The Canadian Internet Registration Authority (CIRA) has issued a warning about a new phishing attack targeting holders of .CA domain names. If you receive an email with the subject line “Online Refund Form” asking for personal information, including Canadian Social Insurance Numbers, be aware that these are NOT coming from CIRA (listed in the From: field) or the Canada Revenue Agency, as they claim. Do not reply to them.