From: The Electronic Payments Association firstname.lastname@example.org
Reply-To: The Electronic Payments Association
Date: 22 February 2012 21:46
Subject: Technical failure report
Unfortunately we notify you , that Direct Deposit payment (#ACH603865004417US) could not be completed, because of discontinued receipient account.
Direct Deposit procedure incomplete
Transaction # : ACH603865004417US
Information: Please download and print the transfer correction request below adjust the recipient banking details.
Transfer Report report-ACH603865004417US.doc (Microsoft Word Document)
13450 Sunrise Valley Drive, Suite 100 Herndon, VA 20171 (703) 561-1100
2012 NACHA - The Electronic Payments Association
The malicious payload is on campingomotion.com/search.php?page=977334ca118fcb8c, IP 22.214.171.124 (Servint, US). Block the IP address in addition to the domain if you can.