From: LinkedIn Invitations [firstname.lastname@example.org]The malicious payload is at [donotclick]guessworkcontentprotect.biz/news/pattern-brother.php (report here) hosted on:
Date: 2 May 2013 16:49
Subject: LinkedIn inviation notificaltion.
This is a note that on May 2, Lewis Padilla sent you an invitation to join their professional network at LinkedIn.
Accept Lewis Padilla Invitation
On May 2, Lewis Padilla wrote:
> To: [redacted]
> I'd like to join you to my professional network on LinkedIn.
> Lewis Padilla
You are receiving Reminder emails for pending invitations. Unsubscribe.
© 2013 LinkedIn Corporation. 2029 Stierlin Ct, Mountain View, CA 94043, USA.
126.96.36.199 (PROXAD Free SAS, France)
188.8.131.52 (Greek Research and Technology Network, Greece)
184.108.40.206 (Umea University, Sweden)
220.127.116.11 (Kementerian Pertanian, Indonesia)