{"id":3463,"date":"2010-10-13T16:26:14","date_gmt":"2010-10-13T23:26:14","guid":{"rendered":"http:\/\/blog.webroot.com\/?p=3463"},"modified":"2018-01-30T11:08:07","modified_gmt":"2018-01-30T18:08:07","slug":"your-federal-tax-payment-has-not-been-rejected","status":"publish","type":"post","link":"https://www.webroot.com/blog/2010\/10\/13\/your-federal-tax-payment-has-not-been-rejected\/","title":{"rendered":"Your Federal Tax Payment Has Not Been Rejected"},"content":{"rendered":"

\"\"\"Add<\/a>\"Add<\/a>\"Add<\/a>\"Add<\/a>\"Add<\/a>\"Add<\/a>\"Add<\/a>\"Add<\/a>\"Add<\/a>\"Add<\/a>\"\"<\/p>\n

\"\"<\/a>It’s been more than a week since we started seeing spam email, supposedly sent by the EFTPS<\/a> (Electronic Federal Tax Payment System, a division of the US Department of the Treasury), informing recipients in dire, bolded text that Your Federal Tax Payment ID: 01037513 has been rejected<\/strong>. I had hoped it would be a faded memory by now, but apparently it just won’t die<\/a>.<\/p>\n

Spam, ladies and gentlemen. It’s a lie, cooked up in a criminal’s troubled mind, with the goal of convincing signficant numbers of people to click a link in the message. It’s a pretty contrived message, which also informs the recipient, in characteristic Spamglish, to “In other way forward information to your accountant adviser<\/strong>.” Apparently, whoever began the campaign needs a refresher in the history of recent Internet scams — this particular scam has been going on again, off again for four years<\/a>.<\/p>\n

Judging by the number of other people asking about this online, the campaign must have been massive. And like a squirrel harassing birds on a feeder, it’s not likely to go away anytime soon.<\/p>\n

In this case, the link looks like it’s supposed to go directly to the EFTPS Web site<\/a>, but the author of the spam simply hyperlinked the URL to point elsewhere<\/a>. In the case of some of the samples we’ve seen, the messages link to a page on the domain freesite.org<\/strong>; That page contains a single line of HTML to redirect victims to yet another site, which has since been shut down.<\/p>\n

So while the spam messages continue to percolate through the email networks, it’s a tiger with no teeth or claws anymore. If you clicked the link, only to end up on a blank page at eftpsid0353546.com<\/strong> — a domain hosted in Russia, on the same server<\/a> as such esteemed <\/em>Web sites as qualityhealthmall.com<\/a> and fdadrugmall.com<\/a> — rest assured, you’re probably safe, but need to practice the first two parts of Stop. Think. Connect.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

It’s been more than a week since we started seeing spam email, supposedly sent by the EFTPS (Electronic Federal Tax Payment System, a division of the US Department of the Treasury), informing recipients in dire, bolded text that Your Federal Tax Payment ID: 01037513 has been rejected. I had hoped it would be a faded […]<\/p>\n","protected":false},"author":65,"featured_media":17052,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3005],"tags":[],"yst_prominent_words":[3915,3881,8225,3493,8221,8217,8215,4197,4797,4431,3919,8223,3713,8227,4371,3675,6531,8219,3471,4313],"acf":[],"_links":{"self":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/3463"}],"collection":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/users\/65"}],"replies":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/comments?post=3463"}],"version-history":[{"count":1,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/3463\/revisions"}],"predecessor-version":[{"id":23526,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/posts\/3463\/revisions\/23526"}],"wp:featuredmedia":[{"embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/media\/17052"}],"wp:attachment":[{"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/media?parent=3463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/categories?post=3463"},{"taxonomy":"post_tag","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/tags?post=3463"},{"taxonomy":"yst_prominent_words","embeddable":true,"href":"https://www.webroot.com/blog/wp-json\/wp\/v2\/yst_prominent_words?post=3463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}