Uber phish from Bell Canada
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Jan 2025 05:32:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tUPn4-000000004KC-2Son
for dave@doctor.nl2k.ab.ca;
Sun, 05 Jan 2025 05:31:34 -0700
Resent-From: The Doctor
Resent-Date: Sun, 5 Jan 2025 05:31:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f232.google.com ([209.85.214.232]:50453)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1tUKQK-000000001mH-2K11
for root@nk.ca;
Sat, 04 Jan 2025 23:47:51 -0700
Received: by mail-pl1-f232.google.com with SMTP id d9443c01a7336-2161eb95317so195212465ad.1
for; Sat, 04 Jan 2025 22:45:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=code.edu.az; s=google; t=1736059550; x=1736664350; darn=nk.ca;
h=date:from:to:subject:mime-version:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=0uQHAiBwpwi/WxCHT/yyvYEiCUo9fVwCAAx/6xutEv0=;
b=CRz87/v2keq1eM3N56DtuIZP+gpSFcDV9Nx2NNVFG/UNLOD+SBe74fS76cIyIRs7JC
Z0JAR4cqnmC8+dkwip0Jo7SZ7g+LLSmu/OMuwKrz6jGhBYCek80hId4GYYyU9F0rrIE+
Hfhfi9VM9Z9ati+QT483Df+EY5EF3OUgksJrGPPltDGdKu72joBChJ5Gjt9TMkaWFneA
PBWQToipQWJL4VKBDhKhe1f2gZxzWxu1sZLWRHDPqpur5qEOv6gBP2IZAqL+CIzCcsJb
HBjRrwTSbePPJEU9ZF208EqHU0WTNkQ1oy8PfS+LnUQSTMcjzk1sJFOaDTes3GOexzLS
rFBQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1736059550; x=1736664350;
h=date:from:to:subject:mime-version:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=0uQHAiBwpwi/WxCHT/yyvYEiCUo9fVwCAAx/6xutEv0=;
b=kCLtHqVlRxHSjkm2OpCA4/pAfgiz4VaUmKaDuCd2fdWli6Id8aSYxizkFHnVBu6OCD
8UgZvYWo8glpUY0T+qlpLuVuMuKl5fyA+GV8VGBD+D8yKYpvmovRPxhw2t+1yOAsn7xg
FWrYQ8w73KV0isn2qzaAxfYjuzlyg8SnBoPAJ28epa7KtEsOXfAbxcaUpx7I8BbSRwqq
mdDn9WEEbspzCwsbvHxvbKfJfhTIrCn7G4wtykL1ziqyl54uA6rccTPjUUJkKJmNApHi
u8jPiPiZnwwu6OuE6A9kNL8xks+0bohMXiyE2e/32eAd/QQ6OqmtO4PbmSaDe2vfTQnQ
rMUA==
X-Forwarded-Encrypted: i=1; AJvYcCW5rZad9vinNtb7rO1k8IlltW5z/6vuumR2iaTAiegJWAby0mE8ReY443Y/YA+3zLgnAnb4@nk.ca
X-Gm-Message-State: AOJu0YwxIdPIa4MBIoLRcA29U8AKrzdCUwOABgQhvljXwK5LcTHS4U0o
35cdvByOn58hearAdwGgcS+YOqJFJfTscBz6Led0MHERzPuL1MnK2p/9F55dOI3cfn3wQjcx32H
G4VWPq/RGT6ncj8VHKPtle41Z5RUZlpZK
X-Gm-Gg: ASbGncuwJPycDA7iDg3Kwn0f91JHmFArtP9P/iWw0PD+izoTYyzORQFUG40DtSkPCx9
9bTBTLlyiTlxj48vAUOf0HnRAnZH7ZvSQokpai6E3v8Cua4EtR9WBhD3tZjYjgQlaQyX2qmI0Qa
doyR26tCJqhn/4UAWBhSPkdCo9P8G6sXkrK01ZRbtDFCE6bofF7tZO+xuAx/KC4N599nMSftK8P
RQJZoGg7FYPpIfJNsn4sKCYv5FDQE5NYIEiq0b8lY7xJ5OmzK98X9958wlvh/0LfXXg7aHdOpSC
8rCjdLnWE8ZQxika5o0jP8K/JuFEMb3a+J5IWwnHwn5ndIoXaHLKdz+7JmrH
X-Google-Smtp-Source: AGHT+IE7N1Kk2EIjrNE8OxMu1pFubveR182PtWys9sDu6I1hMzr+oATOBWgenObX8B2FXPyEm1HLHGFDeopB
X-Received: by 2002:a17:902:ccc3:b0:208:d856:dbb7 with SMTP id d9443c01a7336-219e6f14586mr791626985ad.39.1736059550177;
Sat, 04 Jan 2025 22:45:50 -0800 (PST)
Received: from mokhtar.home (lnsm3-toronto63-142-117-58-149.internet.virginmobile.ca. [142.117.58.149])
by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-219dca1a532sm15871565ad.80.2025.01.04.22.45.46
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sat, 04 Jan 2025 22:45:50 -0800 (PST)
X-Relaying-Domain: code.edu.az
Message-ID: <677a2a9e.170a0220.182074.1df7SMTPIN_ADDED_MISSING@mx.google.com>
Content-Type: multipart/alternative; boundary="===============0929241752=="
MIME-Version: 1.0
Subject: Uber Please confirm your email address.
To: Recipients
From: parvine1a@code.edu.az
Date: Sun, 05 Jan 2025 01:45:42 -0500
You will not see this in a MIME-aware mail reader.
--===============0929241752==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
|MC_PREVIEW_TEXT| =
=
=
=
=
=
=
=
=
Hello,
=
Please confirm your email address by clicking on the link below.
=
=
Confirm email address.
=
=
=
Here to help ?
customer care.
=
=A9 Uber 2025.
=
=
=
=
=
=
=
=
=
=
=
=20
--===============0929241752==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">
=3Diso-8859-1"/>
ale=3D1">
=
display:none; font-size:0px; line-height:0px; max-height:0px; max-width:0px=
; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;">*|MC_PREVIE=
W_TEXT|*
ing=3D"0" height=3D"100%" width=3D"100%" id=3D"bodyTable">
=3D"0" width=3D"100%" class=3D"templateContainer">
>
ss=3D"mcnImageBlock" style=3D"min-width:100%;">
lockInner">
adding=3D"0" cellspacing=3D"0" class=3D"mcnImageContentContainer" style=3D"=
min-width:100%;">
yle=3D"padding-right: 9px; padding-left: 9px; padding-top: 0; padding-botto=
m: 0; text-align:center;">
=
=

=3D"https://d1a3f4spazzrp4.cloudfront.net/emails/Global/Logos/cshead/uber-l=
ogo-69x43_2x_black.png" width=3D"150" style=3D"max-width:300px; padding-bot=
tom: 0; display: inline !important; vertical-align: bottom;" class=3D"mcnRe=
tinaImage">
=
=
able border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" class=
=3D"mcnTextBlock" style=3D"min-width:100%;">
-top:9px;">
=
acing=3D"0" style=3D"max-width:100%; min-width:100%;" width=3D"100%" class=
=3D"mcnTextContentContainer">
=
=3D"padding: 0px 18px 9px; line-height: 125%;">
=
Hello,=
strong>
=
Please confirm your email address by clicking on the link below.
=3D"_blank">Confirm email address.
trong>
Here to help ?
customer care.
=A9 Uber 2025.
=
padding=3D"0" cellspacing=3D"0" width=3D"300" class=3D"columnWrapper">
umnContainer">
padding=3D"0" cellspacing=3D"0" width=3D"300" class=3D"columnWrapper">
umnContainer">
=
td>
/GzM7GGwHGgM/R0kle1/s9QV4B">
--===============0929241752==--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Jan 2025 05:32:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tUPn4-000000004KC-2Son
for dave@doctor.nl2k.ab.ca;
Sun, 05 Jan 2025 05:31:34 -0700
Resent-From: The Doctor
Resent-Date: Sun, 5 Jan 2025 05:31:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f232.google.com ([209.85.214.232]:50453)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tUKQK-000000001mH-2K11
for root@nk.ca;
Sat, 04 Jan 2025 23:47:51 -0700
Received: by mail-pl1-f232.google.com with SMTP id d9443c01a7336-2161eb95317so195212465ad.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=code.edu.az; s=google; t=1736059550; x=1736664350; darn=nk.ca;
h=date:from:to:subject:mime-version:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=0uQHAiBwpwi/WxCHT/yyvYEiCUo9fVwCAAx/6xutEv0=;
b=CRz87/v2keq1eM3N56DtuIZP+gpSFcDV9Nx2NNVFG/UNLOD+SBe74fS76cIyIRs7JC
Z0JAR4cqnmC8+dkwip0Jo7SZ7g+LLSmu/OMuwKrz6jGhBYCek80hId4GYYyU9F0rrIE+
Hfhfi9VM9Z9ati+QT483Df+EY5EF3OUgksJrGPPltDGdKu72joBChJ5Gjt9TMkaWFneA
PBWQToipQWJL4VKBDhKhe1f2gZxzWxu1sZLWRHDPqpur5qEOv6gBP2IZAqL+CIzCcsJb
HBjRrwTSbePPJEU9ZF208EqHU0WTNkQ1oy8PfS+LnUQSTMcjzk1sJFOaDTes3GOexzLS
rFBQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1736059550; x=1736664350;
h=date:from:to:subject:mime-version:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=0uQHAiBwpwi/WxCHT/yyvYEiCUo9fVwCAAx/6xutEv0=;
b=kCLtHqVlRxHSjkm2OpCA4/pAfgiz4VaUmKaDuCd2fdWli6Id8aSYxizkFHnVBu6OCD
8UgZvYWo8glpUY0T+qlpLuVuMuKl5fyA+GV8VGBD+D8yKYpvmovRPxhw2t+1yOAsn7xg
FWrYQ8w73KV0isn2qzaAxfYjuzlyg8SnBoPAJ28epa7KtEsOXfAbxcaUpx7I8BbSRwqq
mdDn9WEEbspzCwsbvHxvbKfJfhTIrCn7G4wtykL1ziqyl54uA6rccTPjUUJkKJmNApHi
u8jPiPiZnwwu6OuE6A9kNL8xks+0bohMXiyE2e/32eAd/QQ6OqmtO4PbmSaDe2vfTQnQ
rMUA==
X-Forwarded-Encrypted: i=1; AJvYcCW5rZad9vinNtb7rO1k8IlltW5z/6vuumR2iaTAiegJWAby0mE8ReY443Y/YA+3zLgnAnb4@nk.ca
X-Gm-Message-State: AOJu0YwxIdPIa4MBIoLRcA29U8AKrzdCUwOABgQhvljXwK5LcTHS4U0o
35cdvByOn58hearAdwGgcS+YOqJFJfTscBz6Led0MHERzPuL1MnK2p/9F55dOI3cfn3wQjcx32H
G4VWPq/RGT6ncj8VHKPtle41Z5RUZlpZK
X-Gm-Gg: ASbGncuwJPycDA7iDg3Kwn0f91JHmFArtP9P/iWw0PD+izoTYyzORQFUG40DtSkPCx9
9bTBTLlyiTlxj48vAUOf0HnRAnZH7ZvSQokpai6E3v8Cua4EtR9WBhD3tZjYjgQlaQyX2qmI0Qa
doyR26tCJqhn/4UAWBhSPkdCo9P8G6sXkrK01ZRbtDFCE6bofF7tZO+xuAx/KC4N599nMSftK8P
RQJZoGg7FYPpIfJNsn4sKCYv5FDQE5NYIEiq0b8lY7xJ5OmzK98X9958wlvh/0LfXXg7aHdOpSC
8rCjdLnWE8ZQxika5o0jP8K/JuFEMb3a+J5IWwnHwn5ndIoXaHLKdz+7JmrH
X-Google-Smtp-Source: AGHT+IE7N1Kk2EIjrNE8OxMu1pFubveR182PtWys9sDu6I1hMzr+oATOBWgenObX8B2FXPyEm1HLHGFDeopB
X-Received: by 2002:a17:902:ccc3:b0:208:d856:dbb7 with SMTP id d9443c01a7336-219e6f14586mr791626985ad.39.1736059550177;
Sat, 04 Jan 2025 22:45:50 -0800 (PST)
Received: from mokhtar.home (lnsm3-toronto63-142-117-58-149.internet.virginmobile.ca. [142.117.58.149])
by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-219dca1a532sm15871565ad.80.2025.01.04.22.45.46
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sat, 04 Jan 2025 22:45:50 -0800 (PST)
X-Relaying-Domain: code.edu.az
Message-ID: <677a2a9e.170a0220.182074.1df7SMTPIN_ADDED_MISSING@mx.google.com>
Content-Type: multipart/alternative; boundary="===============0929241752=="
MIME-Version: 1.0
Subject: Uber Please confirm your email address.
To: Recipients
From: parvine1a@code.edu.az
Date: Sun, 05 Jan 2025 01:45:42 -0500
You will not see this in a MIME-aware mail reader.
--===============0929241752==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
|MC_PREVIEW_TEXT| =
=
=
=
=
=
=
=
=
Hello,
=
Please confirm your email address by clicking on the link below.
=
=
Confirm email address.
=
=
=
Here to help ?
customer care.
=
=A9 Uber 2025.
=
=
=
=
=
=
=
=
=
=
=
=20
--===============0929241752==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">
=3Diso-8859-1"/>
ale=3D1">
=
display:none; font-size:0px; line-height:0px; max-height:0px; max-width:0px=
; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;">*|MC_PREVIE=
W_TEXT|*
ing=3D"0" height=3D"100%" width=3D"100%" id=3D"bodyTable">
=3D"0" width=3D"100%" class=3D"templateContainer">
>
ss=3D"mcnImageBlock" style=3D"min-width:100%;">
lockInner">
adding=3D"0" cellspacing=3D"0" class=3D"mcnImageContentContainer" style=3D"=
min-width:100%;">
yle=3D"padding-right: 9px; padding-left: 9px; padding-top: 0; padding-botto=
m: 0; text-align:center;">
=
=
=3D"https://d1a3f4spazzrp4.cloudfront.net/emails/Global/Logos/cshead/uber-l=
ogo-69x43_2x_black.png" width=3D"150" style=3D"max-width:300px; padding-bot=
tom: 0; display: inline !important; vertical-align: bottom;" class=3D"mcnRe=
tinaImage">
=
=
able border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" class=
=3D"mcnTextBlock" style=3D"min-width:100%;">
-top:9px;">
=
acing=3D"0" style=3D"max-width:100%; min-width:100%;" width=3D"100%" class=
=3D"mcnTextContentContainer">
=
=3D"padding: 0px 18px 9px; line-height: 125%;">
=
Hello,=
strong>
=
Please confirm your email address by clicking on the link below.
=3D"_blank">Confirm email address.
trong>
Here to help ?
customer care.
=A9 Uber 2025.
=
padding=3D"0" cellspacing=3D"0" width=3D"300" class=3D"columnWrapper">
umnContainer">
padding=3D"0" cellspacing=3D"0" width=3D"300" class=3D"columnWrapper">
umnContainer">
td>
/GzM7GGwHGgM/R0kle1/s9QV4B">
--===============0929241752==--