Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => Array ( [0] => [1] => ) [delivered-to:] => newblood@scamdex.com [received:] => Array ( [0] => from edie.newsblaze.comby edie.newsblaze.com with LMTPid IL0wKc2MjVxrbQAApOa+tw(envelope-from )for ; Sat, 16 Mar 2019 19:54:53 -0400 [1] => from mail.gtel.in ([49.50.103.148]:42419)by edie.newsblaze.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)(Exim 4.91)(envelope-from )id 1h5J8d-0008Aa-4vfor Submissions@scamdex.com; Sat, 16 Mar 2019 19:54:53 -0400 [2] => from localhost (localhost [127.0.0.1])by mail.gtel.in (Postfix) with ESMTP id 7E0582FA1D8E;Sun, 17 Mar 2019 05:23:39 +0530 (IST) [3] => from mail.gtel.in ([127.0.0.1])by localhost (mail.gtel.in [127.0.0.1]) (amavisd-new, port 10032)with ESMTP id bMC2uALcXBGB; Sun, 17 Mar 2019 05:23:39 +0530 (IST) [4] => from localhost (localhost [127.0.0.1])by mail.gtel.in (Postfix) with ESMTP id A1FD72FA1DC3;Sun, 17 Mar 2019 05:23:36 +0530 (IST) [5] => from mail.gtel.in ([127.0.0.1])by localhost (mail.gtel.in [127.0.0.1]) (amavisd-new, port 10026)with ESMTP id X8_LVeSYLY4B; Sun, 17 Mar 2019 05:23:35 +0530 (IST) [6] => from mail.gtel.in (mail.gtel.in [49.50.103.146])by mail.gtel.in (Postfix) with ESMTP id 59E352FA1301;Sun, 17 Mar 2019 05:23:33 +0530 (IST) ) [envelope-to:] => Submissions@scamdex.com [delivery-date:] => Sat, 16 Mar 2019 19:54:53 -0400 [dkim-filter:] => OpenDKIM Filter v2.10.3 mail.gtel.in A1FD72FA1DC3 [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gtel.in;s=08A9AC94-E68C-11E8-A5B3-29043637D35D; t=1552780416;bh=W63R4E2/8//sB25gbHaROib5+/z7rXvsEaozFgae5YQ=;h=Date:From:Message-ID:MIME-Version;b=WjT0af70+wXVm2dk2c3CnHIPTJqby2TFZh96Cq3iusbCy/8DK20fA3l9NYc/0YF84 +9aU9WRg/SmdrnlH/SN2bxtOobxjpD/BI1x1c8SCqOk94Ekyr5jLFwO3NOtbRrc12g wgNeprWxt0sC/532t4B+tK4l6Lte0tMXjlge56tnTRZSvGz0+Jow4obPGSNeXVzLYK sj0LoCWhpyMHkDh30iagKVXEwCruPsKzV3X7DGapAaaaDJiLWh6dlCGC8fAmgVu9iT ZmktY9ONZL0Kqhr75e5vDx356FZMX7N6HfKIw2Q0ldFdB/MxlkkPEC81NgM1Fmj9IU nA3p4Hsam/Icg== [x-virus-scanned:] => amavisd-new at mail.gtel.in [date:] => Sun, 17 Mar 2019 05:23:33 +0530 (IST) [from:] => Income Tax Dept [reply-to:] => Income Tax Dept [message-id:] => <1476903170.708181.1552780413291.JavaMail.zimbra@gtel.in> [in-reply-to:] => <589260548.702094.1552767502447.JavaMail.zimbra@gtel.in> [references:] => <1285144539.687777.1552753315984.JavaMail.zimbra@gtel.in> <589260548.702094.1552767502447.JavaMail.zimbra@gtel.in> [subject:] => : Rs. Rs 86,320 Tax Payment was deducted From your account [mime-version:] => 1.0 [content-type:] => multipart/mixed; boundary="----=_Part_708177_559264679.1552780413270" [x-originating-ip:] => [49.50.103.146] [x-mailer:] => Zimbra 8.7.11_GA_1854 (ZimbraWebClient - GC72 (Win)/8.7.11_GA_1854) [thread-topic:] => : Rs. Rs 86,320 Tax Payment was deducted From your account [thread-index:] => QTlu0mRwd5rPeAm0cKwG0LFf1GFRqZNYjFIPuPyrhhg= )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.