Apparently FilesTube are handling tax payments now.. or maybe some malware spammer has gotten their campaign confused.
Date: Thu, 14 Jun 2012 06:14:40 +0300
From: “FilesTube” [[email protected]]
Subject: Tax Payment N 98426758 is failed.Hello,
Your Federal Tax Payment ID: 08432389 has been rejected.
Return Reason Code C11 � The identification number used in the Company Identification Field is not valid.
Please, check the information and refer to Code U 56 to get details about
your company payment in transaction contacts section:
http://eftps.gov/N6936721773
CARLY BLOCK,
The Electronic Federal Tax Payment System
The link goes to a malicious page at [donotclick]sumatranajuge.ru:8080/forum/showthread.php?page=5fa58bce769e5c2c (report here) which is multihomed on the following IPs:
78.83.233.242 (Spectrum Net JSC, Bulgaria)
110.234.176.99 (Tulip Telecom, India)
173.224.209.130 (Psychz Networks, US)
213.17.171.186 (Netia SA, Poland)
Plain list for copy-and-pasting:
78.83.233.242
110.234.176.99
173.224.209.130
213.17.171.186
Related domains:
huletydyshish.ru
saprolaunimaxim.ru
seledkindoms.ru
girlsnotcryz.ru
sumatranajuge.ru
Leave a reply
