From: firstname.lastname@example.org [mailto:email@example.com]
Sent: 13 December 2011 05:14
Subject: Fwd: Order K93883696
You can download your Windows Vista License here -
The malicious payload is on csredret.ru/main.php hosted on 184.108.40.206 (Digital Network JSC, Russia aka DINETHOSTING). For about the billionth time in the past few days.. block access to 220.127.116.11/20 on your network if you possibly can.