Recent phishing
Phishing
Impersonating IRS
Intent: Sensitive personal information collection
- Domain is not operated by IRS
- TLS certificate has no organization information
- Mail servers do not match IRS's known infrastructure
IRS refund status form requesting Social Security number, tax year, and filing status
Scanned 20 days ago · Sep 10, 2026, 10:04 UTC
Think this verdict is wrong?
Check a suspicious URL yourself — free to try.
Scan a URL