Fake IRS site - how to figure out who to contact?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Thu Aug 09, 2007 2:20 pm

Quote:

I would like to take down this site, but can't determine where it is being hosted. Can anyone help?

Mod edit - edited to shorten very long link to stop blowout - SP

mairie.saint-bonnet-en-champsaur.net

X-AOL-UID: 3219.276462713
X-AOL-DATE: Thu, 9 Aug 2007 9:19:12 AM Eastern Daylight Time
Return-Path: <[email protected]>
Received: from rly-yb01.mx.aol.com (rly-yb01.mail.aol.com [172.18.205.133]) by air-yb03.mail.aol.com (v118.4) with ESMTP id MAILINYB32-17946bb14453d5; Thu, 09 Aug 2007 09:19:11 -0400
Received: from steves-digicams.com (colocation.ozline.net [66.192.131.228]) by rly-yb01.mx.aol.com (v118.4) with ESMTP id MAILRELAYINYB17-17946bb14453d5; Thu, 09 Aug 2007 09:19:02 -0400
Received: from User [70.236.96.190] by steves-digicams.com with ESMTP
(SMTPD32-8.15) id A4261445014A; Thu, 09 Aug 2007 09:18:30 -0400
Reply-To: <[email protected]>
From: " Internal Revenue Service"<[email protected]>
Subject: Claim your tax refund now!
Date: Thu, 9 Aug 2007 08:20:13 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <200708090918197.SM02392@User>
X-AOL-IP: 66.192.131.228

After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of $109.30. Please submit the tax refund request and allow us 6-9 days in order to process it.

A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.

To access the form for your tax refund, please click here

Regards,
Internal Revenue Service

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

Maybe you can send an email to http://mairie.saint-bonnet-en-champsaur.net and ask if them if they know that fake IRS page is on their domain url, often, hackers will put a page on someone else's site without them knowing it.

Their email address is:

[email protected]