By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here. - Internet Anti-Fraud Center - now open!

 Phisher pretending to be Inland Revenue

View next topic
View previous topic
Post new topicReply to topic
Author Message
Not quite a Newb

Joined: 10 Nov 2006
Posts: 53
Location: U.K.

PostPosted: Fri Mar 05, 2010 11:47 am Reply with quoteBack to top

In Britain the deadline for submitting last years income tax returns was January 31 and the current tax year ends on April 5th. So about now we expect communications from the tax departments (I've already had a couple of snail mails) and today I received an Email purporting to come from the Inland Revenue: My server put it in the spam box. The appearances were pretty convincing with correct logo and colour.

However if you do "click here" where indicated you now get a web forgery alert (if you have the appropriate defences in place) and the URL in the address bar is (see near bottom in the quoted Email with headers below)

This is a site selling "replica" (fake) designer goods.

This is certainly a new type of phish for me - I've had numerous bank & paypal ones in the past

Return-Path: <[email protected]>
Received: from [] (HELO
by (CommuniGate Pro SMTP 5.2.16)
with ESMTP id 30922249 for **********; Thu, 04 Mar 2010 19:28:26 +0000
Received: from [] (helo=JWFPLC.COM)
by with esmtp id KYRVFB-0001UO-IG
for **********; Thu, 04 Mar 2010 19:28:24 +0000
Received: from User ([]) by JWFPLC.COM with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 3 Mar 2010 13:12:42 -0600
From: "HM Revenue"<[email protected]>
Subject: Tax Refund
Date: Wed, 3 Mar 2010 11:22:41 -0800
MIME-Version: 1.0
Content-Type: text/html;
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-OriginalArrivalTime: 03 Mar 2010 19:12:42.0578 (UTC) FILETIME=[7FBCA320:01CABB05]
X-RealMail-Category: BULK/UNKNOWN
X-RealMail-Ref: BULK/str=0001.0A0B0203.4B9009D8.00BC,ss=3,fgs=16
X-RealMail-IWF: NO
X-RealMail: suspect


<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">


<table border="1" cellpadding="1" cellspacing="0" width="354" id="table1">
<img src="" align="middle" height="72" width="354">

<td><font face="Courier" size="1">&nbsp;After the last annual calculations of
your fiscal activity we have determined that you are eligible to receive
a tax refund of <b>431.10 GBP. </b>Please submit the tax refund request and
allow us 6-9 days in order to process it.<br><br></font><font face="Courier" size="2">A refund can be delayed for a variety of
reasons. For example submitting invalid records or applying after the
deadline.<br><br>To access the form for your tax refund,
please <b>
<a target="_blank" href="">click
here</a></b><br><br>Regards, <br>
HM Revenue & Customs</font></td>
<table border="0" cellpadding="0" cellspacing="0" id="table2" width="359">
<td align="center"><font color="#c0c0c0" size="2">© Copyright 2009, HM Revenue & Customs UK</font></td>



Anyone else had anything similar? Spread the word you have to be even more careul now in your dealings with the Inland Revenue.


Just because you're paranoid doesn't mean that they aren't out to get you.
View user's profileSend private message
Mr Tambourine Man
Baiting Guru

Joined: 06 Jun 2008
Posts: 3386
Location: Magic swirlin' ship

PostPosted: Mon Mar 08, 2010 10:49 am Reply with quoteBack to top

It's quite a common one.


Closed lad accounts x 4
3 dead websites

is always Good when you have the zeal to be a hitwoman when you out of school,it makes you bold and reall and it makes you more high than any other of your friend.
you dont have a phone.that makes makes you joe butt. Fuck you and go find something to do man. Stop disturbing me please.
This is definitely why you will remain and die in poverty, ignorant of good things and easy acknowledgment of bad things and words. Shame on you, you wicked generation children.
i went you to no that this is not a cheld pray. i went you to get back to me
we are not scammer,we hate scammer as you do.scammer make out life harder and harder,a lot of people think we are scammer,in fact,we are not!! please trustt us
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic

 Jump to:   

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

E-Mail Header Analysis

All Content © 2003 -
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT