IRS Scam email- Sent from IP 205.204.94.129 in Magog, Canada - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
  Scam type at Advanced Search      
Scam ReporterScam Tips Received
No Name
Edinburgh, Edinburgh, United Kingdom
2013-05-18 15:01:47
Overpayment Scam
IRS Scam email- Sent from IP 205.204.94.129 in Magog, Canada 
 Scammer
  Information
Name:
Name Unknown
Email Address:
no-reply@mccga.org
Scam Website:
IRS PHISHING ALERT: Sender no-reply@mccga.org sending fraudulent tax refund email with link that redirects to phishing URL: http://www.cricandcric.com/js/lib1 (NB: Page now removed at site)
---------------
Source IP: 205.204.94.129
This IP address belongs to a High Risk Hosting Provider
ISP & Organization: Netelligent Hosting Services
Host Name: 205.204.94.129
Location: Magog, Quebec, QC, Canada.
 Got more information on this Scam/Scammer?
Add to Report
 Problems with this Report? (Spam/Legal/Abuse etc) ?
Report to Scamalot
Curious what information about you is out there? You may be surprised! | Reverse Email Lookup | Reverse Phone Lookup

Increase ad revenue 50-250% with Ezoic
54.166.232.243Array
(
    [CONTEXT_DOCUMENT_ROOT] => /home2/scamalot/public_html
    [CONTEXT_PREFIX] => 
    [DOCUMENT_ROOT] => /home2/scamalot/public_html
    [GATEWAY_INTERFACE] => CGI/1.1
    [HTTPS] => on
    [HTTP_ACCEPT] => text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    [HTTP_ACCEPT_ENCODING] => x-gzip, gzip, deflate
    [HTTP_HOST] => www.scamalot.com
    [HTTP_USER_AGENT] => CCBot/2.0 (http://commoncrawl.org/faq/)
    [HTTP_X_HTTPS] => 1
    [PATH] => /bin:/usr/bin
    [PATH_INFO] => /9860
    [PATH_TRANSLATED] => /home2/scamalot/public_html/ScamTipReports
    [QUERY_STRING] => 
    [REDIRECT_STATUS] => 200
    [REMOTE_ADDR] => 54.166.232.243
    [REMOTE_PORT] => 54714
    [REQUEST_METHOD] => GET
    [REQUEST_SCHEME] => https
    [REQUEST_URI] => /ScamTipReports/9860
    [SCRIPT_FILENAME] => /home2/scamalot/public_html/ScamTipReports
    [SCRIPT_NAME] => /ScamTipReports
    [SCRIPT_URI] => https://www.scamalot.com/ScamTipReports/9860
    [SCRIPT_URL] => /ScamTipReports/9860
    [SERVER_ADDR] => 66.147.230.173
    [SERVER_ADMIN] => webmaster@scamalot.com
    [SERVER_NAME] => www.scamalot.com
    [SERVER_PORT] => 443
    [SERVER_PROTOCOL] => HTTP/1.0
    [SERVER_SIGNATURE] => 
    [SERVER_SOFTWARE] => Apache
    [SSL_TLS_SNI] => www.scamalot.com
    [TZ] => America/Sacramento
    [UNIQUE_ID] => We1tMkKT5osAAC0B0OkAAAAe
    [PHP_SELF] => /ScamTipReports/9860
    [REQUEST_TIME_FLOAT] => 1508732210.76
    [REQUEST_TIME] => 1508732210
    [argv] => Array
        (
        )

    [argc] => 0
)