From: The Electronic Payments Association [mailto:email@example.com]
Sent: 10 October 2012 15:59
Subject: Rejected ACH transaction
The ACH transaction (ID: 9536860209937), recently issued from your bank account (by one of your account members), was reversed by the recepient's financial institution.
Transaction ID: 9536860209937
Reason of rejection Review details in the statement below
Transaction Report report_9536860209937.doc (Microsoft Office Word Document)
17390 Seaside Valley Drive, Suite 101
Herndon, VA 20171
2011 NACHA - The Electronic Payments Association
The malicious payload is on [donotclick]formexiting.net/detects/review_reject_reason.php hosted on 184.108.40.206 (Vodafone, Fiji) which is a well-known malicious IP that you should consider blocking.