The IRS Scam I wrote about yesterday is on another server, now in South Africa: http://smtp1.cnwweb.co.za/~admin/irs/ . The from is now service@irs.com, and the reply-to is no-reply@irs.com. Many thanks to Susan who let me know that IRS phishing scams can be reported at phishing@irs.gov.
I got the same email today, 5/2008, and the sender used the letter “u” for the work “you”. I reported it too for phishing. Thank you for the blog!