Date: Tue, 30 Jan 2012 11:02:13 +0000The payload is on matoreria.com/search.php?page=73a07bcb51f4be71 hosted on 220.127.116.11 (Nuclear Fallout Enterprises, Seattle). We've seen this ISP before. At the moment the payload seems not to be working properly.
Subject: Your ACH transaction
The ACH transaction (ID: 8519169560300), recently initiated from your bank account (by you or any other person), was canceled by the other financial institution.
Transaction ID: 8519169560300
Rejection Reason See details in the report below
Transaction Report report_8519169560300.doc (Microsoft Word Document)
13450 Sunrise Valley Drive, Suite 100
Herndon, VA 20171
2011 NACHA - The Electronic Payments Association
Blocking access to the IP address will also block access to any other malicious sites on the same server.