Well now, this is rather interesting! I found, in my INBOX, an email from a Kenneth Clark purporting to be from the Criminal Investigation Dept of the Internal Revenue Service. Topic? Marilyn Todd.
From: “Clark Kenneth” <Kenneth.Clark@ci.irs.gov>
To: “Skip@granitegrok.com” <Skip@granitegrok.com>
Sent: 1/25/2022 6:43:55 PM
Subject: Article on The GrokHello Skip,
My name is Ken Clark, I am a Special Agent with the Internal Revenue Service, Criminal Investigation.
I saw an article on Granite Grok regarding a woman who collected money for a forensic audit to be done on the Windham, NH election issue of 2020, and is now re-locating to a southern state. The article suggests that the individual did not use the “donated” funds for the intended purpose. Would you be willing to speak with me regarding any additional information you may have on what happened to the money she collected? If so, please call my office at 781-876-1041, leave a message and I will call you back. I am hoping we could meet in person, so that I can verify my identity.
Sorry to not use names. Internal Revenue Service policy does not allow me to use Personally Identifiable Information (PII) on unencrypted email for the protection of taxpayers.
Kenneth Clark
Special Agent
United States Treasury
Internal Revenue Service – Criminal Investigation
Boston Field Office
Ph: 781.876.1041
Fax: 781.876.1262
Now, if this is an official email, well, then Mr. Clark didn’t do his homework because our FAQs clearly state that any email sent to us is liable to be posted:
Look in About or Contact Us to reach us by email.
Anything you send us is fair game and may be used on the site. Exceptions to this policy include if you ask us not to; however, if we judge the email to be nasty, we may still publish it to skewer poor judgment or lack of critical thinking.
Because we have lives outside of the blogosphere and are married to other people and not this blog, emails may go unanswered. This will be especially true if we become roaring successes and get millions of hits a day. Otherwise, we will make a good-faith effort to respond to some/many/most emails.
And this email certainly caught my eye. But it said nothing about being discrete, your eyes only, or something like that. So posting it up may be the case this is a future “HELP!” in case no one hears from me for a while and then I need to get bailed out.
OK, I kid. Mostly because some of this email is “kinda off” and comes on the heel, yet again, of some of Marilyn Todd’s followers sending me 5 different emails with the same P&L (Profit and Loss statement). Sorry, a P&L doesn’t answer the question of “where’d the [donated] money go” – showing their lack of both awareness and economic literacy. I also haven’t posted up her husband’s latest screed he texted me.
DANG! I had no idea that I, personally, and alone, could destroy the entire political Liberty & Freedom movement here in NH. WHO KNEW I had such superpowers. Y’all will laugh at it.
However, what does seem to be off is:
- The IRS would send a snailmail Letter, not an email
- Or he’d be knocking on my door
- I’ve not donated so I have no financial dog in this fight. Frankly, I’ve already said that I have no idea what the raised donations were spent on – that’s why I keep asking the question “Where’d the money go”. P&Ls don’t answer that question. But the donors to her non-profit ought to know, right?
- “I am hoping we could meet in person, so that I can verify my identity.” Yeah, that isn’t happening – and that wouldn’t be asked in an email (see #1, #2, above). Does anyone remember, besides me, what happened at a Dunkin’ Donuts to someone who went to meet Law Enforcement?
- WHY would I call simply to leave a voice mail?
- And I don’t even know what this really means: “Sorry to not use names. Internal Revenue Service policy does not allow me to use Personally Identifiable Information (PII) on unencrypted email for the protection of taxpayers.”. I’m assuming that would be Marilyn Todd, but the email effectively outed her in the first place (“I saw an article on Granite Grok regarding a woman who collected money for a forensic audit to be done on the Windham, NH election issue of 2020, and is now re-locating to a southern state.”).
So, is it a spoof? Dunno, so I looked at the email header info to see which servers it passed through:
Received: (qmail 22421 invoked by uid 108); 25 Jan 2022 18:44:03 -0500
Received: by simscan 1.4.0 ppid: 21341, pid: 22137, t: 1.3763s scanners: clamav: 0.102.3/m: spam: 3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on 68CFE549.nexcess.net
X-Spam-Level:
X-Spam-Status: No, score=-2.6 required=7.5 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FROM_GOV_DKIM_AU,HTML_MESSAGE, RCVD_IN_DNSWL_HI,RDNS_NONE,SPF_HELO_NONE,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.2
Received: from unknown (HELO EMG3.irs.gov) (152.216.7.171) by 68CFE549.nexcess.net with ESMTPS; 25 Jan 2022 18:44:02 -0500
Received-SPF: pass (68CFE549.nexcess.net: SPF record at ci.irs.gov designates 152.216.7.171 as permitted sender)
IronPort-SDR: 24gVCzert9XdJm72PtbvRHZ8/oPuPogL89343YZIc7zBY5ZB6aGXPIPEgtz10rrp5BrUviFhM8 2U5c4EtmKWow==
X-IronPort-AV: E=Sophos;i=”5.88,316,1635220800″; d=”scan’208,217″;a=”448384528″
Received: from unknown (HELO mtb0120img1.mcc.irs.gov) ([10.207.120.31]) by mtb0120emg3.mcc.irs.gov with ESMTP; 25 Jan 2022 18:43:56 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ci.irs.gov; l=6080; q=dns/txt; s=ci-20171230; t=1643154236; h=from:to:subject:date:message-id:mime-version:cc; z=From:=20Clark=20Kenneth=20<Kenneth.Clark@ci.irs.gov>|To: =20″Skip@granitegrok.com”=20<Skip@granitegrok.com> |Subject:=20Article=20on=20The=20Grok|Date:=20Tue,=2025
=20Jan=202022=2023:43:55=20+0000|Message-ID:=20<2541ebf50
1694eada50c13d79fa2cad9@ci.irs.gov>|MIME-Version:=201.0
|Cc:=20;
bh=M+trKcX6ZrWbebg7alxwC4hRVZDg5w2d27jRSO3empM=;
b=bjPTJnGMHdRNw/9gx+Y/L5sOd9r2AGaFHuM6YSYoG9gGRiaYCJlN4ZlE
jLtlWN8XnaDPC+/rUN9W5uE/J2+yOHQKpvSrCKmSXEbgd6NS2O/6ZY1Pu
LKcE/8/aCrPmuIgYWOcNt6pGWhEsDtfMEk/1JOTtNYKJlQ9ARFkkw5Qfp
9V80DAs597ji0o5sfXI94KelNSAQ2R2BTcROhKNm1x6lTf7hqs8tCqYnB
/MZ36a7OXkb+PemI9IfDPEhZnQncXthPN9W4LBSfMf59fU+z6wfGtHCYl
urh0CkGcyiIBH+94M/eT8D8KhIcavlvMYL5fvytYSEB7/2mTiO46IkLEU
A==;
Received: from tcczix002.ci.irs.gov ([10.219.124.103]) by mtb0120img1.mcc.irs.gov with ESMTP; 25 Jan 2022 23:43:56 +0000
Received: from 127.0.0.1 (ZixVPM [127.0.0.1]) by Outbound.ci.irs.gov (Proprietary) with SMTP id EF82132422C3
for <Skip@granitegrok.com>; Tue, 25 Jan 2022 18:43:58 -0500 (EST)
Received: from DC2EXC0008.ci.irs.gov (dc2exc0008.ci.irs.gov [10.219.52.159]) by tcczix002.ci.irs.gov (Proprietary) with ESMTP id A992C32421C2
for <Skip@granitegrok.com>; Tue, 25 Jan 2022 18:43:58 -0500 (EST)
Received: from DC2EXC0007.ci.irs.gov (10.219.52.158) by DC2EXC0008.ci.irs.gov
(10.219.52.163) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2375.18; Tue, 25 Jan 2022 17:43:55 -0600
Received: from DC2EXC0007.ci.irs.gov ([fe80::9435:9018:b8c4:9f0c]) by DC2EXC0007.ci.irs.gov ([fe80::9435:9018:b8c4:9f0c%17]) with mapi id 15.01.2375.018; Tue, 25 Jan 2022 17:43:55 -0600
From: Clark Kenneth <Kenneth.Clark@ci.irs.gov>
To: “Skip@granitegrok.com” <Skip@granitegrok.com>
Subject: Article on The Grok
Thread-Topic: Article on The Grok
Thread-Index: AdgSRJdAY91lwvVEQyWzf7ofUuIEig==
Date: Tue, 25 Jan 2022 23:43:55 +0000
Message-ID: <2541ebf501694eada50c13d79fa2cad9@ci.irs.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.219.124.120]
Content-Type: multipart/alternative; boundary=”—-=_NextPart_000_02B2_01D8121B.802E13F0″
MIME-Version: 1.0
X-VPM-MSG-ID: e58d40df-7408-49ed-9c42-35f402c95d2e
X-VPM-HOST: tcczix002.ci.irs.gov
Cc:
X-VPM-GROUP-ID: 6f859c85-7207-478c-b0c6-f6dd49d490f5
X-VPM-ENC-REGIME: Plaintext
X-VPM-IS-HYBRID: 0
X-CFilter-Loop: Reflected
So, let’s see what happens. If it is real and is official, well, Marilyn may get her own email.
As for Mr. Clark is concerned, all that I have is already posted on GraniteGrok. That’s what we do.