Skip to main content
Jagdish Kumawat
Founder @ Dewiride

Founder of Dewiride Technologies and author of every analysis on Secure Techie. Reads the headers, DNS and registry records of each reported email before it is published; links and attachments are not opened.

View all authors

Scam: Document | A Quotation Request With No Attachment, Sent From Gmail to Itself

┬╖ 15 min read
Jagdish Kumawat
Founder @ Dewiride

Please find the attached document for your attention and consideration. Kindly provide the requested quotation at your earliest convenience. Five polite sentences, a one-word subject and no attachment: a quotation request that names no product, no company and no person, sent from a Gmail account to itself with the recipient blind-copied.

Phishing: рдХрд░ рдЕрдиреБрдкрд╛рд▓рди рдХреА рдХрдореА рдФрд░ рджрдВрдб рд╕реВрдЪрдирд╛ / Tax Compliance Deficiency and Penalty Notice | Fake CPC Bengaluru 143(1) Intimation With a ZIP

┬╖ 22 min read
Jagdish Kumawat
Founder @ Dewiride

Intimation under Section 143(1) of the Income Tax Act, 1961, cross-verified with AIS, TIS, and SFT, with a total corporate demand of тВ╣ 2,73,250 payable in fifteen days. The penalty-notice template's third draft тАФ sharing its reply-to with the 7 September version тАФ now dressed as a CPC Bengaluru intimation, with a fabricated DIN, a demand table that cites a Section 234F fee at a ceiling that was cut in half four years ago, and a ZIP to download.

Phishing: рдХрд░ рд╡рд╕реВрд▓реА рдПрд╡рдВ рджрдВрдб рд╕реВрдЪрдирд╛ | Fake Income Tax Department Tax Recovery and Penalty Notice With a ZIP Attachment

┬╖ 22 min read
Jagdish Kumawat
Founder @ Dewiride

Review of your return found under-reported income and undisclosed foreign assets. Refer to the attachment for full details. A bilingual Income Tax Department notice that says nothing about the tax, the amount, or the taxpayer, and defers to a ZIP file in every other sentence тАФ sent from a domain registered seventeen days earlier, through a real-looking government address pasted into the wrong half of the sender.

Phishing: Notice from Tax Departmen | Fake Court Notice, a Disk Image, and a Side-Loaded WeChat Binary

┬╖ 27 min read
Jagdish Kumawat
Founder @ Dewiride

COURT NOTICE. Case Number: [ITD/2026/ND/458721]. Investigating Authority: Income Tax Department, Government of India. Hearing Date: 30 September 2026. The court-notice template's fourth draft, back in English and back on a free Outlook mailbox. This time we followed the link to the end: a disk image carrying a signed Tencent WeChat executable and the malicious DLL it loads.

Fraud: цЕ╖цЕихШЕцНРцм╛ | Fake Schaeffler FAG Foundation Donation of тВм4,500,000

┬╖ 26 min read
Jagdish Kumawat
Founder @ Dewiride

You have been randomly selected to receive a тВм4,500,000 donation. A Cantonese-language donation fraud signed in the name of a real German research foundation, sent from a Rio de Janeiro fire brigade's government mailbox, and routing replies to a misspelled Gmail address.

Phishing: рдХреЙрд░реНрдкреЛрд░реЗрдЯ рдЯреИрдХреНрд╕ рдирд┐рдпрдореЛрдВ рдХрд╛ рдкрд╛рд▓рди рди рдХрд░рдиреЗ рдХреЗ рд╕рдВрдмрдВрдз рдореЗрдВ 2026 рдХрд╛ рдиреЛрдЯрд┐рд╕ | Fake Income Tax Department Court Notice

┬╖ 30 min read
Jagdish Kumawat
Founder @ Dewiride

Court Notice. Case Number: 54973713. Investigating Authority: Income Tax Department, Government of India. Monday, 7 September 2026, 10:30 AM. The Brazilian judicial-notice template we took apart in August, now translated into Hindi with its Portuguese removed and sent from a randomly generated domain instead of a free Outlook mailbox.

Scam: dewiride | Chinese Domain Name Registration Conflict from Kevin Liu

┬╖ 22 min read
Jagdish Kumawat
Founder @ Dewiride

This is a official email. We are the Domain Registration Service company in Shanghai, China. The Chinese domain name registration scam, back for the third time in our archive, sent from a nine-month-old domain with the same phone numbers and the same Shanghai address as the version we dissected in June 2024.

Phishing: рдХрд░ рдЕрдиреБрдкрд╛рд▓рди рдХреА рдХрдореА рдФрд░ рджрдВрдб рд╕реВрдЪрдирд╛ / Tax Compliance Deficiency and | Fake Income Tax Department Penalty Notice

┬╖ 29 min read
Jagdish Kumawat
Founder @ Dewiride

The tax inspection of your company has revealed irregularities under Section 271(1)(c) of the Income Tax Act, 1961. The same forged Income Tax Department notice we dissected a month ago, rewritten to remove its worst mistakes and pointed at a convincing lookalike domain registered in Indonesia.

Fraud: Re: | Fake MacKenzie Scott Foundation Donation of USD 100,800,000

┬╖ 29 min read
Jagdish Kumawat
Founder @ Dewiride

I am MacKenzie Scott, ex-wife of Amazon CEO and founder Jeff Bezos. A Chinese-language donation fraud promising USD 100,800,000 through a foundation that does not exist, sent from a German online shop's info mailbox under a subject line that is only Re:.

Phishing: Final Warning тАФ Immediate Domain Renewal Needed | Fake WordPress.com Renewal Notice

┬╖ 21 min read
Jagdish Kumawat
Founder @ Dewiride

We are contacting you regarding your expired domain registration. A WordPress.com-branded final warning sent from a German mail server subdomain, whose only button points at a throwaway subdomain of an Italian sports academy.