SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Fake IRS site - how to figure out who to contact?

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Sleepless
Goat Licker


Joined: 20 Jul 2006
Posts: 315
Location: In my lad's head


PostPosted: Thu Aug 09, 2007 2:20 pm Reply with quoteBack to top

Quote:
I would like to take down this site, but can't determine where it is being hosted. Can anyone help?


Mod edit - edited to shorten very long link to stop blowout - SP

mairie.saint-bonnet-en-champsaur.net



X-AOL-UID: 3219.276462713
X-AOL-DATE: Thu, 9 Aug 2007 9:19:12 AM Eastern Daylight Time
Return-Path: <[email protected]>
Received: from rly-yb01.mx.aol.com (rly-yb01.mail.aol.com [172.18.205.133]) by air-yb03.mail.aol.com (v118.4) with ESMTP id MAILINYB32-17946bb14453d5; Thu, 09 Aug 2007 09:19:11 -0400
Received: from steves-digicams.com (colocation.ozline.net [66.192.131.228]) by rly-yb01.mx.aol.com (v118.4) with ESMTP id MAILRELAYINYB17-17946bb14453d5; Thu, 09 Aug 2007 09:19:02 -0400
Received: from User [70.236.96.190] by steves-digicams.com with ESMTP
(SMTPD32-8.15) id A4261445014A; Thu, 09 Aug 2007 09:18:30 -0400
Reply-To: <[email protected]>
From: " Internal Revenue Service"<[email protected]>
Subject: Claim your tax refund now!
Date: Thu, 9 Aug 2007 08:20:13 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-AOL-IP: 66.192.131.228

After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of $109.30. Please submit the tax refund request and allow us 6-9 days in order to process it.

A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.

To access the form for your tax refund, please click here

Regards,
Internal Revenue Service

_________________
"...you keep me sleepless at night... I miss you." (my first Burkina banker, sigh!)
"I lick you from head to toes and rob your white legs with my fingers. u will love that i hope." (my second Burkina banker, yikes!)
"Hey, to your answer,your voice and the way you sounds are all B.S. is not better than any normal Nigerian man voice." (Prince Diallo to Ms. M)
"You demanded for tampax i bought it now where are you?" - Z4k3 4dams
United Kingdom Closed lad accounts x19, Safari Safari [email protected] & Charlie -Wulugu Or Bust Safaris- Lagos Nigeria to Paga ("Crocodile City") Ghana; repeat Lagos to Tokwari Ghana - 3800mi. (With SH & Craig & Frumpy )
Safari Safari Safari Nancy, Security Guy, Robert Accra to Tamale (with SH)
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Thu Aug 09, 2007 2:25 pm Reply with quoteBack to top

Maybe you can send an email to http://mairie.saint-bonnet-en-champsaur.net and ask if them if they know that fake IRS page is on their domain url, often, hackers will put a page on someone else's site without them knowing it.

Their email address is:

[email protected]

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
justjay
Baiting Guru


Joined: 22 Mar 2007
Posts: 2412
Location: ~Data Miner & Esoteric Trivia Collecter~


PostPosted: Thu Aug 09, 2007 2:57 pm Reply with quoteBack to top

Send a copy of the email with headers to [email protected] and [email protected]

_________________
Dubitando ad veritatem pervenimus
aa419.org member
Site Killing Mortar x uncounted numbers
Mugu Resellerpyramid Closed lad accountsAustraliaUnited StatesUnited KingdomNetherlandsSwitzerlandGhanaBelgiumChinaNigeriaSpain
Ivory CoastCanadaBurkina FasoSenegalHong KongSouth AfricaEuropean UnionBahamas, TheBeninMalaysiaGermanyItalyTogo|¿?|
Over 1000 - no longer counting since sometime in 2008 + #unknown# assists
WDPRs >150 Netcraft>115
----
pony pony pony - just because...
View user's profileSend private message
spot
Moderator


Joined: 25 Aug 2005
Posts: 9063
Location: Criminal Disruption Department.


PostPosted: Thu Aug 09, 2007 3:15 pm Reply with quoteBack to top

My McAffee Alert pings up with a Phishing Alert when I click the link.

_________________
Mortar x32 Purple Flower TV Star
Star Whip Jack Boot
View user's profileSend private message
remmy223
Elite Baiter


Joined: 12 Jun 2006
Posts: 1734
Location: butt f*** middle of nowhwere


PostPosted: Thu Aug 09, 2007 4:28 pm Reply with quoteBack to top

Fire fox goes into 'get the feck out of here' mode

Shocked

_________________
Cellphone x 356
bike shop
Mortar
you are bauitfull i will show the picture to my kid

Death man walking.
Click here to support 419Eater.com
View user's profileSend private messageSkype Name
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT