Monday, May 19, 2008

WARNING: From the I.R.S.--NOT!!!

On Sunday, I received the following piece of email purporting to be from the I.R.S.:



Over 130 million Americans will receive refunds as part of President Bush program to jumpstart the economy.

Our records indicate that you are qualified to receive the 2008 Economic Stimulus Refund.

The fastest and easiest way to receive your refund is by direct deposit to your checking/savings account.

Please click on the link and fill out the form and submit before May 19th, 2008 to ensure that your refund will be processed as soon as possible.

Submitting your form on May 19th, 2008 or later means that your refund will be delayed due to the volume of requests we anticipate for the Economic Stimulus Refund.

To access Economic Stimulus Refund, please click here.

[Link removed--should you click on this link, you would be directed to this site: www.smfarms.com/catalog/images/hewlett_packard/.refund.php--definitely not the I.R.S.


Gmail also removed the URL from "click here."]

© Copyright 2008, Internal Revenue Service U.S.A. All rights reserved.
__________________________________________

Despite some of the grammatical errors, this email is very convincing because the sent info specified "service@irs.gov" as the actual sender. To give gmail its just due, the message contained the following warning (Highlighted in bold red):

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more. [This link shows how you can check your gmails for validity.]

Here is the code I found when I clicked on to "Show original":

Delivered-To: [Deleted]
Received: by [Deleted] with SMTP id u1cs271976wfu;
Sun, 18 May 2008 10:23:31 -0700 (PDT)
Received: by [Deleted] with SMTP id [deleted];
Sun, 18 May 2008 10:23:30 -0700 (PDT)
Return-Path:
Received: from dollman-enterprises.com (mail.dollman-enterprises.com [68.105.207.240])
by mx.google.com with ESMTP id h8si9853846wxd.26.2008.05.18.10.23.29
;
Sun, 18 May 2008 10:23:30 -0700 (PDT)
Received-SPF: fail (google.com: domain of service@irs.gov does not designate 68.105.207.240 as permitted sender) client-ip=68.105.207.240;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of service@irs.gov does not designate 68.105.207.240 as permitted sender) smtp.mail=service@irs.gov
Received: from User ([76.202.29.82]) by dollman-enterprises.com with Microsoft SMTPSVC(6.0.3790.211);
Sun, 18 May 2008 13:23:28 -0400
From: "service@irs.gov"
Subject: 2008 Economic Stimulus Refund ( $1800 )
Date: Sun, 18 May 2008 12:24:23 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: service@irs.gov
Message-ID:
X-OriginalArrivalTime: 18 May 2008 17:23:28.0887 (UTC) FILETIME=[E3464070:01C8B90B]
_______________________________

When it comes to phishing and other email scams, domainers tend to be a fairly savvy group. But I must admit, this particular scam message caught my eye, although I did NOT fall for it.

Just remember: you need only to file your U.S. Federal tax return to receive your economic stimulus check.

No comments:

Post a Comment

Word verification has been enabled to circumvent spammers, not to censor bona fide posts. ;=)

I welcome your comments!

Ms Domainer

THE Domain Page Cloud

.co (1) .co aftermarket (1) .co domains (1) .gov sites (1) .me (1) .mobi TLD (1) .Tel (3) .tv (2) .xyz Domains (1) 3D (1) 3D domains (1) 9/11 (1) A New Name (1) ABC (1) ABC Domains (1) ABC Song (1) acquisition (2) addy domains (3) advertising (1) advice (2) aftermarket domains (5) Aggregate news feed (2) aggregator (1) Airlines (1) Alexa (1) alma mater (1) Alpha Domains (1) Alphabet Domains (1) Alphahol (1) Alphahol.com (1) alternate viewpoints (1) anniversary (1) Anti-Phishing Consumer Protection Act of 2008 (2) Apple (5) Avatars (1) baby boomers (1) BabyBanana.com (1) BabyBanana.com UDRP Grab Denied (1) backorders (1) Bad Customer Service (1) bad history domains (1) Beanies (1) beta site (1) black list (1) blacklist (1) Blogging (1) boomersd (1) boutique TLDs (2) brand (3) brand protection (1) branding (4) browsers (1) buy-out (1) cars (2) Caution (1) Citizen Journalism (1) clone sites (1) Coined words (1) Created Baby Names (1) customer no-service (2) customer service (2) CVVC domain (1) Cybersquatters (1) cybersquatting (2) dawnm5723 (1) Defensive registrations (3) definitions (1) defunct websites (1) deleting domains (1) Democratic Party (1) dictionary (1) discussion (1) domain (7) domain aftermarket (5) domain auctions (8) domain deletions (1) domain do-overs (1) Domain donations (1) domain dumping (1) domain fire sale (6) Domain for Sale (1) domain kiting (1) domain list (4) domain mistakes (2) domain names (11) domain names in novels (1) domain parking (1) domain portfilios (1) domain registrar (1) domain registrars (1) domain sales (1) domain sales page (2) domain tasting (2) Domain Tools (1) Domain tools auctions (1) Domain Tools Blog (5) domain typos (3) domainers (9) domaining (10) domaining biz (1) domaining corruption (3) Domaining feed list (1) domaining feed sites (1) domains (12) dot-com (2) dot-coms (1) dot-me (1) dot-tel (1) dot-us (1) drop catcher (2) drop catching (1) dropped domains (1) Eastern Europe (1) eBay (1) EDAG (1) editorial (2) Elliot's Blog (2) end-users (1) essays (1) ethical domaining (3) ethics (4) expired domains (1) expired trademarks (1) FAFSA (1) fan fiction (1) Farewell (1) featured domains (1) feedburner (1) feeds (1) female domaining forum (1) feminist domainer (1) fiction (1) Fiction Headquarters (1) fire (1) fire safety (2) fire-sale domains (3) Flights (1) foreign domains (3) Frank Schilling (2) freedom of speech (1) Front-running (3) Furbies (1) Future of domaining (1) gambling (2) Gambling domains (1) generic domains (3) GoDaddy (2) going viral (1) good advice (3) Goodbye (1) Google (1) Google Chrome (1) greed (2) halvarez (1) Hernandez Family (2) holiday greetings (1) I.R.S. (1) ICA (4) ICANN (4) iCar (4) Idete (1) Idete.com (1) images (1) immigrants (1) Inauguration (1) Introducing our new name: THE Domain Page (1) Investing (1) iPhone (1) IRS (1) It's been real (1) It's JUST War (1) Jennifur.com (2) Jordan Fox Seales (1) Landrush (1) law (3) lawsuits (2) Learning curve (2) legal (2) letter confusion (1) Life is a brand (1) literary agent domains (1) literary language (1) Literary.me (1) literature (1) Lord Acton (1) Lotteries (1) Macedonia (1) micro-scamming (1) Microsoft (1) misspelling (1) mobi TLD (1) mobile apps (1) Mobile poetry (1) Montenegro (1) Ms Domain (1) msdomain.com (1) music.mobi (2) Name Change (1) name domain names (2) NameJet (1) negative domains (1) netsol (4) Network Solutions (4) New Blog (1) New TLDs (4) newbie advice (1) newbie domain mistakes (1) newbie domainers (1) News feed site (1) Newspapers (2) NewsVroom (1) NewsVroom.com (1) non-domaining post (2) novel (1) odd domains (1) Off-topic (2) one-word domains (1) Oversee.net (1) parking stats (1) Pending Delete Process (1) Pennsylvania (2) Pennsylvania Primary (1) phishing email (3) phone apps (1) poems (1) poetry (1) Poets.org (1) political domains (1) PoorWriter.com (1) prejudice (1) premium domains (1) President Barack Obama (1) Presidential Election (1) Pump and Dump (1) putnik (2) Putnik TV (1) Quill (1) Quill City (1) Quill College (1) racketeering (1) Registrant Search (1) Registrars (1) Review (3) Reviews (1) Rick's Blog (1) Sahar Sarid (1) scams (3) Sedo (4) self interests (1) Self SEO (1) selling domains (1) shill bidding (4) short stories (1) Snapnames (3) Snark.me (1) Snark.tv (1) Snowe Bill (1) spam (1) speculation (1) spelling (1) spoof meaning (1) spoofs (1) Squidoo.com (1) statistics (1) stereotypes (1) Student Loans (1) successful business people (1) Ta Ta (1) Tax (1) Tax domain (1) Tax Preparation (1) technology (4) telnic (2) The ABC Song (1) The Alphabet Craze (Let’s Sing the ABC Song) (1) THE Domain Page (1) THEDomainPage.com (1) Time to move forward... (1) TLDs (3) TM domains (1) trademark infringement (5) Trademark TLDs (1) trademarks (6) Traditional Journalism (1) traffic (2) Travel (1) travel site (1) travel sites (2) Travel TV (1) TV Putnik (1) typos (3) U.S.P.S (1) UDRP (1) UDRP rulings (1) Uniregistry (1) Uniregistry.com (1) Universal Postal Union (1) unregistered domains (1) UPU (1) usage (2) user-generated content (1) USPTO (2) vanity TLDs (2) viral marketing (1) Volkswagen (4) VW (4) w or vv (1) Warnings (1) Warren Buffet (1) Web 2.0 (1) WIPO (1) writing (1) Yahoo (1) York College of Pennsylvania (1) York Daily Record (1) York Pennsylvania (1) York Sunday News (1) Yugoslavia (1)