan Raghavan
Narasimhan Raghavan  Identity Verified
Local time: 17:04
English to Tamil
+ ...
In memoriam
I too had an inquiry from this socalled Ajoy Singh Jun 14, 2009

But fortunately he could not accept my deadline/rate. I checked the address of the Delhi number 22484180 and I get the address as "Archana Singh, A 80/81, Second Floor, Pandav Nagar, Delhi - 110092.

I feel that it is a person known to Ajoy Singh.

Thank you very much for this timely warning.

Regards,
N. Raghavan


 
Laurent KRAULAND (X)
Laurent KRAULAND (X)  Identity Verified
France
Local time: 12:34
French to German
+ ...
IP of server Jun 14, 2009

Mohamed Kamel wrote:

When I search about the offender IP address [67.195.23.44], it reflects that the offender is in USA not in Egypt!


Hi Mohamed and all,
as a rule, all mails from free Yahoo! US accounts (and maybe those from other countries, I am not sure) come with this IP: it is the IP of their server, which is located in Sunnyvale, CA - and therefore it is useless as such to track e-mails back to the sender.

Laurent K.

PS: as an additional information, the "correct" address for reporting abuse of this server is network-abuse [at] cc.yahoo-inc [dot] com.

[Edited at 2009-06-14 19:54 GMT]


 
Natalie
Natalie  Identity Verified
Poland
Local time: 12:34
Member (2002)
English to Russian
+ ...

MODERATOR
SITE LOCALIZER
Hi Mohamed Jun 14, 2009

The staff is aware already - thank you for posting the headers.
[67.195.23.44] is not the offender's address, it is just a yahoo server.

Best,
Natalia


 
Nicole Schnell
Nicole Schnell  Identity Verified
United States
Local time: 04:34
English to German
+ ...
In memoriam
Thanks, BTW Jun 14, 2009

Natalie wrote:

[67.195.23.44] is not the offender's address, it is just a yahoo server.


Just learned something.


 
Mohamed Kamel
Mohamed Kamel  Identity Verified
Egypt
Local time: 13:34
English to Arabic
Thanks Jun 15, 2009

Natalie wrote:

The staff is aware already - thank you for posting the headers.
[67.195.23.44] is not the offender's address, it is just a yahoo server.

Best,
Natalia


Thanks Natalie and everybody

Then which is the offender's correct IP? I'm very confused.

Thanks again,
Mohamed Kamel


 
Natalie
Natalie  Identity Verified
Poland
Local time: 12:34
Member (2002)
English to Russian
+ ...

MODERATOR
SITE LOCALIZER
Sender's IP Jun 15, 2009

Hi Mohamed,

You should look for Received: from followed by the IP address between square brackets [ ].
If there are many instances of Received: from with the IP address, select the IP address in the last pattern. If there are no instances of Received: from with the IP address, select the first IP address in X-Originating-IP.

In our case we have several instances of Received: from with the IP address, so we should look for the la
... See more
Hi Mohamed,

You should look for Received: from followed by the IP address between square brackets [ ].
If there are many instances of Received: from with the IP address, select the IP address in the last pattern. If there are no instances of Received: from with the IP address, select the first IP address in X-Originating-IP.

In our case we have several instances of Received: from with the IP address, so we should look for the last instance. In this case it is "Received: from [41.234.203.22]", so that's the real sender's IP.

HTH,
Natalia
Collapse


 
Mohamed Kamel
Mohamed Kamel  Identity Verified
Egypt
Local time: 13:34
English to Arabic
Many thanks Natalie Jun 16, 2009

Natalie wrote:

Hi Mohamed,

You should look for Received: from followed by the IP address between square brackets [ ].
If there are many instances of Received: from with the IP address, select the IP address in the last pattern. If there are no instances of Received: from with the IP address, select the first IP address in X-Originating-IP.

In our case we have several instances of Received: from with the IP address, so we should look for the last instance. In this case it is "Received: from [41.234.203.22]", so that's the real sender's IP.

HTH,
Natalia


Dear Natalie,

Thank you so much for your help.
Please note that the below email has been sent to [email protected] [In the to field], while my e-mail address was in the BCC filed. Does this make any difference?

Many thanks again for your help.

Mohamed Kamel

-------------------------------------------------------------------------------
Delivered-To: [email protected]
Received: by 10.204.63.137 with SMTP id b9cs81842bki;
Thu, 7 May 2009 04:00:19 -0700 (PDT)
Received: by 10.114.134.1 with SMTP id h1mr2186279wad.47.1241694018071;
Thu, 07 May 2009 04:00:18 -0700 (PDT)
Return-Path:
Received: from web111602.mail.gq1.yahoo.com (web111602.mail.gq1.yahoo.com [67.195.23.44])
by mx.google.com with SMTP id q20si15070766pog.6.2009.05.07.04.00.15;
Thu, 07 May 2009 04:00:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 67.195.23.44 as permitted sender) client-ip=67.195.23.44;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 67.195.23.44 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: (qmail 7738 invoked by uid 60001); 7 May 2009 11:00:15 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1241694015; bh=1zTMHoSz891CoFopvPfp48QBrhI/o+l49nUpszfJ9Ag=; h=Message-ID:X-YMail-OSG:Received:X-Mailerate:From:Subject:To:MIME-Version:Content-Type; b=ZY//BckifSQiDs2uKCVQT86plxJvil3UCqRqVAMqfHDEHFyeC3y3fKsrXE+ZKSN0j9hoFmyzGCEdvNVrhML+esMrAhzbp6PR wEZJu0+inAgC8+6zRZ9M1FkdPEVVgNukJrDHuHFPekVCFbeaWrHmiIU3WIWwO2dMj0db3BKNJTw=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailerate:From:Subject:To:MIME-Version:Content-Type;
b=C1wdQ/cRlUMj0CWtxl8QG0/P0IowXIES3y4Q7qCnHotCzlUvbdiYCEvE9Xw+6UTHe+tkqGJ7hAAAAIZwc49uBN5hWc2rIA1t GzE0f7MgB1PoxLEInzgHm36YEFPn2HoGEw7PoD5B/E3meHX0Nsd5BeV9Rj4iSFzKtu+b00pIzTs=;
Message-ID:
X-YMail-OSG: LiLMMwgVM1kwx5tRUIGKbVgkvVXHxvwS5DFssThgDSWdCf6h3eoidujdbJHz2BKfLFaf2nH5suzJVntOkqfx2JaZkaZhL8q1Q4 gIkLr_6D4v56Ff1nvAEy_DqTmLpsqxix2zQupBH_Q42MWxQoo01ohS.mhDCts3QyEbg9Vg7c2GRlArJkcr3OfmxCcxobOdsR1hGA yXgfRw2Iewn8qVj6Ob7EzT.XPkYTTmqA4e2Go2Xm4xEgotUx_vp5YQYe0jXMrJ1Mivlbmn8IF9r25sdL21xii7BdMMXykJUbLL0C KGNOhJ8uCjXCXElKBEB_c109GmWxccW7s3wh_FFKeVmaq0cIjwrfgvK5qApKHNC2TO2s_I
Received: from [41.234.203.22] by web111602.mail.gq1.yahoo.com via HTTP; Thu, 07 May 2009 04:00:15 PDT
X-Mailer: YahooMailClassic/5.2.20 YahooMailWebService/0.7.289.10
Date: Thu, 7 May 2009 04:00:15 -0700 (PDT)
From: Somya Translation
Subject: English to Arabic Translation by Trados / 87626 words
To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1928384884-1241694015=:178"
X-EsetId: 9901D62A259E74698607D67D26CB32


 
Mohamed Kamel
Mohamed Kamel  Identity Verified
Egypt
Local time: 13:34
English to Arabic
An idea Jun 16, 2009

Dear all,

I think that we can post an announcement on proz and other translators communities by posting the names of the files I translated to know who is the agency or the translator that offered this job originally to this fraud.

What do you think?

Please let me hear from you and I'm ready to post the names of the four technical files I received from this fraud.

Thanks,
Mohamed Kamel


 
Natalie
Natalie  Identity Verified
Poland
Local time: 12:34
Member (2002)
English to Russian
+ ...

MODERATOR
SITE LOCALIZER
No Jun 16, 2009

No, Mohamed, your email there does not make any difference.

Natalia


 
Mohamed Kamel
Mohamed Kamel  Identity Verified
Egypt
Local time: 13:34
English to Arabic
Many thanks Jun 16, 2009

Natalie wrote:

No, Mohamed, your email there does not make any difference.

Natalia


Many thanks Natalie,

All the IP's nearly reflect the same place. Now, it's worth mentioning to apologize to [The real] Somya Translators.

Mohamed Kamel


 
Pages in topic:   < [1 2 3 4 5] >


To report site rules violations or get help, contact a site moderator:

Moderator(s) of this forum
Lucia Leszinsky[Call to this topic]

You can also contact site staff by submitting a support request »

Translators please beware of fake email accounts







TM-Town
Manage your TMs and Terms ... and boost your translation business

Are you ready for something fresh in the industry? TM-Town is a unique new site for you -- the freelance translator -- to store, manage and share translation memories (TMs) and glossaries...and potentially meet new clients on the basis of your prior work.

More info »
Trados Business Manager Lite
Create customer quotes and invoices from within Trados Studio

Trados Business Manager Lite helps to simplify and speed up some of the daily tasks, such as invoicing and reporting, associated with running your freelance translation business.

More info »