20230127_PHISHING_SCAM_1

I am Mr. Richard Wahl, the mega winner of $533M In Mega Millions
Jackpot, I'm donating to 5 random individuals if you get this email
then your email was selected after a spin ball. I have spread most of
my wealth over a number of charities and organizations' have
voluntarily decided to donate the sum of $2.5m to you as one of the
selected 5, to verify my winnings please see my you-tube website.

page below.

WATCH ME HERE: https://www.youtube.com/watch?v=tne02ExNDrw

THIS IS YOUR DONATION CODE: 0043034

Reply with the DONATION CODE to this email: [email protected], the only
fee you will pay to my personal assistant to release the money to you
is delivery fee and he will send it to you through ATM CARD or CASHIER
CHECK. The fee is the delivery cost via DHL.

Contact my personal Assistant
Name: Mr. Phil B. Gordon
Email: [email protected]
+1 (646) 995-2276

Hope to make you and your family happy.

Regards
Mr.Richard Wahl




Received: from DM6PR05MB5705.namprd05.prod.outlook.com (::1) by
 MWHPR0501MB3899.namprd05.prod.outlook.com with HTTPS; Fri, 27 Jan 2023
 21:14:17 +0000
Received: from MW4PR04CA0265.namprd04.prod.outlook.com (2603:10b6:303:88::30)
 by DM6PR05MB5705.namprd05.prod.outlook.com (2603:10b6:5:102::22) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6002.33; Fri, 27 Jan
 2023 21:14:14 +0000
Received: from MW2NAM12FT108.eop-nam12.prod.protection.outlook.com
 (2603:10b6:303:88:cafe::eb) by MW4PR04CA0265.outlook.office365.com
 (2603:10b6:303:88::30) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.25 via Frontend
 Transport; Fri, 27 Jan 2023 21:14:14 +0000
Authentication-Results: spf=pass (sender IP is 209.85.208.54)
 smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
 header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass
 reason=100
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
 209.85.208.54 as permitted sender) receiver=protection.outlook.com;
 client-ip=209.85.208.54; helo=mail-ed1-f54.google.com; pr=C
Received: from mail-ed1-f54.google.com (209.85.208.54) by
 MW2NAM12FT108.mail.protection.outlook.com (10.13.181.146) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.6064.13 via Frontend Transport; Fri, 27 Jan 2023 21:14:14 +0000
Received: by mail-ed1-f54.google.com with SMTP id u21so5862905edv.3
        for <>; Fri, 27 Jan 2023 13:14:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20210112;
        h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
         :subject:date:message-id:reply-to;
        bh=syXcj1rDxJQ5oVFN2soj2Uej8FEaJPKJN7SuK33myIM=;
        b=PTJGmuOMgewg31/O4Hyomgv33DeGrU9bCFXH5G2OitL2GOzP0bjwZgplLILF/o71PY
         b4K9spa7eyNnELvgs8FoGGpt8y41umPNOkXumHoSfnMMwnsxTaiW0JhA7GEZKuP/XjiW
         LuGVh3y8SSC/WS5m5ThoBb3UgpTstQInPP2YGwsAIknQGJzSzEyUPe0l7uSnPhfvb2Zm
         exNsuzhONk+giVhB/Ec7job9kvIRYlF7gp157/axazenvSoknVdtF3rOp63lNmIpxeE8
         w5Rp5EeBL7bASHrEtEEMhNYTchE1wXelgI0B1bWii5tWXggCtkwBsBAHEcSNwu0PxY2H
         9Kag==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20210112;
        h=to:subject:message-id:date:from:reply-to:mime-version
         :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
        bh=syXcj1rDxJQ5oVFN2soj2Uej8FEaJPKJN7SuK33myIM=;
        b=GRoJzVQ5FvCqP/Vfwr9yLYNtfa7iZ3OT4e1ZsEYU1CzFUT4IE35xSd+9Q23+fk2BZg
         mV7PJSTaTrSGFGxRwA4DdOIIQxTxycJGep+0Oqv/RR3ZM0mnbwSbXZOEupFV7USvorpZ
         DdY4UtfsIXYapL8u+FWJftqs4XbzRg/8FUfUnYJyi5UndNTcv2oR6Z+Z5OlbffCiSbHM
         jEjjPQU8UwpD6JEPZ1iO5B10chGn1al8NCrvTt2foPI1gJePufTJU1gmyJqWolUxuS8K
         oREgNNRXnUZAvE4Iw2cRryqh+BTlXcSTCDUBBQfkcsN/DHTok1X9tQJVrrN10eCblRZf
         WNEQ==
X-Gm-Message-State: AO0yUKXocqjjovIXPo9dNimAlb5Er6udHpte6e7RhlDJep+xnT6X5KRx
	mz1O+W6QVnrZ4Z0XlBHppMkYhCSwjiuZVO+c5os=
X-Google-Smtp-Source: AK7set/D+T0/WTr3Tr/AlPmuZNiJGvL5goSDl12BMLdy+Mm1jw/ddcMDrxlw99WpnE2jVoWeP3jm6l9lcffaTYXk7+E=
X-Received: by 2002:a50:c30a:0:b0:4a0:e01c:49aa with SMTP id
 a10-20020a50c30a000000b004a0e01c49aamr2290477edb.66.1674854052161; Fri, 27
 Jan 2023 13:14:12 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:640c:3d2:b0:1a2:ffe7:1eed with HTTP; Fri, 27 Jan 2023
 13:14:11 -0800 (PST)
Reply-To: [email protected]
From: Richard Wahl <[email protected]>
Date: Fri, 27 Jan 2023 22:14:11 +0100
Message-ID: <CAMdjZE9Nj2EYENzqucc8NOxNV-HnyQc5=-TD99woj8jRfAH3ow@mail.gmail.com>
Subject: THIS IS YOUR DONATION CODE: [ 0043034]
To: undisclosed-recipients:;
Bcc:
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 27 Jan 2023 21:14:14.2920
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 9ba2fdc7-86a0-41d0-a919-08db00ab7146
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: MW2NAM12FT108:EE_|DM6PR05MB5705:EE_
X-MS-Exchange-Organization-AuthSource:
 MW2NAM12FT108.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: 9ba2fdc7-86a0-41d0-a919-08db00ab7146
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:209.85.208.54;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail-ed1-f54.google.com;PTR:mail-ed1-f54.google.com;CAT:SPM;SFS:(13230025)(62800002)(451199018)(109986016)(1111899006)(4000180100002)(7596003)(356005)(76482006)(42186006)(2860700004)(966005)(82202003)(58800400005)(8676002)(73392003)(26005)(86362001)(40140700001)(55446002)(83380400001)(4744005)(7636003)(336012)(1096003)(22186003)(5660300002)(525984004);DIR:INB;
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2023 21:14:14.2452
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 9ba2fdc7-86a0-41d0-a919-08db00ab7146
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-AuthSource:
 MW2NAM12FT108.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB5705
X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.9908758
X-MS-Exchange-Processed-By-BccFoldering: 15.20.6043.022
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506478)(944626604)(920097)(930097)(3100021);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info:

Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit