Pages in topic:   < [1 2 3 4 5] >
Translators please beware of fake email accounts
Thread poster: somya Translators Pvt. Ltd.

LegalTranslatr2  Identity Verified
United States
Local time: 05:36
Portuguese to English
+ ...
Report to Yahoo Jun 13, 2009

You should report this problem to abuse@yahoo.com

At the very least, they will terminate this e-mail account.


 

Nicole Schnell  Identity Verified
United States
Local time: 02:36
English to German
+ ...
In memoriam
This information might be of interest Jun 13, 2009

I simply googled the IP address - the same address is used for a lottery scam.

Please compare these lines in the email header:

Lottery scam:

Received: from 67.195.23.44 (HELO web111602.mail.gq1.yahoo.com) (67.195.23.44)

The email that Mohamed Kamel received:

Received: from web111602.mail.gq1.yahoo.com (web111602.mail.gq1.yahoo.com [67.195.23.44])


More information:

See more
I simply googled the IP address - the same address is used for a lottery scam.

Please compare these lines in the email header:

Lottery scam:

Received: from 67.195.23.44 (HELO web111602.mail.gq1.yahoo.com) (67.195.23.44)

The email that Mohamed Kamel received:

Received: from web111602.mail.gq1.yahoo.com (web111602.mail.gq1.yahoo.com [67.195.23.44])


More information:

http://74.125.155.132/search?q=cache:M8tBfVHiVQUJ:www.opgelichtopinternet.nl/cgi-bin/yabb2/YaBB.pl?num=1220715202/46%20"67.195.23.44"&cd=4&hl=en&ct=clnk&gl=us
Collapse


 

Didier Caizergues
Local time: 11:36
English to French
+ ...
How about we stick to known domain names? Jun 13, 2009

Hi all!

I'm new here and I certainly don't want to speak out of turn, but how about we stick to know domain names when we quote? Most of the outsourcers who propose projects on this website do so from their email address in their company's (however small, like mine) domain name (e.g.: dcaizergues@dctraductions.com; that's my domain name).

Any quote request coming from a personal-looking Yahoo! or Gmail,
... See more
Hi all!

I'm new here and I certainly don't want to speak out of turn, but how about we stick to know domain names when we quote? Most of the outsourcers who propose projects on this website do so from their email address in their company's (however small, like mine) domain name (e.g.: dcaizergues@dctraductions.com; that's my domain name).

Any quote request coming from a personal-looking Yahoo! or Gmail, or Hotmail address should, if not ignored, at least investigated before supplying.

What do you think?
Collapse


 

Natalie  Identity Verified
Poland
Local time: 11:36
Member (2002)
English to Russian
+ ...

MODERATOR
Hi Mohamed Jun 13, 2009

In fact, it would be better to send the headers to support, however, as you have placed them here, I can say that the offender is located in Egypt, not in India...

I can only repeat once more: dear all, please be VERY attentive while accepting jobs whom new outsourcers! please double check everything and remember that company representatives usually do not use hotmail, yahoo and other free email services.


 

Mohamed Kamel  Identity Verified
Egypt
Local time: 11:36
English to Arabic
+ ...
Really!!! Jun 13, 2009

Natalie wrote:

In fact, it would be better to send the headers to support, however, as you have placed them here, I can say that the offender is located in Egypt, not in India...

I can only repeat once more: dear all, please be VERY attentive while accepting jobs whom new outsourcers! please double check everything and remember that company representatives usually do not use hotmail, yahoo and other free email services.



Dear Natalie,

When I search about the offender IP address [67.195.23.44], it reflects that the offender is in USA not in Egypt! Could you tell me how did you do that? I will send the headers to support.

Thanks,
Mohamed Kamel

[Edited at 2009-06-14 04:12 GMT]


 

Narasimhan Raghavan  Identity Verified
Local time: 15:06
English to Tamil
+ ...
In memoriam
I too had an inquiry from this socalled Ajoy Singh Jun 14, 2009

But fortunately he could not accept my deadline/rate. I checked the address of the Delhi number 22484180 and I get the address as "Archana Singh, A 80/81, Second Floor, Pandav Nagar, Delhi - 110092.

I feel that it is a person known to Ajoy Singh.

Thank you very much for this timely warning.

Regards,
N. Raghavan


 

Laurent KRAULAND (X)  Identity Verified
France
Local time: 11:36
French to German
+ ...
IP of server Jun 14, 2009

Mohamed Kamel wrote:

When I search about the offender IP address [67.195.23.44], it reflects that the offender is in USA not in Egypt!


Hi Mohamed and all,
as a rule, all mails from free Yahoo! US accounts (and maybe those from other countries, I am not sure) come with this IP: it is the IP of their server, which is located in Sunnyvale, CA - and therefore it is useless as such to track e-mails back to the sender.

Laurent K.

PS: as an additional information, the "correct" address for reporting abuse of this server is network-abuse [at] cc.yahoo-inc [dot] com.

[Edited at 2009-06-14 19:54 GMT]


 

Natalie  Identity Verified
Poland
Local time: 11:36
Member (2002)
English to Russian
+ ...

MODERATOR
Hi Mohamed Jun 14, 2009

The staff is aware already - thank you for posting the headers.
[67.195.23.44] is not the offender's address, it is just a yahoo server.

Best,
Natalia


 

Nicole Schnell  Identity Verified
United States
Local time: 02:36
English to German
+ ...
In memoriam
Thanks, BTW Jun 14, 2009

Natalie wrote:

[67.195.23.44] is not the offender's address, it is just a yahoo server.


Just learned something.


 

Mohamed Kamel  Identity Verified
Egypt
Local time: 11:36
English to Arabic
+ ...
Thanks Jun 15, 2009

Natalie wrote:

The staff is aware already - thank you for posting the headers.
[67.195.23.44] is not the offender's address, it is just a yahoo server.

Best,
Natalia


Thanks Natalie and everybody

Then which is the offender's correct IP? I'm very confused.

Thanks again,
Mohamed Kamel


 

Natalie  Identity Verified
Poland
Local time: 11:36
Member (2002)
English to Russian
+ ...

MODERATOR
Sender's IP Jun 15, 2009

Hi Mohamed,

You should look for Received: from followed by the IP address between square brackets [ ].
If there are many instances of Received: from with the IP address, select the IP address in the last pattern. If there are no instances of Received: from with the IP address, select the first IP address in X-Originating-IP.

In our case we have several instances of Received: from with the IP address, so we should look for the la
... See more
Hi Mohamed,

You should look for Received: from followed by the IP address between square brackets [ ].
If there are many instances of Received: from with the IP address, select the IP address in the last pattern. If there are no instances of Received: from with the IP address, select the first IP address in X-Originating-IP.

In our case we have several instances of Received: from with the IP address, so we should look for the last instance. In this case it is "Received: from [41.234.203.22]", so that's the real sender's IP.

HTH,
Natalia
Collapse


 

Mohamed Kamel  Identity Verified
Egypt
Local time: 11:36
English to Arabic
+ ...
Many thanks Natalie Jun 16, 2009

Natalie wrote:

Hi Mohamed,

You should look for Received: from followed by the IP address between square brackets [ ].
If there are many instances of Received: from with the IP address, select the IP address in the last pattern. If there are no instances of Received: from with the IP address, select the first IP address in X-Originating-IP.

In our case we have several instances of Received: from with the IP address, so we should look for the last instance. In this case it is "Received: from [41.234.203.22]", so that's the real sender's IP.

HTH,
Natalia


Dear Natalie,

Thank you so much for your help.
Please note that the below email has been sent to nonyamostafa@gmail.com [In the to field], while my e-mail address was in the BCC filed. Does this make any difference?

Many thanks again for your help.

Mohamed Kamel

-------------------------------------------------------------------------------
Delivered-To: mk4translation@gmail.com
Received: by 10.204.63.137 with SMTP id b9cs81842bki;
Thu, 7 May 2009 04:00:19 -0700 (PDT)
Received: by 10.114.134.1 with SMTP id h1mr2186279wad.47.1241694018071;
Thu, 07 May 2009 04:00:18 -0700 (PDT)
Return-Path:
Received: from web111602.mail.gq1.yahoo.com (web111602.mail.gq1.yahoo.com [67.195.23.44])
by mx.google.com with SMTP id q20si15070766pog.6.2009.05.07.04.00.15;
Thu, 07 May 2009 04:00:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of somyatranslation@yahoo.com designates 67.195.23.44 as permitted sender) client-ip=67.195.23.44;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of somyatranslation@yahoo.com designates 67.195.23.44 as permitted sender) smtp.mail=somyatranslation@yahoo.com; dkim=pass (test mode) header.i=@yahoo.com
Received: (qmail 7738 invoked by uid 60001); 7 May 2009 11:00:15 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1241694015; bh=1zTMHoSz891CoFopvPfp48QBrhI/o+l49nUpszfJ9Ag=; h=Message-ID:X-YMail-OSG:Received:X-Mailerate:From:Subject:To:MIME-Version:Content-Type; b=ZY//BckifSQiDs2uKCVQT86plxJvil3UCqRqVAMqfHDEHFyeC3y3fKsrXE+ZKSN0j9hoFmyzGCEdvNVrhML+esMrAhzbp6PR wEZJu0+inAgC8+6zRZ9M1FkdPEVVgNukJrDHuHFPekVCFbeaWrHmiIU3WIWwO2dMj0db3BKNJTw=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailerate:From:Subject:To:MIME-Version:Content-Type;
b=C1wdQ/cRlUMj0CWtxl8QG0/P0IowXIES3y4Q7qCnHotCzlUvbdiYCEvE9Xw+6UTHe+tkqGJ7hAAAAIZwc49uBN5hWc2rIA1t GzE0f7MgB1PoxLEInzgHm36YEFPn2HoGEw7PoD5B/E3meHX0Nsd5BeV9Rj4iSFzKtu+b00pIzTs=;
Message-ID:
X-YMail-OSG: LiLMMwgVM1kwx5tRUIGKbVgkvVXHxvwS5DFssThgDSWdCf6h3eoidujdbJHz2BKfLFaf2nH5suzJVntOkqfx2JaZkaZhL8q1Q4 gIkLr_6D4v56Ff1nvAEy_DqTmLpsqxix2zQupBH_Q42MWxQoo01ohS.mhDCts3QyEbg9Vg7c2GRlArJkcr3OfmxCcxobOdsR1hGA yXgfRw2Iewn8qVj6Ob7EzT.XPkYTTmqA4e2Go2Xm4xEgotUx_vp5YQYe0jXMrJ1Mivlbmn8IF9r25sdL21xii7BdMMXykJUbLL0C KGNOhJ8uCjXCXElKBEB_c109GmWxccW7s3wh_FFKeVmaq0cIjwrfgvK5qApKHNC2TO2s_I
Received: from [41.234.203.22] by web111602.mail.gq1.yahoo.com via HTTP; Thu, 07 May 2009 04:00:15 PDT
X-Mailer: YahooMailClassic/5.2.20 YahooMailWebService/0.7.289.10
Date: Thu, 7 May 2009 04:00:15 -0700 (PDT)
From: Somya Translation
Subject: English to Arabic Translation by Trados / 87626 words
To: nonyamostafa@gmail.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1928384884-1241694015=:178"
X-EsetId: 9901D62A259E74698607D67D26CB32


 

Mohamed Kamel  Identity Verified
Egypt
Local time: 11:36
English to Arabic
+ ...
An idea Jun 16, 2009

Dear all,

I think that we can post an announcement on proz and other translators communities by posting the names of the files I translated to know who is the agency or the translator that offered this job originally to this fraud.

What do you think?

Please let me hear from you and I'm ready to post the names of the four technical files I received from this fraud.

Thanks,
Mohamed Kamel


 

Natalie  Identity Verified
Poland
Local time: 11:36
Member (2002)
English to Russian
+ ...

MODERATOR
No Jun 16, 2009

No, Mohamed, your email there does not make any difference.

Natalia


 

Mohamed Kamel  Identity Verified
Egypt
Local time: 11:36
English to Arabic
+ ...
Many thanks Jun 16, 2009

Natalie wrote:

No, Mohamed, your email there does not make any difference.

Natalia


Many thanks Natalie,

All the IP's nearly reflect the same place. Now, it's worth mentioning to apologize to [The real] Somya Translators.

Mohamed Kamel


 
Pages in topic:   < [1 2 3 4 5] >


To report site rules violations or get help, contact a site moderator:

Moderator(s) of this forum
Alejandro Cavalitto[Call to this topic]

You can also contact site staff by submitting a support request »

Translators please beware of fake email accounts

Advanced search







SDL Trados Business Manager Lite
Create customer quotes and invoices from within SDL Trados Studio

SDL Trados Business Manager Lite helps to simplify and speed up some of the daily tasks, such as invoicing and reporting, associated with running your freelance translation business.

More info »
SDL Trados Studio 2019 Freelance
The leading translation software used by over 250,000 translators.

SDL Trados Studio 2019 has evolved to bring translators a brand new experience. Designed with user experience at its core, Studio 2019 transforms how new users get up and running and helps experienced users make the most of the powerful features.

More info »



Forums
  • All of ProZ.com
  • Term search
  • Jobs
  • Forums
  • Multiple search