Phishing Email: RE: New Order Madni trading

Phishing Email
Reported by neonprimetime security
http://neonprimetime.blogspot.com

*****
From: blog@dawn.com [Madni trading]
Subject: RE: New Order
Attachment: new order.jar
Body:
Good Day
Good to know about your products from one of your buyers,
pleases check attach our new order kindly quote your best price to us on FOB basis.

Give me your minimum order

-Your Best Prices and FOB Port of loading.
-Your estimated delivery time.
-Your Mode of Payment. ( If by L/C or T/T )

Regards
Best Regards
Yount Lai
Overseas Manager
Guangdong Wellong Co.,Ltd
Tel:+86-754-8252 5656 Fax:+86-754-8275 6565
Add: No.8 Jinpu Road, Shantou, China-515061

E-Catalog Downloard
hxxp://yun.baidu.com/share/link?shareid=3335906660&uk=358106616


From "Madni trading" Thu Aug 27 06:24:20 2015
Return-Path: <blog@dawn.com>
Received-SPF: none (domain of dawn.com does not designate permitted sender hosts)
X-Originating-IP: [203.130.1.248]
Received: from [10.1.70.10] ([185.17.1.70]) by mail.dawn.com with ESMTP id OGLq4KkIWnYdNY5S (version=TLSv1 cipher=AES256-SHA bits=256 verify=NO); Thu, 27 Aug 2015 11:26:42 +0500 (PKT)
X-Barracuda-Envelope-From: blog@dawn.com
X-Barracuda-AUTH-User: blog@dawn.com
X-Barracuda-Apparent-Source-IP: 185.17.1.70
Content-Type: multipart/mixed; boundary="===============0547475730=="
MIME-Version: 1.0
Subject: Re: New Order
To: Recipients <blog@dawn.com>
X-ASG-Orig-Subj: Re: New Order
From: "Madni trading" <blog@dawn.com>
Date: Thu, 27 Aug 2015 07:24:20 +0100
X-Barracuda-Connect: UNKNOWN[185.17.1.70]
X-Barracuda-Start-Time: 1440656801
X-Barracuda-Encrypted: AES256-SHA
X-Barracuda-URL: http://203.130.1.248:8000/cgi-mod/mark.cgi
X-Barracuda-BRTS-Status: 1
X-Virus-Scanned: by bsmtpd at dawn.com
X-Barracuda-Spam-Score: 0.64
X-Barracuda-Spam-Status: No, SCORE=0.64 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=5.0 tests=BSF_SC0_MV0713, HTML_MESSAGE, MISSING_MID
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.21965
	Rule breakdown below
	 pts rule name              description
	---- ---------------------- --------------------------------------------------
	0.14 MISSING_MID            Missing Message-Id: header
	0.00 HTML_MESSAGE           BODY: HTML included in message
	0.50 BSF_SC0_MV0713         Custom rule MV0713
Message-Id: <20150827062718.725A8211F4B@mail.dawn.com>
Content-Length: 142665