From: email@example.com [mailto:firstname.lastname@example.org]
Sent: 13 December 2011 05:14
Subject: Fwd: Order K93883696
You can download your Windows Vista License here -
The malicious payload is on csredret.ru/main.php hosted on 126.96.36.199 (Digital Network JSC, Russia aka DINETHOSTING). For about the billionth time in the past few days.. block access to 188.8.131.52/20 on your network if you possibly can.