From: craigslist - automated message, do not reply [mailto:firstname.lastname@example.org]
Sent: 18 September 2012 11:44
Subject: Re: Fwd: Scan from a Hewlett-Packard ScanJet #97273
A document was scanned and sent to you using a Hewlett-Packard HP18412598P
Sent to you by: SIDNEY
Pages : 7
Filetype(s): Images (.jpeg) View
Location: not set.
The malicious payload is at [donotclick]denegnashete.ru:8080/forum/links/column.php (report here) hosted on the same IPs as found here.