Uber phish from Bell Canada
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Jan 2025 05:32:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tUPn4-000000004KC-2Son
for dave@doctor.nl2k.ab.ca;
Sun, 05 Jan 2025 05:31:34 -0700
Resent-From: The Doctor
Resent-Date: Sun, 5 Jan 2025 05:31:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f232.google.com ([209.85.214.232]:50453)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1tUKQK-000000001mH-2K11
for root@nk.ca;
Sat, 04 Jan 2025 23:47:51 -0700
Received: by mail-pl1-f232.google.com with SMTP id d9443c01a7336-2161eb95317so195212465ad.1
for; Sat, 04 Jan 2025 22:45:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=code.edu.az; s=google; t=1736059550; x=1736664350; darn=nk.ca;
h=date:from:to:subject:mime-version:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=0uQHAiBwpwi/WxCHT/yyvYEiCUo9fVwCAAx/6xutEv0=;
b=CRz87/v2keq1eM3N56DtuIZP+gpSFcDV9Nx2NNVFG/UNLOD+SBe74fS76cIyIRs7JC
Z0JAR4cqnmC8+dkwip0Jo7SZ7g+LLSmu/OMuwKrz6jGhBYCek80hId4GYYyU9F0rrIE+
Hfhfi9VM9Z9ati+QT483Df+EY5EF3OUgksJrGPPltDGdKu72joBChJ5Gjt9TMkaWFneA
PBWQToipQWJL4VKBDhKhe1f2gZxzWxu1sZLWRHDPqpur5qEOv6gBP2IZAqL+CIzCcsJb
HBjRrwTSbePPJEU9ZF208EqHU0WTNkQ1oy8PfS+LnUQSTMcjzk1sJFOaDTes3GOexzLS
rFBQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1736059550; x=1736664350;
h=date:from:to:subject:mime-version:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=0uQHAiBwpwi/WxCHT/yyvYEiCUo9fVwCAAx/6xutEv0=;
b=kCLtHqVlRxHSjkm2OpCA4/pAfgiz4VaUmKaDuCd2fdWli6Id8aSYxizkFHnVBu6OCD
8UgZvYWo8glpUY0T+qlpLuVuMuKl5fyA+GV8VGBD+D8yKYpvmovRPxhw2t+1yOAsn7xg
FWrYQ8w73KV0isn2qzaAxfYjuzlyg8SnBoPAJ28epa7KtEsOXfAbxcaUpx7I8BbSRwqq
mdDn9WEEbspzCwsbvHxvbKfJfhTIrCn7G4wtykL1ziqyl54uA6rccTPjUUJkKJmNApHi
u8jPiPiZnwwu6OuE6A9kNL8xks+0bohMXiyE2e/32eAd/QQ6OqmtO4PbmSaDe2vfTQnQ
rMUA==
X-Forwarded-Encrypted: i=1; AJvYcCW5rZad9vinNtb7rO1k8IlltW5z/6vuumR2iaTAiegJWAby0mE8ReY443Y/YA+3zLgnAnb4@nk.ca
X-Gm-Message-State: AOJu0YwxIdPIa4MBIoLRcA29U8AKrzdCUwOABgQhvljXwK5LcTHS4U0o
35cdvByOn58hearAdwGgcS+YOqJFJfTscBz6Led0MHERzPuL1MnK2p/9F55dOI3cfn3wQjcx32H
G4VWPq/RGT6ncj8VHKPtle41Z5RUZlpZK
X-Gm-Gg: ASbGncuwJPycDA7iDg3Kwn0f91JHmFArtP9P/iWw0PD+izoTYyzORQFUG40DtSkPCx9
9bTBTLlyiTlxj48vAUOf0HnRAnZH7ZvSQokpai6E3v8Cua4EtR9WBhD3tZjYjgQlaQyX2qmI0Qa
doyR26tCJqhn/4UAWBhSPkdCo9P8G6sXkrK01ZRbtDFCE6bofF7tZO+xuAx/KC4N599nMSftK8P
RQJZoGg7FYPpIfJNsn4sKCYv5FDQE5NYIEiq0b8lY7xJ5OmzK98X9958wlvh/0LfXXg7aHdOpSC
8rCjdLnWE8ZQxika5o0jP8K/JuFEMb3a+J5IWwnHwn5ndIoXaHLKdz+7JmrH
X-Google-Smtp-Source: AGHT+IE7N1Kk2EIjrNE8OxMu1pFubveR182PtWys9sDu6I1hMzr+oATOBWgenObX8B2FXPyEm1HLHGFDeopB
X-Received: by 2002:a17:902:ccc3:b0:208:d856:dbb7 with SMTP id d9443c01a7336-219e6f14586mr791626985ad.39.1736059550177;
Sat, 04 Jan 2025 22:45:50 -0800 (PST)
Received: from mokhtar.home (lnsm3-toronto63-142-117-58-149.internet.virginmobile.ca. [142.117.58.149])
by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-219dca1a532sm15871565ad.80.2025.01.04.22.45.46
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sat, 04 Jan 2025 22:45:50 -0800 (PST)
X-Relaying-Domain: code.edu.az
Message-ID: <677a2a9e.170a0220.182074.1df7SMTPIN_ADDED_MISSING@mx.google.com>
Content-Type: multipart/alternative; boundary="===============0929241752=="
MIME-Version: 1.0
Subject: Uber Please confirm your email address.
To: Recipients
From: parvine1a@code.edu.az
Date: Sun, 05 Jan 2025 01:45:42 -0500
You will not see this in a MIME-aware mail reader.
--===============0929241752==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
|MC_PREVIEW_TEXT| =
=
=
=
=
=
=
=
=
Hello,
=
Please confirm your email address by clicking on the link below.
=
=
Confirm email address.
=
=
=
Here to help ?
customer care.
=
=A9 Uber 2025.
=
=
=
=
=
=
=
=
=
=
=
=20
--===============0929241752==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">
=3Diso-8859-1"/>
ale=3D1">
=
display:none; font-size:0px; line-height:0px; max-height:0px; max-width:0px=
; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;">*|MC_PREVIE=
W_TEXT|*
ing=3D"0" height=3D"100%" width=3D"100%" id=3D"bodyTable">
=3D"0" width=3D"100%" class=3D"templateContainer">
>
ss=3D"mcnImageBlock" style=3D"min-width:100%;">
lockInner">
adding=3D"0" cellspacing=3D"0" class=3D"mcnImageContentContainer" style=3D"=
min-width:100%;">
yle=3D"padding-right: 9px; padding-left: 9px; padding-top: 0; padding-botto=
m: 0; text-align:center;">
=
=

=3D"https://d1a3f4spazzrp4.cloudfront.net/emails/Global/Logos/cshead/uber-l=
ogo-69x43_2x_black.png" width=3D"150" style=3D"max-width:300px; padding-bot=
tom: 0; display: inline !important; vertical-align: bottom;" class=3D"mcnRe=
tinaImage">
=
=
able border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" class=
=3D"mcnTextBlock" style=3D"min-width:100%;">
-top:9px;">
=
acing=3D"0" style=3D"max-width:100%; min-width:100%;" width=3D"100%" class=
=3D"mcnTextContentContainer">
=
=3D"padding: 0px 18px 9px; line-height: 125%;">
=
Hello,=
strong>
=
Please confirm your email address by clicking on the link below.
=3D"_blank">Confirm email address.
trong>
Here to help ?
customer care.
=A9 Uber 2025.
=
padding=3D"0" cellspacing=3D"0" width=3D"300" class=3D"columnWrapper">
umnContainer">
padding=3D"0" cellspacing=3D"0" width=3D"300" class=3D"columnWrapper">
umnContainer">
=
td>
/GzM7GGwHGgM/R0kle1/s9QV4B">
--===============0929241752==--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Jan 2025 05:32:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tUPn4-000000004KC-2Son
for dave@doctor.nl2k.ab.ca;
Sun, 05 Jan 2025 05:31:34 -0700
Resent-From: The Doctor
Resent-Date: Sun, 5 Jan 2025 05:31:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f232.google.com ([209.85.214.232]:50453)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tUKQK-000000001mH-2K11
for root@nk.ca;
Sat, 04 Jan 2025 23:47:51 -0700
Received: by mail-pl1-f232.google.com with SMTP id d9443c01a7336-2161eb95317so195212465ad.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=code.edu.az; s=google; t=1736059550; x=1736664350; darn=nk.ca;
h=date:from:to:subject:mime-version:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=0uQHAiBwpwi/WxCHT/yyvYEiCUo9fVwCAAx/6xutEv0=;
b=CRz87/v2keq1eM3N56DtuIZP+gpSFcDV9Nx2NNVFG/UNLOD+SBe74fS76cIyIRs7JC
Z0JAR4cqnmC8+dkwip0Jo7SZ7g+LLSmu/OMuwKrz6jGhBYCek80hId4GYYyU9F0rrIE+
Hfhfi9VM9Z9ati+QT483Df+EY5EF3OUgksJrGPPltDGdKu72joBChJ5Gjt9TMkaWFneA
PBWQToipQWJL4VKBDhKhe1f2gZxzWxu1sZLWRHDPqpur5qEOv6gBP2IZAqL+CIzCcsJb
HBjRrwTSbePPJEU9ZF208EqHU0WTNkQ1oy8PfS+LnUQSTMcjzk1sJFOaDTes3GOexzLS
rFBQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1736059550; x=1736664350;
h=date:from:to:subject:mime-version:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=0uQHAiBwpwi/WxCHT/yyvYEiCUo9fVwCAAx/6xutEv0=;
b=kCLtHqVlRxHSjkm2OpCA4/pAfgiz4VaUmKaDuCd2fdWli6Id8aSYxizkFHnVBu6OCD
8UgZvYWo8glpUY0T+qlpLuVuMuKl5fyA+GV8VGBD+D8yKYpvmovRPxhw2t+1yOAsn7xg
FWrYQ8w73KV0isn2qzaAxfYjuzlyg8SnBoPAJ28epa7KtEsOXfAbxcaUpx7I8BbSRwqq
mdDn9WEEbspzCwsbvHxvbKfJfhTIrCn7G4wtykL1ziqyl54uA6rccTPjUUJkKJmNApHi
u8jPiPiZnwwu6OuE6A9kNL8xks+0bohMXiyE2e/32eAd/QQ6OqmtO4PbmSaDe2vfTQnQ
rMUA==
X-Forwarded-Encrypted: i=1; AJvYcCW5rZad9vinNtb7rO1k8IlltW5z/6vuumR2iaTAiegJWAby0mE8ReY443Y/YA+3zLgnAnb4@nk.ca
X-Gm-Message-State: AOJu0YwxIdPIa4MBIoLRcA29U8AKrzdCUwOABgQhvljXwK5LcTHS4U0o
35cdvByOn58hearAdwGgcS+YOqJFJfTscBz6Led0MHERzPuL1MnK2p/9F55dOI3cfn3wQjcx32H
G4VWPq/RGT6ncj8VHKPtle41Z5RUZlpZK
X-Gm-Gg: ASbGncuwJPycDA7iDg3Kwn0f91JHmFArtP9P/iWw0PD+izoTYyzORQFUG40DtSkPCx9
9bTBTLlyiTlxj48vAUOf0HnRAnZH7ZvSQokpai6E3v8Cua4EtR9WBhD3tZjYjgQlaQyX2qmI0Qa
doyR26tCJqhn/4UAWBhSPkdCo9P8G6sXkrK01ZRbtDFCE6bofF7tZO+xuAx/KC4N599nMSftK8P
RQJZoGg7FYPpIfJNsn4sKCYv5FDQE5NYIEiq0b8lY7xJ5OmzK98X9958wlvh/0LfXXg7aHdOpSC
8rCjdLnWE8ZQxika5o0jP8K/JuFEMb3a+J5IWwnHwn5ndIoXaHLKdz+7JmrH
X-Google-Smtp-Source: AGHT+IE7N1Kk2EIjrNE8OxMu1pFubveR182PtWys9sDu6I1hMzr+oATOBWgenObX8B2FXPyEm1HLHGFDeopB
X-Received: by 2002:a17:902:ccc3:b0:208:d856:dbb7 with SMTP id d9443c01a7336-219e6f14586mr791626985ad.39.1736059550177;
Sat, 04 Jan 2025 22:45:50 -0800 (PST)
Received: from mokhtar.home (lnsm3-toronto63-142-117-58-149.internet.virginmobile.ca. [142.117.58.149])
by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-219dca1a532sm15871565ad.80.2025.01.04.22.45.46
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sat, 04 Jan 2025 22:45:50 -0800 (PST)
X-Relaying-Domain: code.edu.az
Message-ID: <677a2a9e.170a0220.182074.1df7SMTPIN_ADDED_MISSING@mx.google.com>
Content-Type: multipart/alternative; boundary="===============0929241752=="
MIME-Version: 1.0
Subject: Uber Please confirm your email address.
To: Recipients
From: parvine1a@code.edu.az
Date: Sun, 05 Jan 2025 01:45:42 -0500
You will not see this in a MIME-aware mail reader.
--===============0929241752==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
|MC_PREVIEW_TEXT| =
=
=
=
=
=
=
=
=
Hello,
=
Please confirm your email address by clicking on the link below.
=
=
Confirm email address.
=
=
=
Here to help ?
customer care.
=
=A9 Uber 2025.
=
=
=
=
=
=
=
=
=
=
=
=20
--===============0929241752==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">
=3Diso-8859-1"/>
ale=3D1">
=
display:none; font-size:0px; line-height:0px; max-height:0px; max-width:0px=
; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;">*|MC_PREVIE=
W_TEXT|*
ing=3D"0" height=3D"100%" width=3D"100%" id=3D"bodyTable">
=3D"0" width=3D"100%" class=3D"templateContainer">
>
ss=3D"mcnImageBlock" style=3D"min-width:100%;">
lockInner">
adding=3D"0" cellspacing=3D"0" class=3D"mcnImageContentContainer" style=3D"=
min-width:100%;">
yle=3D"padding-right: 9px; padding-left: 9px; padding-top: 0; padding-botto=
m: 0; text-align:center;">
=
=
=3D"https://d1a3f4spazzrp4.cloudfront.net/emails/Global/Logos/cshead/uber-l=
ogo-69x43_2x_black.png" width=3D"150" style=3D"max-width:300px; padding-bot=
tom: 0; display: inline !important; vertical-align: bottom;" class=3D"mcnRe=
tinaImage">
=
=
able border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" class=
=3D"mcnTextBlock" style=3D"min-width:100%;">
-top:9px;">
=
acing=3D"0" style=3D"max-width:100%; min-width:100%;" width=3D"100%" class=
=3D"mcnTextContentContainer">
=
=3D"padding: 0px 18px 9px; line-height: 125%;">
=
Hello,=
strong>
=
Please confirm your email address by clicking on the link below.
=3D"_blank">Confirm email address.
trong>
Here to help ?
customer care.
=A9 Uber 2025.
=
padding=3D"0" cellspacing=3D"0" width=3D"300" class=3D"columnWrapper">
umnContainer">
padding=3D"0" cellspacing=3D"0" width=3D"300" class=3D"columnWrapper">
umnContainer">
td>
/GzM7GGwHGgM/R0kle1/s9QV4B">
--===============0929241752==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments