20260326_EMAIL_SCAM_1

ATTENTION TO YOU
Mr. Richard Wahl<[email protected]>
Learn more
ATTENTION TO YOU

I am Mr. Richard Wahl, the mega winner of $533M USD in Mega Million Jackpot, I'm donating to 5 random individuals. If you receive my email then your email was selected after a spin ball. I have spread most of my wealth over a number of charities and organizations. I have voluntarily decided to donate the sum of $5,000,000,00 Million USD to you as you are one of the selected 5, to verify my winnings please see the youtube page below.

WATCH HERE:https://www.youtube.com/watch?v=tne02ExNDrw

THIS IS YOUR OWN CODE: 0043035
Reply with the CODE [0043035] to this email:([email protected]) follow her instructions to help you receive it. She will send it to you either by  ATM MasterCard

Contact my Financial Team head My Personal Assistant
Name: Peter Pan
Email: [email protected]

Hope to put a smile on your face and that of your family.

Regards,
Mr. Richard Wahl




Received: from DS7PR05MB7447.namprd05.prod.outlook.com (::1) by
 PH0PR05MB8672.namprd05.prod.outlook.com with HTTPS; Fri, 27 Mar 2026 04:22:40
 +0000
ARC-Seal: i=2; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;
 b=Uc7YniOfBhXnWSMNi3p7XraiF7f2YWsNH3IsU5JPPwpf2okEW+FwjJ+1o88iLWMcIJCA/l+LrRyVqQ9k69h59soBE0CQqRHbP2lhoUn5FJRt4/JWlxC7EY+DzwjrKjXpJzGkeyvuc8Q5YRCCfMRKbpsQfG3sQZk5bVeYCxDlHrEgdcUJ0cDG84E/HuVbH/Ahm3adzLFvHlYydwoICbo4P21psZtLs0u7wcGBWIlKmUOJ+iuUq2DC+5G5QI3+LIdSXVo6fUdLZd7HOYmMeDP7nmp6Rm8CfzNktTYB0012054+PLn5cooR14n6RN89e2TKAz9SDUmI/vTk2uRtdiLcVA==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector10001;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=xsY9i2X9oVAZLZ2Bsd/LIT8W090X8pVCX+kEzs3zN9I=;
 b=bq+1r8gLPFbiW27UBJbXnATC2i1SkG1AE6224AlIxA/T+sKOE0PGaKS8cdJx5na2Ngq2VrhHgsJ0viEQtavcQr4EEAxmroa0vEiofcRyNf9dHrgTH31jEWyVXtX0/YOb35p34Bi3SRH+8fSTIkYU0dVlgmcsKmGlQxpyduvNW+FK0gdfoz+M/gzdYGmiCvNAFedi66mE570HXA+gpm1Ar7N3slYsI7JyHiffB1mU1KH0luo5KmqfnG3GnocCy+fDrBAPla2hQ8fA74rwJlmwcvelafEzYPtwf10Rq5tPOssqS+jUG1DMGYwQ0Vm27EF5cyUob6wNwFoODKwlzrUpLg==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=none (sender ip is
 2a01:111:f403:e01f::3) smtp.rcpttodomain=avellan.org smtp.mailfrom=test.com;
 dmarc=permerror action=none header.from=test.com; dkim=pass (signature was
 verified) header.d=qualitasmx.onmicrosoft.com; arc=pass (0 oda=0 ltdi=1)
Received: from BLAPR03CA0140.namprd03.prod.outlook.com (2603:10b6:208:32e::25)
 by DS7PR05MB7447.namprd05.prod.outlook.com (2603:10b6:5:2ce::17) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.23; Fri, 27 Mar
 2026 04:22:37 +0000
Received: from BN3PEPF0000B073.namprd04.prod.outlook.com
 (2603:10b6:208:32e:cafe::e4) by BLAPR03CA0140.outlook.office365.com
 (2603:10b6:208:32e::25) with Microsoft SMTP Server (version=TLS1_3,
 cipher=TLS_AES_256_GCM_SHA384) id 15.20.9723.33 via Frontend Transport; Fri,
 27 Mar 2026 04:22:37 +0000
Authentication-Results: spf=none (sender IP is 2a01:111:f403:e01f::3)
 smtp.mailfrom=test.com; dkim=pass (signature was verified)
 header.d=QualitasMX.onmicrosoft.com;dmarc=permerror action=none
 header.from=test.com;compauth=fail reason=001
Received-SPF: None (protection.outlook.com: test.com does not designate
 permitted sender hosts)
Received: from PH0PR06CU001.outbound.protection.outlook.com
 (2a01:111:f403:e01f::3) by BN3PEPF0000B073.mail.protection.outlook.com
 (2603:10b6:40f:fc02::136) with Microsoft SMTP Server (version=TLS1_3,
 cipher=TLS_AES_256_GCM_SHA384) id 15.20.9745.21 via Frontend Transport; Fri,
 27 Mar 2026 04:22:37 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
 b=b3ZdzMBxOKqYuUSHj7Q75rpw0hCoqgyj9KmCMPKO1ZwUjKUFXOj19aGajxw83n+ZfruEJjwn2upc4ljD0a8E9kFz7H4AALvkRAT9jzja7uADyLq656+/ytE0oydZi+6K8lJvfdR/YPpWzWSBlwJv31He8TbmnWieicrgePdH1u734diyX4DeqGzndXGEpIV4LjtpoMOICCv06BrCJlBX4Xvj4rKgKOsMZ+r0+I8fzlyZNLOe9MIp15ulWC+RQcgDetbdRTPEcnOh+cQzIOrHdr5oL3597/mnxLztjZHj+07a/buqndk3dYXDehBpdI8kzNi+IpaxwXMEvgJTlWxHAA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector10001;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=xsY9i2X9oVAZLZ2Bsd/LIT8W090X8pVCX+kEzs3zN9I=;
 b=DMUcqa1c65n4eCO7jNCEdOlx4ac+4rJLazRf0Fp24hDQTIYGPDJ5QpFAFKEScTrcIqB16MhyIu+aRrIaoticpib1JLEVdgZaMEWM6BdiLKPAfx/Pz41Kv07al0N/MmvCrk5G4FEpemjKsTcFzzD+rvdIYhW2v7BzeZPQN+n9oKARYYFPZmgrblpyQHAtjZRngMc5UVwrtnOgcZbslOBRVGqsZ6GUa9Ye52oUJAX7H92s643VTeazrKWSYElWwRcBeitla8/MB6KNUDjTEt+mCegh6AIiag7OyqLEuwI9sZTzsJ/BcDYBsDvWalW4NV/TAn6YPdn3E2TfomPceHtThg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
 187.248.45.82) smtp.rcpttodomain=hotmail.ca smtp.mailfrom=test.com;
 dmarc=permerror action=none header.from=test.com; dkim=none (message not
 signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=QualitasMX.onmicrosoft.com; s=selector2-QualitasMX-onmicrosoft-com;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=xsY9i2X9oVAZLZ2Bsd/LIT8W090X8pVCX+kEzs3zN9I=;
 b=EJxOXtiuNttZGxSFdKdmmAJ1USOX7ifsl2Dp3ojjBHhcWxCCU69UQcYWo/NCLGshMpOYVeV+fpOZHZe+u4lhRzc9T2pRgVoLKOYWrKOb3iJcN6XSIfSp8wQJ91rgF6oz1of57E7F+svWhokn5NORQ2x+0GSfXeEWECPxduQCLSc=
Received: from DM6PR02CA0110.namprd02.prod.outlook.com (2603:10b6:5:1b4::12)
 by PH0PR16MB935073.namprd16.prod.outlook.com (2603:10b6:510:3b0::11) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.22; Fri, 27 Mar
 2026 04:22:26 +0000
Received: from CH3PEPF00000015.namprd21.prod.outlook.com
 (2603:10b6:5:1b4:cafe::ef) by DM6PR02CA0110.outlook.office365.com
 (2603:10b6:5:1b4::12) with Microsoft SMTP Server (version=TLS1_3,
 cipher=TLS_AES_256_GCM_SHA384) id 15.20.9745.22 via Frontend Transport; Fri,
 27 Mar 2026 04:22:26 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 187.248.45.82)
 smtp.mailfrom=test.com; dkim=none (message not signed)
 header.d=none;dmarc=permerror action=none header.from=test.com;
Received-SPF: None (protection.outlook.com: test.com does not designate
 permitted sender hosts)
Received: from owa.qualitas.com.mx (187.248.45.82) by
 CH3PEPF00000015.mail.protection.outlook.com (10.167.244.120) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.9769.0 via Frontend Transport; Fri, 27 Mar 2026 04:22:25 +0000
Received: from EXCHANGE1.qualitas.com (110.10.0.98) by EXCHANGE2.qualitas.com
 (110.10.0.99) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.29; Thu, 26 Mar
 2026 22:12:14 -0600
Received: from User (110.10.0.172) by EXCHANGE1.qualitas.com (110.10.0.98)
 with Microsoft SMTP Server id 15.2.2562.27 via Frontend Transport; Thu, 26
 Mar 2026 22:12:05 -0600
Reply-To: <[email protected])>
From: "Mr. Richard Wahl" <[email protected]>
Subject: ATTENTION TO YOU
Date: Thu, 26 Mar 2026 21:12:14 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
Return-Path: [email protected]
X-EOPAttributedMessage: 1
X-MS-TrafficTypeDiagnostic:
 CH3PEPF00000015:EE_|PH0PR16MB935073:EE_|BN3PEPF0000B073:EE_|DS7PR05MB7447:EE_|PH0PR05MB8672:EE_
X-MS-Office365-Filtering-Correlation-Id: f7de7053-4ec2-415d-eb2c-08de8bb87a46
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Forefront-Antispam-Report-Untrusted:
 CIP:187.248.45.82;CTRY:MX;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:owa.qualitas.com.mx;PTR:owa.qualitas.com.mx;CAT:OSPM;SFS:(13230040)(7093399015)(7416014)(30052699003)(29082699012)(61400799027)(32650700020)(376014)(35950700016)(82310400026)(48200799018)(13003099007)(16102099003)(18002099003)(56012099003)(27013499003)(525984004);DIR:OUT;SFP:1023;
X-Microsoft-Antispam-Untrusted:
 BCL:0;ARA:13230040|7093399015|7416014|30052699003|29082699012|61400799027|32650700020|376014|35950700016|82310400026|48200799018|13003099007|16102099003|18002099003|56012099003|27013499003|525984004;
X-Microsoft-Antispam-Message-Info-Original:
 =?windows-1251?Q?3oy+AAECq7fSSY5N+6IBnBQjuxG8+WiHsdnk093PGxk5xuOCGSxSAx5O?=
 =?windows-1251?Q?f9QoR7Aas9dN6+385lEVaytFyQwwFp1ZS3aB7DOseOEC1od2j1DnlGpX?=
 =?windows-1251?Q?WKC7pQbWj+HIoEk+k+6mkKFjTU3O+aPnVTiGSM4Tnqvep1dhgokiLACL?=
 =?windows-1251?Q?V2HhkGqGnkdqTC1Tyvd+Bq0YejuHM9s+TYvUcJbtNFqeB4Hr83GL/SBB?=
 =?windows-1251?Q?2qbO7nwnCOJYpX2i7P82hWImGzm6am3kNNOQYbbkqpGBqofBIr2ONbxr?=
 =?windows-1251?Q?l+UMzZIyE9E2jJPGDEB443rd7Gt8BvtPzL4bhZpffMBdaIUydvqxhUU+?=
 =?windows-1251?Q?CjZsh9SqpmcIdkhLjuukP1HXCBIApHtNgMshQ1Ew1m2wkD+Tp47QViW7?=
 =?windows-1251?Q?WZ1NvAdqKlAvz6durSoYD3J7kOyVNqmIO85Qvr20WkJBraOfKoKJvVmq?=
 =?windows-1251?Q?ubshxFbWJt7yo9l98vB6I+6lTwymf2f33kZV6Y9kcUUuo51c/D53SUgP?=
 =?windows-1251?Q?PH3iG7gk2AGVrNgM/e0MwqoyiYvcwmYTELY/i3dScTSARxfhXmN7GnYV?=
 =?windows-1251?Q?G/1R8zbomw4JkGXhq98dZl9d0V7CA+grLF2UgC5ANHNthZyt2RladvYK?=
 =?windows-1251?Q?/w1M+FQ6vJPrDYmmGhrYrk5khVkM9bxRgt4PxXppNLnnrCE07TuGVbSH?=
 =?windows-1251?Q?fRYoM/WvaIcQFwh7RmB2bFYq4o/V//aSU+KbAkZ4kss1Cw2c2go+aXjG?=
 =?windows-1251?Q?Zkq24ee6stfqEwSdOluaRB1oEgO7+liP+lAlmRLRgX2gk5S+dz8EDAW+?=
 =?windows-1251?Q?uuyeQecs2iZr5pq/rQ4/YK1M49H6HtsAOScTRMIJwzGvVB9wP5SfLDOL?=
 =?windows-1251?Q?+SAr36RlPW3EhodXa9eudB99AOoRKO8Mt1+hbYyud1IQSLfeJBwVDgUP?=
 =?windows-1251?Q?Uj5PR+rijmFIdeTq8ZV3u3iWL8h1kaOEyrIVVRM9jS6C0vpLmDFOE7/G?=
 =?windows-1251?Q?Dn+jL+x/2LSpJo6q/jOQrLF3BmNMNWC+G8cz62M27FVNrV8kSrEcVhlj?=
 =?windows-1251?Q?oJk5ADw808enBqQKh2IUyPTVRog2XPEd17rT0APTpbOVGAWVKcAuGUEK?=
 =?windows-1251?Q?gFpzyg34W5GsfkWYhhX8eu+gUxh7PrBiOrg5rJrrTjbHlQjMp8ZS52hE?=
 =?windows-1251?Q?4FGTjAoF47gcgZEC5OCDQYcPk8mz63R23ORVJRVz2IIh8PX6aix4qJiJ?=
 =?windows-1251?Q?fhogMYiLFlYHbj7EZV/M7NekFmIRQY9GL/80my2tsrct9QPdpU4ZEHZd?=
 =?windows-1251?Q?dw6rvQ=3D=3D?=
X-MS-Exchange-AntiSpam-MessageData-Original-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-Original-0:
 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
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR16MB935073
X-MS-Exchange-Organization-ExpirationStartTime: 27 Mar 2026 04:22:37.4900
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 f7de7053-4ec2-415d-eb2c-08de8bb87a46
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
 BN3PEPF0000B073.namprd04.prod.outlook.com
X-MS-Exchange-Transport-CrossTenantHeadersPromoted:
 BN3PEPF0000B073.namprd04.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Exchange-Organization-AuthSource:
 BN3PEPF0000B073.namprd04.prod.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id-Prvs:
 bc3f25e1-592e-4b7f-1f4a-08de8bb87366
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:2a01:111:f403:e01f::3;CTRY:;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:PH0PR06CU001.outbound.protection.outlook.com;PTR:mail-westus3azrln102210003.outbound.protection.outlook.com;CAT:SPOOF;SFS:(13230040)(704161811799003)(35042699022)(3072899012)(2092899012)(3092899012)(29082699012)(5062899012)(12012899012)(7093399015)(24003199003)(56012099003)(7013199006)(19002099003)(18002099003)(16102099003)(2700400020);DIR:INB;
X-Microsoft-Antispam:
 BCL:4;ARA:13230040|704161811799003|35042699022|3072899012|2092899012|3092899012|29082699012|5062899012|12012899012|7093399015|24003199003|56012099003|7013199006|19002099003|18002099003|16102099003|2700400020;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2026 04:22:37.2082
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f7de7053-4ec2-415d-eb2c-08de8bb87a46
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e150a9e1-6660-4367-8c1d-83290af6b7fb;Ip=[187.248.45.82];Helo=[owa.qualitas.com.mx]
X-MS-Exchange-CrossTenant-AuthSource:
 BN3PEPF0000B073.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR05MB7447
X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.1325599
X-MS-Exchange-Processed-By-BccFoldering: 15.20.9745.015
X-MS-Exchange-ExternalInOutlookResult: NotEnabled
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910005)(944490095)(944506478)(944626604)(4710137)(4715077)(4999163)(920097)(930201)(3100021)(140003);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info: