Recent phishing
Phishing
Impersonating IRS
Intent: Sensitive personal information collection
- Domain is not operated by IRS
- TLS certificate has no organization information
- Mail servers do not match IRS's known infrastructure
IRS refund status form requesting Social Security number, tax year, and filing status
Scanned 56 days ago · Aug 5, 2026, 00:50 UTC
Think this verdict is wrong?
Check a suspicious URL yourself — free to try.
Scan a URL