OwlCyberSecurity - MANAGER

Edit File: 1740362476.M856342P3533682.cloudbhc.clouditzone.com,S=5979,W=6104

Return-Path: <no-reply@barclays.co.uk> Delivered-To: oneboxpk+spam@cloudbhc.clouditzone.com Received: from cloudbhc.clouditzone.com by cloudbhc.clouditzone.com with LMTP id mNwwMuzSu2dy6zUAZAThIw (envelope-from <no-reply@barclays.co.uk>) for <oneboxpk+spam@cloudbhc.clouditzone.com>; Mon, 24 Feb 2025 07:01:16 +0500 Return-path: <no-reply@barclays.co.uk> Envelope-to: carolintl@onebox.pk Delivery-date: Mon, 24 Feb 2025 07:01:16 +0500 Received: from [172.245.106.40] (port=61661 helo=172-245-106-40-host.colocrossing.com) by cloudbhc.clouditzone.com with esmtp (Exim 4.96.2) (envelope-from <no-reply@barclays.co.uk>) id 1tmNmS-00EpP0-1a for carolintl@onebox.pk; Mon, 24 Feb 2025 07:01:16 +0500 Reply-To: helenkeelan@eclipso.uk From: Barclay's Bank Plc UK no-reply@barclays.co.uk To: carolintl@onebox.pk Date: 24 Feb 2025 03:01:11 +0100 Message-ID: <20250224030110.7EAC68F1DD0B5B72@barclays.co.uk> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=17.0 X-Spam-Score: 170 X-Spam-Bar: +++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cloudbhc.clouditzone.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Barclay's Bank PLC, UK 1 Churchill Place London, E14 5HP, United Kingdom http://www.barclays.co.uk Dear Esteemed Customer, We at this bank wish to congratulate and inform you that after a thorough rev [...] Content analysis details: (17.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: barclays.co.uk] 0.8 KAM_COUK Scoring .co.uk emails higher due to poor registry security. 0.8 APOSTROPHE_FROM From address contains an apostrophe 0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to dbl.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [URIs: barclays.co.uk] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.4 YOU_INHERIT Discussing your inheritance 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 HK_SCAM No description available. 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 1.0 XFER_LOTSA_MONEY Transfer a lot of money 0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for an image 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 FROM_ADDR_WS Malformed From address 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 2.7 MONEY_FRAUD_5 Lots of money and many fraud phrases 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases 0.9 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: ***SPAM*** Remittance Notification! Barclay's Bank PLC, UK 1 Churchill Place London, E14 5HP, United Kingdom http://www.barclays.co.uk Dear Esteemed Customer,=20 We at this bank wish to congratulate and inform you that after a thorough r= eview of your Inheritance/Contract funds transfer release documents in conj= unction with the World Bank and the IMF assessment report, your payment fil= e was forwarded to us for immediate transfer of a part-payment of US$500,00= 0.00 to your designated bank account from their offshore account with us The audit reports given to us show that you have been going through hard ti= mes. You have been paying a lot of money to have your funds released, which= has been delayed by some dubious officials. We, therefore, advise that you stop further communication with any correspo= ndence outside this office since you do not have to pay any money or fee to= receive your funds as you have met the whole fund's transfer requirements.= You are only required to obtain the Non-Residential Clearance, which will e= nable us to credit your account directly by telegraphic transfer or through= any of our corresponding banks. We will also send copies of the fund's tra= nsfer release documents to you and your bankers for confirmation. Should you follow our directives, your funds will be credited and reflected= in your bank account within five (5) bank working days from the day you ob= tain this Non-Residential Clearance since your are not a British. For further details and assistance on this Remittance Notification, kindly = forward your FULL NAME: FULL CONTACT ADDRESS: TELEPHONE and FAX NUMBERS: Directly to my private; E-mail: mrs.helenkeelan@hotmail.com/helenkeelanbb@e= clipso.uk Yours sincerely, Mrs. Helen Keelan Head, International Banking Division. Barclay's Bank PLC, UK.