20260523_PHISHING_SCAM_1

Good Day Sir/Ma,

We write to inform you that, based on updates from our monitoring system, your compensation/Inheritance funds, which were previously pending in our records, have now been successfully transferred to Medallion Bank for further processing.

To proceed with your claim, kindly contact Medallion Bank using the details provided below:

Bank Contact Details
Bank Name: Medallion Bank
Name: Harry Dennis Mark
Email: [email protected]

We recommend that you reach out promptly and follow the bank’s instructions to facilitate the timely release of your funds.

Best Regards
Marco Rubio
United States Secretary

Note: If this notification email is delivered to your Junk or Spam folder, kindly move it to your Inbox to ensure proper viewing and easy accessibility.




Received: from CY5PR05MB9047.namprd05.prod.outlook.com (::1) by
 PH0PR05MB8672.namprd05.prod.outlook.com with HTTPS; Sat, 23 May 2026 16:40:25
 +0000
Received: from SJ0PR13CA0165.namprd13.prod.outlook.com (2603:10b6:a03:2c7::20)
 by CY5PR05MB9047.namprd05.prod.outlook.com (2603:10b6:930:3d::7) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.71.10; Sat, 23 May
 2026 16:40:23 +0000
Received: from SJ5PEPF000001F1.namprd05.prod.outlook.com
 (2603:10b6:a03:2c7:cafe::9c) by SJ0PR13CA0165.outlook.office365.com
 (2603:10b6:a03:2c7::20) with Microsoft SMTP Server (version=TLS1_3,
 cipher=TLS_AES_256_GCM_SHA384) id 15.21.71.10 via Frontend Transport; Sat, 23
 May 2026 16:40:22 +0000
Authentication-Results: spf=pass (sender IP is 188.128.118.186)
 smtp.mailfrom=novomakt.ru; dkim=pass (signature was verified)
 header.d=novomakt.ru;dmarc=pass action=none
 header.from=novomakt.ru;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of novomakt.ru designates
 188.128.118.186 as permitted sender) receiver=protection.outlook.com;
 client-ip=188.128.118.186; helo=mail.novomakt.ru; pr=C
Received: from mail.novomakt.ru (188.128.118.186) by
 SJ5PEPF000001F1.mail.protection.outlook.com (10.167.242.69) with Microsoft
 SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.71.7 via
 Frontend Transport; Sat, 23 May 2026 16:40:21 +0000
Received: from User (unknown [172.22.1.1])
	by mail.novomakt.ru (Postcow) with SMTP id 0993E1A4D70;
	Sat, 23 May 2026 22:04:56 +0700 (+07)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=novomakt.ru; s=dkim;
	t=1779548750; h=from:reply-to:subject:date:mime-version:content-type:
	 content-transfer-encoding; bh=1OqOKbjRXCblGJEGCIeife1pf2LQTMKa+wliyDC6Ik0=;
	b=F24OWAEXwWxoPd3/IV876Ws7kkch5kevLmeO649T7fFsBrFMWbv5uS8JTPrYX3m8AGBdg3
	4ZqF8ajf5ws5Klz5GmZprUiM5SZg6vQRPebgPUtm7nrwjDmkuwiJRXPGk5zdd0FzJ8t0SW
	OysKXjQHa4eJNYGVL7Y0sN2PcGm7QsU0FuTIAduCslesbk90uY8BRMtbREeC4Aboy+G05Q
	kXCs76QSV+BBI9BVS73gtKckFejKjktamn4CfJzqZaugrBHncWKc5YIxKvgMIG4lLgtmgM
	66RRRBM9T0E4Ixnu2XwuCHqq0WwEnYT2nezR2UUhzzrnhhBKpbgiGpaGn7c4StwBernnka
	7Olhw3XSf/uSjCt6orCTyOslTs7/ZTl88+7ri0I5+LY11HB9nCxE0o4+eUrjR4KvfJ+ttJ
	4a9R6tr9Rg+gIFmaC22UWHxTEcRjOaA6vdBbJWC1AhV0zhhdbxEm5PeRvmHV5ni5DDlUmd
	D6U1ibID/Q0J5gHFMkEmtFCs8A4gPR9PFyGNaQhkk0j/R5cQStX0U9HedGoKxGmhpMM/XQ
	pGu7ils1bZ4c9Wd/i8ztBl9qQtr/o/dza2wOOGmJVfZDeR3sIV87jbDbXQ0tSC/R2mz2fm
	flmFef/Ss9z7Hojd64/mQMSvUGdur1zhxBO3sf/ttLsgpLBM8tglo=
Authentication-Results-Original: mail.novomakt.ru;	none
Reply-To: <[email protected]>
From: "From Marco Rubio"<[email protected]>
Subject: => Confidential Message
Date: Sun, 24 May 2026 07:02:07 +0700
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Last-TLS-Session-Version: None
X-Rspamd-Queue-Id: 0993E1A4D70
X-Spamd-Result: default: False [14.81 / 15.00];
	DATE_IN_FUTURE(4.00)[8];
	BAYES_SPAM(3.81)[97.94%];
	RCVD_HELO_USER(3.00)[];
	FORGED_MUA_OUTLOOK(3.00)[];
	R_BAD_CTE_7BIT(1.00)[7bit];
	FUZZY_RATELIMITED(0.00)[rspamd.com];
	ARC_NA(0.00)[];
	MISSING_TO(0.00)[];
	MIME_TRACE(0.00)[0:~];
	MIME_HTML_ONLY(0.00)[];
	R_NO_SPACE_IN_FROM(0.00)[];
	MISSING_MID(0.00)[];
	OLD_X_MAILER(0.00)[];
	RCVD_COUNT_ZERO(0.00)[0];
	FORGED_OUTLOOK_HTML(0.00)[];
	HAS_X_PRIO_THREE(0.00)[3];
	FROM_EQ_ENVFROM(0.00)[];
	FROM_HAS_DN(0.00)[];
	HAS_REPLYTO(0.00)[[email protected]];
	REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];
	MAILCOW_DOMAIN_HEADER_FROM(0.00)[novomakt.ru];
	LOCAL_OUTBOUND(0.00)[];
	DKIM_SIGNED(0.00)[novomakt.ru:s=dkim];
	FORGED_OUTLOOK_TAGS(0.00)[]
X-Spam-Flag: YES
X-Spam: Yes
Message-ID:
 <daef6fd5-3168-42e3-b2a2-7976f41c7b2e@SJ5PEPF000001F1.namprd05.prod.outlook.com>
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 23 May 2026 16:40:21.8234
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 e6863b39-ef2a-4d07-ede3-08deb8e9fb6b
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 SJ5PEPF000001F1:EE_|CY5PR05MB9047:EE_|PH0PR05MB8672:EE_
X-MS-Exchange-Organization-AuthSource:
 SJ5PEPF000001F1.namprd05.prod.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: e6863b39-ef2a-4d07-ede3-08deb8e9fb6b
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:188.128.118.186;CTRY:RU;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.novomakt.ru;PTR:ErrorRetry;CAT:SPM;SFS:(13230040)(5009299003)(2069299003)(18002099003)(19002099003)(8096899003)(3023799007)(56012099003)(16102099003)(2700400020);DIR:INB;
X-Microsoft-Antispam:
 BCL:0;ARA:13230040|5009299003|2069299003|18002099003|19002099003|8096899003|3023799007|56012099003|16102099003|2700400020;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 May 2026 16:40:21.3144
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e6863b39-ef2a-4d07-ede3-08deb8e9fb6b
X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
X-MS-Exchange-CrossTenant-AuthSource:
 SJ5PEPF000001F1.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY5PR05MB9047
X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.8144610
X-MS-Exchange-Processed-By-BccFoldering: 15.21.0071.000
X-MS-Exchange-ExternalInOutlookResult: NotEnabled
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910005)(944506478)(944626604)(4710137)(4715077)(4999163)(920097)(930201)(3100021)(140003);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info: