Confirm Your Request: $9,525 Loan! Your loan request! (They want into your account)

HOTLINK: http://track.figureing.com/?xtl=23tw452cdxql50b57uv1n4ghrb1v02aheo9xp4485pz05b7nr19186qns75gxjes05ch22gqu729jw70fhk1ockhw85oigihmm12nk6b7l3tatsmpp4x73nqueh16pwz769n182kjfy96r12cmqdr3p86zm0x89j3p8b3lrmwxsmqbonon9jzqrmt5s8inxeapr&eih=8dw1160y1s3kkkkcs5zox73cdxj50&__stmp=slat0b&__onlt=h

===============================================

“Loan Confirmation” [email protected]

AND BELOW ADDRESSES

Received: from 127.0.0.1
by atlas-production.v2-mail-prod1-gq1.omega.yahoo.com pod-id atlas--production-gq1-d4864b8fb-8548n.gq1.yahoo.com with HTTP; Sun, 13 Oct 2024 +0000
Return-Path: [email protected]
X-Originating-Ip: [146.20.191.142]
Received-SPF: pass (domain of mg.bluekeyfinancialapp.com designates 146.20.191.142 as permitted sender)
Authentication-Results: atlas-production.v2-mail-prod1-gq1.omega.yahoo.com;
dkim=pass [email protected] header.s=pic;
dkim=pass [email protected] header.s=mg;
spf=pass smtp.mailfrom=mg.bluekeyfinancialapp.com;
dmarc=unknown header.from=mg.bluekeyfinancialapp.com;

1 Like

Same format as # AV subscription “Thank You” Scammers Post