Taxpayer ID: myname-bunchofnumbersUS

Tax Type: INCOME TAX

Issue: Unreported/Underreported Income (Fraud Application)

Please review your tax statement on Internal Revenue Service (IRS) website (click on the link below):

review tax statement for taxpayer id: myname-bunchofnumbersUS

Internal Revenue Service

The phish domain it links to, hyg12zk.eu, has already been shut down.

But who.is has record of its IP address, 84.126.93.168.

Searching for other domains sharing the same address, I find

gshipagc.com A 84.126.93.168

168.93.126.84.in-addr.arpa PTR 84.126.93.168.dyn.user.ono.com

02fgu145501.cn A 84.126.93.168

keule557.cn A 84.126.93.168

sdfsdf23423455jkjg.cn A 84.126.93.168

gshipagc.net A 84.126.93.168

Picking one and checking gshipagc.net, it appears to just be a shipping company (hmmm, sounds familiar). But if you go a step further and see what IP addresses that domain has occupied recently, you get a rather long list:

gshipagc.net A 24.42.26.101

gshipagc.net A 24.136.214.23

gshipagc.net A 24.139.153.207

gshipagc.net A 58.8.22.135

gshipagc.net A 58.8.22.237

gshipagc.net A 58.8.25.219

gshipagc.net A 58.8.29.249

gshipagc.net A 58.9.33.71

gshipagc.net A 58.9.35.30

gshipagc.net A 59.91.203.57

gshipagc.net A 59.94.241.181

gshipagc.net A 59.94.247.166

gshipagc.net A 59.94.251.141

gshipagc.net A 59.95.226.244

gshipagc.net A 59.161.145.50

gshipagc.net A 61.90.105.44

gshipagc.net A 61.90.105.185

gshipagc.net A 62.68.98.163

gshipagc.net A 62.68.98.172

gshipagc.net A 62.80.180.11

gshipagc.net A 62.80.180.44

gshipagc.net A 62.248.11.180

gshipagc.net A 62.248.11.216

gshipagc.net A 66.212.155.140

gshipagc.net A 67.164.7.67

gshipagc.net A 67.230.47.228

gshipagc.net A 71.92.202.74

gshipagc.net A 74.3.203.93

gshipagc.net A 76.208.149.68

gshipagc.net A 77.22.125.13

gshipagc.net A 77.78.42.41

gshipagc.net A 77.239.70.110

gshipagc.net A 77.239.71.249

gshipagc.net A 77.253.15.109

gshipagc.net A 77.254.134.179

gshipagc.net A 77.254.193.88

gshipagc.net A 77.254.201.167

gshipagc.net A 78.37.230.200

gshipagc.net A 78.106.120.13

gshipagc.net A 78.106.186.159

gshipagc.net A 78.109.252.199

gshipagc.net A 78.131.46.220

gshipagc.net A 78.166.71.118

gshipagc.net A 78.169.12.54

gshipagc.net A 78.175.218.224

gshipagc.net A 78.177.251.105

gshipagc.net A 78.182.174.158

gshipagc.net A 78.183.228.174

gshipagc.net A 79.109.144.180

gshipagc.net A 79.116.207.32

gshipagc.net A 79.116.208.64

gshipagc.net A 79.116.238.223

gshipagc.net A 79.117.47.190

gshipagc.net A 79.117.50.50

gshipagc.net A 79.119.84.66

gshipagc.net A 79.119.221.125

gshipagc.net A 79.121.5.93

gshipagc.net A 79.163.225.101

gshipagc.net A 79.172.90.140

gshipagc.net A 79.184.33.30

gshipagc.net A 79.184.38.184

gshipagc.net A 79.184.130.17

gshipagc.net A 80.39.45.38

gshipagc.net A 80.52.178.202

gshipagc.net A 80.230.26.66

gshipagc.net A 80.230.31.39

gshipagc.net A 81.182.111.181

gshipagc.net A 81.183.31.21

gshipagc.net A 81.203.251.235

gshipagc.net A 81.213.222.21

gshipagc.net A 81.219.69.194

gshipagc.net A 82.131.226.111

gshipagc.net A 82.131.231.106

gshipagc.net A 82.131.231.242

gshipagc.net A 82.131.238.160

gshipagc.net A 82.131.239.163

gshipagc.net A 82.131.239.201

gshipagc.net A 83.5.57.90

gshipagc.net A 83.5.143.59

gshipagc.net A 83.5.167.82

gshipagc.net A 83.20.12.213

gshipagc.net A 83.20.46.109

gshipagc.net A 83.20.52.101

gshipagc.net A 83.20.55.77

gshipagc.net A 83.20.55.246

gshipagc.net A 83.20.67.87

gshipagc.net A 83.20.68.235

gshipagc.net A 83.20.146.51

gshipagc.net A 83.20.223.17

gshipagc.net A 83.20.248.183

gshipagc.net A 83.20.252.113

gshipagc.net A 83.22.183.174

gshipagc.net A 83.26.72.249

gshipagc.net A 83.27.43.21

gshipagc.net A 83.27.142.225

gshipagc.net A 83.27.167.249

gshipagc.net A 83.28.176.236

gshipagc.net A 83.28.187.39

gshipagc.net A 83.29.117.73

gshipagc.net A 83.29.160.208

gshipagc.net A 83.29.162.172

gshipagc.net A 83.29.173.16

gshipagc.net A 83.30.49.87

gshipagc.net A 83.31.57.196

gshipagc.net A 83.36.152.131

gshipagc.net A 83.40.246.173

gshipagc.net A 83.81.248.102

gshipagc.net A 83.165.190.86

gshipagc.net A 83.185.71.202

gshipagc.net A 83.185.81.119

gshipagc.net A 83.185.92.139

gshipagc.net A 83.219.10.173

gshipagc.net A 83.231.80.48

gshipagc.net A 83.231.81.31

gshipagc.net A 83.231.89.130

gshipagc.net A 84.2.194.238

gshipagc.net A 84.10.117.194

gshipagc.net A 84.10.213.53

gshipagc.net A 84.126.93.22

gshipagc.net A 84.126.93.168

gshipagc.net A 84.224.2.48

gshipagc.net A 84.224.14.60

gshipagc.net A 84.224.25.14

gshipagc.net A 84.224.70.220

gshipagc.net A 85.85.235.241

gshipagc.net A 85.97.31.153

gshipagc.net A 85.97.90.1

gshipagc.net A 85.100.78.40

gshipagc.net A 85.101.196.172

gshipagc.net A 85.101.221.137

gshipagc.net A 85.101.234.165

gshipagc.net A 85.102.82.55

gshipagc.net A 85.102.183.57

gshipagc.net A 85.107.250.163

gshipagc.net A 85.136.96.16

gshipagc.net A 85.136.129.219

gshipagc.net A 85.136.134.51

gshipagc.net A 85.136.135.18

gshipagc.net A 85.202.49.44

gshipagc.net A 87.97.13.72

gshipagc.net A 87.110.3.213

gshipagc.net A 88.9.153.107

gshipagc.net A 88.15.243.103

gshipagc.net A 88.16.213.107

gshipagc.net A 88.16.228.86

gshipagc.net A 88.22.101.19

gshipagc.net A 88.102.159.73

gshipagc.net A 88.109.26.47

gshipagc.net A 88.109.252.100

gshipagc.net A 88.110.15.224

gshipagc.net A 88.110.17.5

gshipagc.net A 88.156.39.27

gshipagc.net A 88.224.250.236

gshipagc.net A 88.226.100.135

gshipagc.net A 88.227.91.117

gshipagc.net A 88.229.151.23

gshipagc.net A 88.229.174.49

gshipagc.net A 88.232.227.193

gshipagc.net A 88.233.109.12

gshipagc.net A 88.234.12.172

gshipagc.net A 88.234.12.219

gshipagc.net A 88.234.91.8

gshipagc.net A 88.236.126.128

gshipagc.net A 88.238.243.171

gshipagc.net A 88.242.138.162

gshipagc.net A 88.242.158.138

gshipagc.net A 88.243.2.195

gshipagc.net A 88.243.35.77

gshipagc.net A 88.243.37.124

gshipagc.net A 88.243.96.173

gshipagc.net A 88.243.109.158

gshipagc.net A 88.243.152.69

gshipagc.net A 88.243.214.166

gshipagc.net A 88.243.247.96

gshipagc.net A 88.244.136.205

gshipagc.net A 88.244.137.96

gshipagc.net A 88.244.202.61

gshipagc.net A 88.251.17.45

gshipagc.net A 89.47.81.70

gshipagc.net A 89.132.5.171

gshipagc.net A 89.218.137.234

gshipagc.net A 89.229.198.123

gshipagc.net A 89.230.168.4

gshipagc.net A 90.151.113.165

gshipagc.net A 90.189.216.179

gshipagc.net A 91.39.249.167

gshipagc.net A 91.120.98.231

gshipagc.net A 91.120.123.20

gshipagc.net A 91.123.159.112

gshipagc.net A 91.124.234.82

gshipagc.net A 91.151.32.198

gshipagc.net A 92.8.211.0

gshipagc.net A 92.47.153.86

gshipagc.net A 92.47.153.145

gshipagc.net A 92.255.151.3

gshipagc.net A 93.80.176.137

gshipagc.net A 93.80.193.222

gshipagc.net A 93.100.252.207

gshipagc.net A 93.103.232.126

gshipagc.net A 93.105.219.198

In fact, at any one time, it occupies 5 different IP addresses. It doesn't seem to know what its own TTL ("time to live," = how frequently the records expire) is:

;; ANSWER SECTION:

gshipagc.net. 1800 IN A 66.212.155.140

gshipagc.net. 1800 IN A 67.164.7.67

gshipagc.net. 1800 IN A 74.3.203.93

gshipagc.net. 1800 IN A 89.229.198.123

gshipagc.net. 1800 IN A 190.97.142.3

;; ANSWER SECTION:

gshipagc.net. 972 IN A 190.97.142.3

gshipagc.net. 972 IN A 66.212.155.140

gshipagc.net. 972 IN A 67.164.7.67

gshipagc.net. 972 IN A 74.3.203.93

gshipagc.net. 972 IN A 89.229.198.123

;; ANSWER SECTION:

gshipagc.net. 442 IN A 89.229.198.123

gshipagc.net. 442 IN A 190.97.142.3

gshipagc.net. 442 IN A 66.212.155.140

gshipagc.net. 442 IN A 67.164.7.67

gshipagc.net. 442 IN A 74.3.203.93

The shipping company website has been reported as part of an employment scam:

http://www.scamwarners.com/forum/viewtopic.php?f=10&t=3366&start=0

Oh, and by amazing coincidence, that shipping company has precisely the same number of container vessels and capacity as Mediterranean Shipping Co., SA, (mscgva.ch):

http://marinelink.com/en-US/News/Article/Mediterranean-Shipping-Co-Rate-Increase/329824.aspx