Date: Tue, 4 Dec 2012 03:38:42 +0000
From: [email protected]
Subject: You have notifications pending
Here’s some activity you may have missed on Facebook.
SALLIE FELIX has posted statuses, photos and more on Facebook.
Go To Facebook
See All Notifications
This message was sent to [email protected][redacted]. If you don’t want to receive these emails from Facebook in the future or have your email address used for friend suggestions, please click: unsubscribe.
Facebook, Inc. Attention: Department 415 P.O Box 10005 Palo Alto CA 94303
The malicious payload is at [donotclick]francese.ru:8080/forum/links/column.php hosted on the following IP addresses:
188.8.131.52 (Aliyun Computing Co, China)
184.108.40.206 (GNet, Mongolia)
220.127.116.11 (MYREN, Malaysia)
18.104.22.168 (Psychz Networks , US)
22.214.171.124 (SK Broadband, Korea)
Plain list for copy-and-pasting:
Leave a reply