20240104_PHISHING_SCAM_1

We are Gillian and Adrian Bayford. My wife and I won the biggest Euro
Millions lottery prize of 148 Million GBP and we just commenced our
Charity Donation and we will be giving out a cash donation of 6,500,000.00
GBP to 5 lucky individuals and 10 charity organizations from any part of
the world. Your email address was submitted to my wife and I by the Google
Management Team. Contact me via for more details
[email protected]


Received: from CO6PR05MB7668.namprd05.prod.outlook.com (2603:10b6:5:34a::6) by
 SJ0PR05MB8678.namprd05.prod.outlook.com with HTTPS; Thu, 4 Jan 2024 12:17:44
 +0000
Received: from PH8PR21CA0015.namprd21.prod.outlook.com (2603:10b6:510:2ce::12)
 by CO6PR05MB7668.namprd05.prod.outlook.com (2603:10b6:5:34a::6) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7159.15; Thu, 4 Jan
 2024 12:17:42 +0000
Received: from SA2PEPF000015CC.namprd03.prod.outlook.com
 (2603:10b6:510:2ce:cafe::90) by PH8PR21CA0015.outlook.office365.com
 (2603:10b6:510:2ce::12) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7159.7 via Frontend
 Transport; Thu, 4 Jan 2024 12:17:41 +0000
Authentication-Results: spf=pass (sender IP is 82.202.163.116)
 smtp.mailfrom=plitka-sdvk.ru; dkim=pass (signature was verified)
 header.d=plitka-sdvk.ru;dmarc=permerror action=none
 header.from=plitka-sdvk.ru;compauth=pass reason=105
Received-SPF: Pass (protection.outlook.com: domain of plitka-sdvk.ru
 designates 82.202.163.116 as permitted sender)
 receiver=protection.outlook.com; client-ip=82.202.163.116;
 helo=mail.rusplitka.ru; pr=C
Received: from mail.rusplitka.ru (82.202.163.116) by
 SA2PEPF000015CC.mail.protection.outlook.com (10.167.241.202) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7159.9 via Frontend Transport; Thu, 4 Jan 2024 12:17:41 +0000
Received: from localhost (localhost [127.0.0.1])
	by mail.rusplitka.ru (Postfix) with ESMTP id 959C18E290E2;
	Thu,  4 Jan 2024 14:52:07 +0300 (MSK)
Received: from mail.rusplitka.ru ([127.0.0.1])
	by localhost (mail.rusplitka.ru [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id l7BTxNFZ8g5z; Thu,  4 Jan 2024 14:52:07 +0300 (MSK)
Received: from localhost (localhost [127.0.0.1])
	by mail.rusplitka.ru (Postfix) with ESMTP id 98B4E8F682DB;
	Thu,  4 Jan 2024 04:49:30 +0300 (MSK)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.rusplitka.ru 98B4E8F682DB
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=plitka-sdvk.ru;
	s=3BAB2A3E-041E-11EC-A053-628F9CFB8F19; t=1704332971;
	bh=sGycMK7SY3n845P2MGsyQZ+4cgwxWNzJ3a7wNhiH508=;
	h=MIME-Version:To:From:Date:Message-Id;
	b=00VSk+ksKtSPI6dkfjnKqBKpd3+d3rle1uhhQq+tBvM+FbqHMotB98EhfOUDuvZxM
	 KRWdD3SRovggarCtVliEofdQsbVxFeHXMTk7ysd4IZEx1KAE2AsqW6HrcSFZrYIvYt
	 TGWIDGY8ICMXiFXuyxWdJFiqLy10aOXT8NY64D3xk7ml/sPjUYociAFnIXiNdrBNZI
	 VVy03h83pvGd6ANy5JooLiThWz8Qa37Q3JxveroXUiWspcYKv/inKNOdJ208YdYLCf
	 xnAO4cYmsJr9LJY5RwtBRZVBFgCo/Lg9QkIj82NKHDFag7vmdLHU8Axb8kFO+u1sMJ
	 tdb+JQg7G0h/A==
X-Virus-Scanned: amavisd-new at mail.rusplitka.ru
Received: from mail.rusplitka.ru ([127.0.0.1])
	by localhost (mail.rusplitka.ru [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id ErNhKVjcCgmy; Thu,  4 Jan 2024 04:49:30 +0300 (MSK)
Received: from [31.220.103.36] (vmd125136.contaboserver.net [31.220.103.35])
	by mail.rusplitka.ru (Postfix) with ESMTPSA id E15B68EE8674;
	Wed,  3 Jan 2024 19:01:47 +0300 (MSK)
MIME-Version: 1.0
Subject: I AM BLESSING YOU WITH CASH DONATION
To: Recipients <[email protected]>
From: "Gillian and Adrian Bayford" <[email protected]>
Date: Wed, 03 Jan 2024 11:01:43 -0500
Reply-To: [email protected]
Message-Id: <[email protected]>
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 04 Jan 2024 12:17:41.5669
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 d154e81c-da65-4c32-24d8-08dc0d1f2631
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 SA2PEPF000015CC:EE_|CO6PR05MB7668:EE_|SJ0PR05MB8678:EE_
X-MS-Exchange-Organization-AuthSource:
 SA2PEPF000015CC.namprd03.prod.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: d154e81c-da65-4c32-24d8-08dc0d1f2631
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:82.202.163.116;CTRY:RU;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.rusplitka.ru;PTR:mail.rusplitka.ru;CAT:SPM;SFS:(13230031)(230922051799003)(451199024)(6200100001)(5660300002)(7636003)(7596003)(356005)(22186003)(6862004)(2860700004)(6706004)(6966003)(58800400005)(33656002)(9686003)(1096003)(956004)(8676002)(86362001)(26005)(1076003)(336012)(83380400001)(166002)(6266002)(6666004)(82782002);DIR:INB;
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Jan 2024 12:17:41.2076
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: d154e81c-da65-4c32-24d8-08dc0d1f2631
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-AuthSource:
 SA2PEPF000015CC.namprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR05MB7668
X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.4512727
X-MS-Exchange-Processed-By-BccFoldering: 15.20.7159.005
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021)(140003);RF:JunkEmail;


> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3787216617_1435001622
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit