Benton Securetech spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 30 Jul 2026 20:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))
(envelope-from
id 1wpcmI-00000000Ib7-0Ens
for dave@doctor.nl2k.ab.ca;
Thu, 30 Jul 2026 20:15:14 -0600
Resent-From: The Doctor
Resent-Date: Thu, 30 Jul 2026 20:15:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.tkm.co.id ([101.50.2.29]:55382)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.5 (FreeBSD))
(envelope-from
id 1wpbJ8-00000000F0D-0C8w
for doctor@nk.ca;
Thu, 30 Jul 2026 18:41:11 -0600
Received: from localhost (localhost [127.0.0.1])
by mail.tkm.co.id (Postfix) with ESMTP id A40AA114A8C
for
Received: from mail.tkm.co.id ([127.0.0.1])
by localhost (mail.tkm.co.id [127.0.0.1]) (amavis, port 10032) with ESMTP
id ALj9BsgoLvRn for
Received: from localhost (localhost [127.0.0.1])
by mail.tkm.co.id (Postfix) with ESMTP id 6F9F8114A43
for
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.tkm.co.id 6F9F8114A43
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tkm.co.id;
s=C78B9440-5431-11F1-A855-7A8AB897B109; t=1785458399;
bh=K8Nfg+nVPQqZdFdlFYcJTsyYpDSvH+Ug5u/XcW6H7BM=;
h=From:To:Date:Message-ID:MIME-Version;
b=FDeRiFjoLBdg5WbK+lomqPm0ULajmuwVaifDjFENxr2r2eT/vbw2Rfo4KGt20IJ0U
hQ7EROmSimiPS2x5L005t3q+4avfUMFf8UJRowkcmF+mp9a9CqWECJvqKg4vrDFse4
TXGtb3wZWxsYIMLPS0zWaE1x4hsSjJ6r148qwyZUtFcLXaPQf338pw2a+hOTucJ5W4
n0c3i6FUEId3czaAHFj5v+QZOrOQhtkyZ9FD5msdJonI3+E5oJD463JiuYgMYmsaUX
6LO+QWIcgUoKX3AILnga2w0NhcRbmPSYkQ7tubuNsxvY6oZIPMw0mEb5a3Wh2Edz8Q
WzhMT8SOxLYdQ==
X-Virus-Scanned: amavis at tkm.co.id
Received: from mail.tkm.co.id ([127.0.0.1])
by localhost (mail.tkm.co.id [127.0.0.1]) (amavis, port 10026) with ESMTP
id Mm-_0jL0IIPU for
Received: from tkm.co.id (unknown [136.144.42.42])
by mail.tkm.co.id (Postfix) with ESMTPSA id 83633114A51
for
Reply-To: bentonsecuretech@zohomail.com
From: Benton SecureTech
To: doctor@nk.ca
Subject: Attn: Awareness Notice from Benton SecureTech
Date: 30 Jul 2026 17:39:52 -0700
Message-ID: <20260730173951.1EC9FE1A11F021D1@tkm.co.id>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_C08F3B8B.A5A51EC0"
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Valued Recipient, Online investment, fake charity donations
and cryptocurrency scams have been on the rise. Fraudsters often impersonate
trusted companies, celebrities, and investment platforms, promising guaranteed
re [...]
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[136.144.42.42 listed in will-spam-for-food.eu.org]
[136.144.42.42 listed in will-spam-for-food.eu.org]
[136.144.42.42 listed in will-spam-for-food.eu.org]
[136.144.42.42 listed in will-spam-for-food.eu.org]
[136.144.42.42 listed in will-spam-for-food.eu.org]
[136.144.42.42 listed in will-spam-for-food.eu.org]
[136.144.42.42 listed in will-spam-for-food.eu.org]
[136.144.42.42 listed in will-spam-for-food.eu.org]
[101.50.2.29 listed in will-spam-for-food.eu.org]
[101.50.2.29 listed in will-spam-for-food.eu.org]
[101.50.2.29 listed in will-spam-for-food.eu.org]
[101.50.2.29 listed in will-spam-for-food.eu.org]
[101.50.2.29 listed in will-spam-for-food.eu.org]
[101.50.2.29 listed in will-spam-for-food.eu.org]
[101.50.2.29 listed in will-spam-for-food.eu.org]
[101.50.2.29 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[101.50.2.29 listed in dnsbl.ahbl.org]
[101.50.2.29 listed in dnsbl.ahbl.org]
[101.50.2.29 listed in dnsbl.ahbl.org]
[101.50.2.29 listed in dnsbl.ahbl.org]
[136.144.42.42 listed in dnsbl.ahbl.org]
[136.144.42.42 listed in dnsbl.ahbl.org]
[136.144.42.42 listed in dnsbl.ahbl.org]
[136.144.42.42 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[101.50.2.29 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[101.50.2.29 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[101.50.2.29 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[101.50.2.29 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[101.50.2.29 listed in bl.score.senderscore.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 MIXED_HREF_CASE Has href in mixed case
Subject: {SPAM?} Attn: Awareness Notice from Benton SecureTech
------=_NextPart_000_0012_C08F3B8B.A5A51EC0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Dear Valued Recipient,
Online investment, fake charity donations and cryptocurrency=20
scams have been on the rise. Fraudsters often impersonate trusted=20
companies, celebrities, and investment platforms, promising=20
guaranteed returns or exclusive opportunities to steal your=20
money.
If you've been affected by a cryptocurrency scam, fake donations,=20
fake investment platform, romance scam, or online financial=20
fraud, don't lose hope. At Benton SecureTech, we provide scammed=20
funds recovery/digital forensic investigations, lost social media=20
account recovery, blockchain transaction analysis, and=20
professional fraud support. We work directly with the INTERPOL=20
and other security agencies to help carry out secured services=20
and recover lost funds.
Guaranteed result is assured, if you need assistance or would=20
like your case reviewed, contact us today.
Benton SecureTech
Email: bentonsecuretech@zohomail.com
Whatsapp: +1 (908) 954-4299
------=_NextPart_000_0012_C08F3B8B.A5A51EC0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Dear Valued Recipient,
Online investment, fake charity donations and cryptocurrency scams have =
been on the rise. Fraudsters often impersonate trusted companies, celebriti=
es, and investment platforms, promising guaranteed returns or exclusive opp=
ortunities to steal your money.
If you've been affected by a cryptocurrency scam, fake donations, fake i=
nvestment platform, romance scam, or online financial fraud, don't lose hop=
e. At Benton SecureTech, we provide scammed funds recovery/digital forensic=
investigations, lost social media account recovery, blockchain transaction=
analysis, and professional fraud support. We work directly with the INTERP=
OL and other security agencies to help carry out secured services and recov=
er lost funds.
Guaranteed result is assured, if you need assistance or would like your =
case reviewed, contact us today.
Benton SecureTech
Email:
">bentonsecuretech@gmail.com
Whatsapp: +1 (908) 954-4299
/HTML>
------=_NextPart_000_0012_C08F3B8B.A5A51EC0--