Fishing e-mail

[mrGSH]

Here the whole text and headers (with some removed for privacy reasons) of a fishing e-mail, that claims to b e from IRS

Delivered-To: someone@gmail.com
Received: by 10.210.110.6 with SMTP id i6cs48113ebc;
Tue, 27 May 2008 09:51:19 -0700 (PDT)
Received: by 10.114.53.1 with SMTP id b1mr1562102waa.53.1211907077608;
Tue, 27 May 2008 09:51:17 -0700 (PDT)
Return-Path: <taxrefund@4x9c.5xdb68d3.irs.gov>
<><>Removed<><>
<><>Removed<><>
X-Iris-Envelope-Recipient: <dadndaves@somedomain.com>
X-Iris-Envelope-Sender: <taxrefund@4x9c.5xdb68d3.irs.gov>
X-Iris-Host: 1463696048/[87.62.58.176]
Received: from [87.62.58.176] (EHLO ensim.repairit.dk) (87.62.58.176)
by iris4.directnic.com (iris/0.185:930643) with ESMTP
for <dadndaves@somedomain.com> (rule 930643); 27 May 2008 16:46:08 +0000
Return-Path: taxrefund@4x9c.5xdb68d3.irs.gov
Received: from service (static-64-222-189-175.man.east.verizon.net [64.222.189.175])
(authenticated bits=0)
by ensim.repairit.dk (8.12.10/8.12.10) with ESMTP id m4RI8Pmp031544;
Tue, 27 May 2008 20:08:27 +0200
Message-Id: <200805271808.m4RI8Pmp031544@ensim.repairit.dk>
Reply-To: taxrefund@4x9c.5xdb68d3.irs.gov
From: Internal Revenue Service (IRS)<taxrefund@4x9c.5xdb68d3.irs.gov>
Received-SPF: none (ensim.repairit.dk: domain of taxrefund@4x9c.5xdb68d3.irs.gov does not designate permitted sender hosts)
To: <><>Removed<><>
Subject: Economic Stimulus Payment Notification
Date: Tue, 27 May 2008 12:50:42 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

<style type="text/css">
<!--
.style1 {font-family: "Courier New", Courier, monospace}
.style3 {font-family: "Courier New", Courier, monospace; font-weight: bold; }
-->
</style>
<tbody>
<tr>
<td bgColor="#ffffff">
<table cellSpacing="0" cellPadding="0" width="581" border="0">
<tbody>
<tr bgColor="#558800">
<td width="581" bgColor="#001C5A">

<div align="center"><img height="72" src="http://www.irs.gov/irs/cda/common/images/irslogo.gif" width="354"></div></td></tr></tbody></table>
<table cellSpacing="0" cellPadding="0" width="583" border="0">
<tbody>
<tr>
<td width="612" vAlign="top">
<table class="subCopy" cellSpacing="0" cellPadding="15" width="99%" align="center" border="0">
<tbody>
<tr>
<td vAlign="top">
<p><span class="style1"><strong>Internal Revenue Service (IRS)<br />

</strong> United States Department of the Treasury <br />IRS-2008-66, May 27, 2008</span></p>
<p class="style1">The Internal Revenue Service has begun to transfer economic stimulus payments
to millions of Americans, some of whom will see payments in their bank accounts
as early as today.</p>
<p class="style1">The IRS will issue payments of up to $600 ($1,200 for married couples)
plus $300 for eligible children younger than 17, throughout the spring and summer.
The first wave of payments will go to people who opted for direct deposit
on their 2007 income tax returns.</p>
<p class="style1">"If you think you may be eligible, even if you don’t normally file a tax return,
please check it out. And, use direct deposit to get your payment faster.”</p>
<p class="style1">Whether a taxpayer opted for direct deposit determines how soon the payment
will arrive. The first cycle of economic stimulus payment will be
e-mailed starting May 9.</a></p>
<p class="style1"><strong>To access the form for your Economic Stimulus Payment,
please use the following personalized link:</strong></p>

<p class="style3">http://0x7C.0xDB.0x11D1/irs.economic.stimulus.payment.php</p>
<p class="style1">Document Reference: (0x7C.0xDB.0x11D1).</p>
<p class="style1">The IRS will send notices to taxpayers who are eligible for an economic stimulus payment.
By keeping people informed, the IRS hopes to reduce calls to customer service representatives
who are still busy helping taxpayers complete tax returns.</p>
<p class="style1">Internal Revenue Service (IRS)
United States Department of the Treasury</p></td>
</tr></tbody></table>
<table cellSpacing="0" cellPadding="0" width="100%" border="0">
<tbody>
<tr>
<td></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody>

</div>

[BornForCode]

You must get used to it till now and i think is called pishing this system of stealing data.

[pluggy]

I get dozens of phishing e-mails mainly from 'banks' these days. Something of a giveaway when you've never banked with the establishment in question. I don't get any for my own bank since they implemented a magic box solution for security. Having the credentials for the website won't get you money. You also need one of their 'magic boxes' and the debit card linked to the account. Its not connected to the computer, you put your debit card in it and it generates a one time pin based on the chip in the card and the time. So a keylogger or phishing is next to useless, you also need to locate the person and mug them..................