Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Victoria <victoria.yak33@gmail.com> (Gelesen: 202 mal)
 
Bommo
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 19486
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Victoria <victoria.yak33@gmail.com>
14. September 2023 um 11:17
 
Hi. Now we will communicate with you here. =)
I am glad that we can continue to communicate in such an interesting way. I hope we both like it. This is the first time for me and I hope it will be an amazing experience. I live in the Republic of Bulgaria, in the city of Sofia. It is the capital of Bulgaria. Although it is a small, but very beautiful city) You probably don t even know about him?) When I moved here in 2015, it was a little hard to get used to, but now I can probably even say with pride in my soul that this is my second homeland, which I love very much)
I hope you like me in the photos that I will send you. When I tell you about it, I m a little shy to talk about it) But in any case, I really hope that you will like me)))
As you probably already realized. I am looking for a person with similar interests with whom I could make friends. A person with whom I could build my future.
I am 33 years old, my birthday is May 5, I am a Taurus by zodiac sign. And you? How old are you? I believe that age is not an indicator, since a person gets the experience of life in different ways regardless of time. And one person can learn in life in one year, what another cannot learn in 10. So age is just a number for me. What do you think about our age difference?
As for my interests, I am a very versatile person and I have many interests, and therefore I think that we will find something to talk about and we will be able to find a common language. Smiley
Have a nice day, Victoria!

Spoiler:
Delivered-To: xxx
Received: by 2002:a59:c62b:0:b0:3aa:433a:6c40 with SMTP id h11csp880331vqr;
Fri, 24 Mar 2023 10:21:24 -0700 (PDT)
X-Received: by 2002:a17:902:cad5:b0:1a1:c98c:bd4d with SMTP id
y21-20020a170902cad500b001a1c98cbd4dmr2685739pld.38.1679678483887; Fri, 24
Mar 2023 10:21:23 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1679678483; cv=none; d=google.com;
s=arc-20160816;
b=VoF2WqYhyRL7XHBf8yhM72GYI3KK2J1NhHWdohbij80nxo890dewvtFopfoyq/+dOL
HCnQLvHTMq8r8Jn0RKzRSOhXJreWoOyLE+D1UUhT1huWpUtM7vIxQivBe52tqd9gERGx
NP9LQYdMMoIB5mBx8hhXJEToTwwZYcLeth9fVZnBVrDOGKU/S+6OOe42Giv1RkHSQxnU
5pg3ck0hteprAHH19vFU8pqla7Mh56fMQHHISq/WV6HXQ4AYinXtrk3U8hmoQZ1AvTOJ
stcvYCWYWEcRoU/3wEepRC+mQeYjquxbhirexEZWgkThE6Ijqru3mSimZHKgb3ZFSYfa O23A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
s=arc-20160816;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=BV/FOsSCKTsyMVqEttGaFbkMhCQ6yvREhHG6kW1I5o8=;
b=Cm+FmkedRwvRmS2KhnQO8NqTKW2k0KJKOlrF5MG17TI6NOh02LlgYSM2b0cNoj6emA
wIm1lYK9XE+oOioMSKUj8E1jF6H37I7FlhmzQNNe7vx+S5UbIuBNl7fz2/8dBOdeGtIx
iWS3KbkHCESSoJKkiGFv23HbjEA9LsClNA8c9IIx0LUtKv30kIXf3MT8mhvc0Hnb0w1/
WEFVOovjUwO35qZYp6YlUVkwO5IJIAGv0NK6ib80WRzeirlU8vz4SK5q6CL/r/WJ02RB
I+29MY5erBF2qalB4GDnQGbHCNeMqcg5YLevxBDlbWp4zmpN+dbDG9P3rHof5oTqQrmB MoVw==
ARC-Authentication-Results: i=1; mx.google.com; dkim=pass
Quelltext.i=@gmail.com Quelltext.s=20210112 Quelltext.b=Pu+7lWLm; spf=pass
(google.com: domain of victoria.yak33@gmail.com designates 209.85.220.65 as
permitted sender) smtp.mailfrom=victoria.yak33@gmail.com; dmarc=pass
(p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
Return-Path: <victoria.yak33@gmail.com>
Received: from mail-sor-f65.google.com (mail-sor-f65.google.com.
[209.85.220.65]) by mx.google.com with SMTPS id
m1-20020a170902db0100b0019927d31610sor11446668plx.157.2023.03.24.10.21.23
for <xxx> (Google Transport Security); Fri, 24 Mar 2023
10:21:23 -0700 (PDT)
Received-SPF: pass (google.com: domain of victoria.yak33@gmail.com
designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;
Authentication-Results: mx.google.com; dkim=pass Quelltext.i=@gmail.com
Quelltext.s=20210112 Quelltext.b=Pu+7lWLm; spf=pass (google.com: domain of
victoria.yak33@gmail.com designates 209.85.220.65 as permitted sender)
smtp.mailfrom=victoria.yak33@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE
dis=NONE) Quelltext.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20210112; t=1679678483;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to; bh=BV/FOsSCKTsyMVqEttGaFbkMhCQ6yvREhHG6kW1I5o8=;
b=Pu+7lWLm+VII3fIv3T+y9s2KohFeBg4fGr8mdlQ4yGGtDxC1RcAzuFcMMgwe1K+Qi0
YdtXy02lt007fD0Quw6ArxvMJuxMOlXWC0bavV4Wj7rGVpg9xgh9niubahGyMKGpPKzJ
lPTstJhnj4OKqMsNYGMAM3JQT93f7SvoaqkohQFqQxaGQU0g/un/LZOJ7/LVLKPTFPB5
uF4wCSQc8U51D9VkQmC5m9lyxr1aJjEPe9zKyMpfpDx0lIXiXnRbq0OH6sBwYDei5QXP
eBOrlf8VLr0H0gZ2QXmCRk0ij/afhRndpItjWf961JBJSSptNrwUWLNeeKLrFBHZbA0O atXA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20210112; t=1679678483;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=BV/FOsSCKTsyMVqEttGaFbkMhCQ6yvREhHG6kW1I5o8=;
b=ok0UlFj5McjN6awq603jDnI390fUUJD9NZMGVNWZ1KSacjG89VBlGy6vKKZtPZkTq8
ZNzA6uv3aA6Vv7y+iGAQ3TOlozwcTYQDhOzeYkD2gKq7nYeM6kIVDld4RuxE7astomf0
OlZHKXqlVlwP05zeLBorUclB4v+cJ7tMrp3czi0l8VKcZo8qdD08meLxdR/7uL1KFObx
4Iyqf1lgDMvHD+1RyxnIN84FzIfpS2SC0BeQ5Q/0lC6upX2W8uUIj7XyoZUo6rI7FYaK
fQQQBfPsGDse+kb+wkwF4jnV79AHoviWOhh8JSy1DTDqdxyA8FnnlYvNfiQx/PPo7tFJ Kplw==
X-Gm-Message-State:
AAQBX9dxoOyMF2N7K1heTlo3KAfB/g6an8i1bjVmgXvYKioJT0/Rmd3n
+fV8fjufhznkepovDuyBgpnE8+dTQY5q/wK44Yc=
X-Google-Smtp-Source:
D56j7YGVjFU=
X-Received: by 2002:a17:903:555:b0:1a0:440e:ecf9 with SMTP id
jo21-20020a170903055500b001a0440eecf9mr1122378plb.5.1679678483413; Fri, 24
Mar 2023 10:21:23 -0700 (PDT)
MIME-Version: 1.0
From: vika victoria <victoria.yak33@gmail.com>
Date: Fri, 24 Mar 2023 14:23:28 -0400
Message-ID: <CAOp3nCLsDnoop8To4aK1GrFvUYsVKYiGVzBCdMfpP1xa=ioVYw@mail.gmail.com>
Subject: hey
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000573d4005f7a89f2e"
Bcc: xxx
X-Evolution-Source: ff142b335906b5d3f4362efe3cc38298ee780a5d


Off Topic Kommentar25009
« Zuletzt geändert: 14. September 2023 um 11:19 von Bommo »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Bommo
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 19486
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Re: Victoria <victoria.yak33@gmail.com>
Antwort #1 - 14. September 2023 um 11:19
 
Hi
Today is such a difficult day, there is a lot of turmoil at work all day... A lot of people came and it is simply impossible to explain and sort out their problem to everyone) So I m already tired. By the way, I work as an insurance agent, I am engaged in life and health insurance of people, as well as property insurance. And who do you work for? How much of your time does work take?
By the way, you said you didn t get my photos. It turns out that the whole point is that the photos were too high quality and it was not possible to send them by mail. Of course I don t want to brag, but recently I decided to treat myself and bought the latest model i-phone. I m just thrilled with the camera on the phone. In the end, I managed to figure it out and find a way to send the photo. I archived the photos for you. So you will certainly be able to look at me and maybe you will like me as much as I like you)
What do you like to do in your free time? Personally, I really like to cook. I like to spend time at the stove. I can call it my hobby. I can brag, I m good at it. Smiley So my man will never be hungry along with me. Do you like cooking? Do you cook for yourself or do you prefer to eat in a restaurant?
It s great that you re trying to find a relationship. I would also really like to come to this again. But after all, all really strong relationships begin with friendship? It seems to me that friendship is the simplest and most sincere manifestation of love. To be honest, it is because of this, almost 8 years ago I moved to Bulgaria. However, this did not happen because of love for the opposite sex. My mother was very concerned about our future in Russia. That s why we decided to leave... even though I really didn t want to, I still had a lot of friends in Russia…
I hope I filled your head with unnecessary things and you were interested in listening to me?)
I m waiting for your answer, your Internet friend.

Spoiler:
Delivered-To: xxx
Received: by 2002:a59:c62b:0:b0:3aa:433a:6c40 with SMTP id
h11csp2563702vqr; Tue, 28 Mar 2023 11:00:04 -0700 (PDT)
X-Received: by 2002:a17:902:ea11:b0:1a1:f06b:f171 with SMTP id
s17-20020a170902ea1100b001a1f06bf171mr17433544plg.17.1680026403798; Tue, 28
Mar 2023 11:00:03 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1680026403; cv=none; d=google.com;
s=arc-20160816;
b=CmQDds4NFhGQEowEmgd2FgEbzjQjrJs21XPI/6jwgGZwxAZkUafLdnWTddTAcLBMlN
5X3FpKEOWxW/lUoDwmLj0OxhA/FZ08gV43LfYDYhUTnuRk33n0L0t4xBBmJWFQVkGema
IAZkeSXvsCTY8EBc+Fxxui9zZzBjNbnVtQAdR38ZBTGNphlaQLDknWA5n9I93P/5CT10
MQ65LjL6X+JIHoHY17gXqoRxNEbRnOxux260Y1E1vd+VPhm6ObwkiQLKBu9KIBqbAp0S
OxZTpGI5mwqk52XnQwEBhTeJdLYRddAorltSbeEsQadQKp5FZHHX+NtaH0RNeSMGbT5l gJxw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
s=arc-20160816;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:dkim-signature; bh=GoIHe1qaccnYRXToi+8U5euEk9GKN8Uq6+7QKfR05dM=;
b=FoBaecpfFuekLb3N3CykX6UnHypMAUrwwIyCXBmfEPqrxwBp9cgk09B5NVRiRC1xcg
cRQSmuZGnt0cOzj58nM/C6M3dE+myiA+zE+cJA2CucAb/HnsakTtcZylLV42RJL1qneP
yNX5Zuq+JZiFkfo9k5qUyWkwBPrbCN/3t/xKNs/2Kom89kCu8GgxcYGu0jehZPHMTrD5
WScSbaqSWIHGQ5aHx0jzIa73VF2WzkHyLnSwx5RR4THpp7qo7ICjTAUIFQJOJrgA31He
Q8pwp9Y3zo7L7tHWdVamJ4yD/Qt1tDqKXInZBudTyaLWg1VIBOhluBWwpcCrvurQSz3R LAGQ==
ARC-Authentication-Results: i=1; mx.google.com; dkim=pass
Quelltext.i=@gmail.com Quelltext.s=20210112 Quelltext.b=JK4ASxae; spf=pass
(google.com: domain of victoria.yak33@gmail.com designates 209.85.220.65 as
permitted sender) smtp.mailfrom=victoria.yak33@gmail.com; dmarc=pass
(p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
Return-Path: <victoria.yak33@gmail.com>
Received: from mail-sor-f65.google.com (mail-sor-f65.google.com.
[209.85.220.65]) by mx.google.com with SMTPS id
z10-20020a170903018a00b001a065d4a264sor11960577plg.3.2023.03.28.11.00.03
for <xxx> (Google Transport Security); Tue, 28 Mar 2023
11:00:03 -0700 (PDT)
Received-SPF: pass (google.com: domain of victoria.yak33@gmail.com
designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;
Authentication-Results: mx.google.com; dkim=pass Quelltext.i=@gmail.com
Quelltext.s=20210112 Quelltext.b=JK4ASxae; spf=pass (google.com: domain of
victoria.yak33@gmail.com designates 209.85.220.65 as permitted sender)
smtp.mailfrom=victoria.yak33@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE
dis=NONE) Quelltext.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20210112; t=1680026402;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=GoIHe1qaccnYRXToi+8U5euEk9GKN8Uq6+7QKfR05dM=;
b=JK4ASxaew37kUWeHCoh0g8o323DU4XfuBS0DmNBLzMEtnSYh8GyPO5Oiev/yL8yln6
543fDCaHqNN3GfUwqjKSGSv9tXn6mUsWDA8HsqiMkEEAuFzcuu4nJiqo14phzimYVju6
q8dfPs4GdY4QpA5fWKP4yHArGLUmzmDeU++SjP1YGTFxpCKfEUtmX20zewZzqLMClaBm
0kqDP/0Jf29ktxIYbNs8we717SWHpP1LMP9lBifs7jMhVskKxwt9a1ScW8tFpC4xXtdj
opBYOm9SVFPNC80vzdxRHCP/cVf2TCqFPl2vlOWavUl+QjiMBrI6nYCob/hck5/f7NYG jIhQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20210112; t=1680026402;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=GoIHe1qaccnYRXToi+8U5euEk9GKN8Uq6+7QKfR05dM=;
b=hL4m5bxQ0F1kv3AfB1BN5ev66EIJHNjMqmHTSWAJlm3OVP8Cmudq7Vzy7h1Y2mu3nA
YhwxHmsbnGzKE9qpakYiftWwQDcM1Cul5j/Aw2jUcm8pE4RqIJw4C5qiFyMxx4jhrNrn
uw3beehb3nFP9KTtOIjn7w6owYJsQXAyL0PsOaX/X9g+s8uJGKty5aao3WtQ6rq6swQX
8YUjtLANlaC3PEvc6OgS44pzM2Q1cbjOd7Ksa8Ypr3AC6D1pLtzUIeC0Dl9clyLEsxTX
NE2WvqrXG8oPHigevMC9QkS62k8kWTNMc3rBA4PncLlpXZo1I/3TB9ob9IdyN/8vsw31 yS4A==
X-Gm-Message-State:
AAQBX9cnRiFclVkyPhWiOcxKKf17VSe1NOmI0FXZs9OSpT0WvXpjkDPN
6shLGFfmVCw0nQpC8avKtCM/ANyokVE5E5lPCAQBp1FvmhA2mRPO
X-Google-Smtp-Source:
aUqgvP7t24o=
X-Received: by 2002:a17:90a:5145:b0:23d:551c:c5fb with SMTP id
k5-20020a17090a514500b0023d551cc5fbmr4881425pjm.4.1680026401846; Tue, 28
Mar 2023 11:00:01 -0700 (PDT)
MIME-Version: 1.0
References: <CAOp3nCLsDnoop8To4aK1GrFvUYsVKYiGVzBCdMfpP1xa=ioVYw@mail.gmail.com>
<77e5a77546939adfdcb6d924631d60f4fbe6746b.camel@gmail.com>
In-Reply-To: <77e5a77546939adfdcb6d924631d60f4fbe6746b.camel@gmail.com>
From: vika victoria <victoria.yak33@gmail.com>
Date: Tue, 28 Mar 2023 15:02:09 -0400
Message-ID: <CAOp3nC+3kjq4cG+0P4CrikrYkJiBGzFSo8jW_vCvd2soDysTFw@mail.gmail.com>
Subject: Re: hey
To: xxx xxx <xxx>
Content-Type: multipart/alternative; boundary="000000000000e53a9005f7f9a066"
X-Evolution-Source: ff142b335906b5d3f4362efe3cc38298ee780a5d







Die hier angehängten Bilder waren in der Mail als verlinktes ZIP-Archiv auf einem Google-Drive abgelegt.
Die Dateien waren aber als .HTA-Dateien erstellt. Aus diesen Dateien konnte ich den base64-Code extrahieren und die Bilder dann erstellen.
Ich gehe davon aus, dass in dem Code des ersten Bildes auch potenziell gefährtlicher Code enthalten war, denn die 3 übrigen Bilder hatten wesentlich weniger Code in der Datei.
Somit habe ich die .HTA-Dateien nicht ausgeführt (im Browser).

Sollte der Link zur Datei benötigt werden, bitte Bescheid sagen.
« Zuletzt geändert: 14. September 2023 um 11:32 von Bommo »  

IMG_1680026151201_001.jpg ( 43 KB | Downloads )
IMG_1680026151201_001.jpg
IMG_1680026151197_001.jpg ( 397 KB | Downloads )
IMG_1680026151197_001.jpg
IMG_1680026151195_001.jpg ( 81 KB | Downloads )
IMG_1680026151195_001.jpg
IMG_1680026150992_001.jpg ( 107 KB | Downloads )
IMG_1680026150992_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65870
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Victoria <victoria.yak33@gmail.com>
Antwort #2 - 14. September 2023 um 19:23
 
  

Smyshlyaeva_1.jpg ( 133 KB | Downloads )
Smyshlyaeva_1.jpg
Smyshlyaeva_2.jpg ( 144 KB | Downloads )
Smyshlyaeva_2.jpg
Smyshlyaeva_3.jpg ( 133 KB | Downloads )
Smyshlyaeva_3.jpg
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema