Recent phishing
Phishing
Impersonating IRS
Intent: Sensitive personal information collection
- Domain is not operated by IRS
- TLS certificate has no organization information
- Mail servers do not match IRS's known infrastructure
IRS refund status form requesting Social Security number, tax year, and filing status
Scanned 30 days ago · Aug 30, 2026, 22:27 UTC
Think this verdict is wrong?
Check a suspicious URL yourself — free to try.
Scan a URL