OwlCyberSecurity - MANAGER

Edit File: 1739472032.M201290P756735.cloudbhc.clouditzone.com,S=6523,W=6656

Return-Path: <no-reply@barclays.co.uk> Delivered-To: oneboxpk+spam@cloudbhc.clouditzone.com Received: from cloudbhc.clouditzone.com by cloudbhc.clouditzone.com with LMTP id sJRVC6A8rmf/iwsAZAThIw (envelope-from <no-reply@barclays.co.uk>) for <oneboxpk+spam@cloudbhc.clouditzone.com>; Thu, 13 Feb 2025 23:40:32 +0500 Return-path: <no-reply@barclays.co.uk> Envelope-to: carolintl@onebox.pk Delivery-date: Thu, 13 Feb 2025 23:40:32 +0500 Received: from [172.245.106.40] (port=51408 helo=172-245-106-40-host.colocrossing.com) by cloudbhc.clouditzone.com with esmtp (Exim 4.96.2) (envelope-from <no-reply@barclays.co.uk>) id 1tie8S-003B39-0Q for carolintl@onebox.pk; Thu, 13 Feb 2025 23:40:32 +0500 Reply-To: helenkeelan@eclipso.uk From: Barclay's Bank Plc UK no-reply@barclays.co.uk To: carolintl@onebox.pk Date: 13 Feb 2025 19:40:27 +0100 Message-ID: <20250213194026.6D1950FAD97B6B06@barclays.co.uk> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=16.0 X-Spam-Score: 160 X-Spam-Bar: ++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cloudbhc.clouditzone.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Barclay's Bank PLC, UK 1 Churchill Place London, E14 5HP, United Kingdom http://www.barclays.co.uk Dear Esteemed Customer, We at this bank wish to congratulate and inform you that after a thorough rev [...] Content analysis details: (16.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?172.245.106.40>] 0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to dbl.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [URIs: barclays.co.uk] 0.8 APOSTROPHE_FROM From address contains an apostrophe 0.8 KAM_COUK Scoring .co.uk emails higher due to poor registry security. 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [172.245.106.40 listed in sa-accredit.habeas.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: barclays.co.uk] 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.0 HK_SCAM No description available. 2.5 YOU_INHERIT Discussing your inheritance 0.0 LOTS_OF_MONEY Huge... sums of money 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 XFER_LOTSA_MONEY Transfer a lot of money 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 1.0 BODY_URI_ONLY Message body is only a URI in one line of text or for an image 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 FROM_ADDR_WS Malformed From address 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: ***SPAM*** Remittance Notification! Barclay's Bank PLC, UK 1 Churchill Place London, E14 5HP, United Kingdom http://www.barclays.co.uk Dear Esteemed Customer,=20 We at this bank wish to congratulate and inform you that after a thorough r= eview of your Inheritance/Contract funds transfer release documents in conj= unction with the World Bank and the IMF assessment report, your payment fil= e was forwarded to us for immediate transfer of a part-payment of US$500,00= 0.00 to your designated bank account from their offshore account with us The audit reports given to us show that you have been going through hard ti= mes. You have been paying a lot of money to have your funds released, which= has been delayed by some dubious officials. We, therefore, advise that you stop further communication with any correspo= ndence outside this office since you do not have to pay any money or fee to= receive your funds as you have met the whole fund's transfer requirements.= You are only required to obtain the Non-Residential Clearance, which will e= nable us to credit your account directly by telegraphic transfer or through= any of our corresponding banks. We will also send copies of the fund's tra= nsfer release documents to you and your bankers for confirmation. Should you follow our directives, your funds will be credited and reflected= in your bank account within five (5) bank working days from the day you ob= tain this Non-Residential Clearance since your are not a British. For further details and assistance on this Remittance Notification, kindly = forward your FULL NAME: FULL CONTACT ADDRESS: TELEPHONE and FAX NUMBERS: Directly to my private; E-mail: mrs.helenkeelan@hotmail.com/mrs.helenkeelan= @eclipso.uk Yours sincerely, Mrs. Helen Keelan Head, International Banking Division. Barclay's Bank PLC, UK.