This time I have to verify my identity with the IRS. Interestingly enough, I have to use a 1040 form which I suppose I sent them before. Really? What will that give me?

The link was to a really long URL which started with irs.gov which is the true domain name of the IRS:

http://irs.gov.uac.newsroom.tips.for.taxpayer.identity.verification.and.tax.returns.GqaUQ7vJNVpArvqY4c5ieIwC.joyventure.net/index.php

Only it continued with many more sub-domain names and the real domain in that link was joyventure.net which is owned by someone in Buenos Aires, Argentina. Obviously, not the US Internet Revenue Services.

The hacked site was down when I checked it out.

Return-Path: <sheinis@ptd.net>
X-Original-To: alexis@m2osw.com
Delivered-To: alexis@m2osw.com
X-Greylist: delayed 480 seconds by postgrey-1.34 at jc; Wed, 14 Jan 2015 05:22:44 PST
Received: from proxyz13.mailnet.ptd.net (proxyz13.mailnet.ptd.net [204.186.204.105])
    by mail.m2osw.com (Postfix) with ESMTP id F2832CE0351
    for <alexis@m2osw.com>; Wed, 14 Jan 2015 05:22:44 -0800 (PST)
Received: from proxyz13.mailnet.ptd.net (localhost [127.0.0.1])
    by proxyz13.mailnet.ptd.net (Postfix) with ESMTP id A8E1F7E22A3;
    Wed, 14 Jan 2015 08:12:50 -0500 (EST)
Received: from proxyz13.mailnet.ptd.net (localhost [127.0.0.1])
    by proxyz13.mailnet.ptd.net (Postfix) with ESMTP id 63BB07E23C4;
    Wed, 14 Jan 2015 08:12:47 -0500 (EST)
Received: from [192.168.1.46] (pool-98-108-206-17.snloca.dsl-w.verizon.net [98.108.206.17])
    (Authenticated sender: sheinis)
    by proxyz13.mailnet.ptd.net (Postfix) with ESMTPA id B32A07E2347;
    Wed, 14 Jan 2015 08:12:22 -0500 (EST)
Content-Type: multipart/alternative; boundary="===============0254542001=="
MIME-Version: 1.0
Subject: Identity Verification
To: Recipients <sheinis@ptd.net>
From: "Internal Revenue Service" <sheinis@ptd.net>
Date: Wed, 14 Jan 2015 05:12:05 -0800
Message-Id: <20150114131222.B32A07E2347@proxyz13.mailnet.ptd.net>

Kindly verify your information from a 1040 tax form that you filed within the last six years.

Follow the reference below to verify your identity.

http://www.irs.gov/

This information is use for identity verification purposes only.

Internal Revenue Service