From: email@example.com [mailto:firstname.lastname@example.org]
Sent: 13 December 2011 05:14
Subject: Fwd: Order K93883696
You can download your Windows Vista License here -
The malicious payload is on csredret.ru/main.php hosted on 220.127.116.11 (Digital Network JSC, Russia aka DINETHOSTING). For about the billionth time in the past few days.. block access to 18.104.22.168/20 on your network if you possibly can.