T MOBILE $100 reward! Scam

HOTLINK: http://mov.truefruit.tw/4jhBmM37653neJo418progshmybf997SJSSLPNIBBKDBBT32ASYF20649f27

====================================================

On Thursday, September 26, 2024 at PM EDT, T-Mobile [email protected] wrote:

REPLY EMAIL ADDRESS : “everfor.onlinestoree.xyz” <reply-mfrygtfuaegl]dydktccqhfxuaadduapmzxjr)_html-ghtcjxoaixvdiqcbofqurhxkchwrthoopocy)@everfor.onlinestoree.xyz (reply-104416246-1399422_html-oadmrxbgcnhtrjjtbtvngzpdsotslipptuxd)@everfor.onlinestoree.xyz)>

and below emails

Received: from 10.197.39.201
by atlas317.free.mail.bf1.yahoo.com pod-id NONE with HTTPS; Thu, 26 Sep 2024 17:06:48 +0000
Return-Path: <>
X-Originating-Ip: [93.115.97.203]
Received-SPF: none (domain of everfor.onlinestoree.xyz does not designate permitted sender hosts)
Authentication-Results: atlas317.free.mail.bf1.yahoo.com;
dkim=perm_fail [email protected] header.s=smtp;
spf=none smtp.mailfrom=everfor.onlinestoree.xyz;
dmarc=unknown header.from=everfor.onlinestoree.xyz;
X-Apparently-To: ; Thu, 26 Sep 2024 +0000
X-YMailISG: SSADPHkWLDutzSsieN3Fnw0LMJocMXyYRbCE5yJsBUvW658G
yzHPVX66iDd094QDKBVOs1.znzfC5IvB7kNR7e_eny69bMfeApf.wpHGC9U3
gtWVpCgRv_m61w.PG2ra.36SuQh._oZ7Vzya3YWdSfyvHFdErBN7w6ZOc1eU
yC1Qow.pr7Ilp4o4CqcK33JQ3snUfzee5y2LVoZ_yf1tfOME52EPgcpUrtPE
0IGXYEF83CUsfR20xJ2a82psCwEs6S8cA2MyInGD8GwHmzzmaA7bgdgc0YuX
6x6KKc5zk2LfcHimbNv9S5e4Gz_BjiZdW.0uSMqHDLiUIBy_6M2CJAuXDACs
OH1dqB97qiSajDYoa71eV33EYVbmiqGQ30MQoBapQ_cmdJQbzyiBZ7.LjpkB
lj2pjteyEHxYWZafKMhJWwKXpTSnK4GkHKMoYtbgmTQaz8pgQZ2xc6MM242p