FedEx Customer Service ([email protected])

x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; sender-id=none (sender IP is 195.64.154.9) [email protected]; dkim=none header.d=fedex.com; x-hmca=none
X-SID-PRA: [email protected]
X-SID-Result: None
X-DKIM-Result: None
X-Message-Status: n:0:n
X-AUTH-Result: NONE
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD00
X-Message-Info: 11chDOWqoTl7JvUXjz+N2IQ1iHnWF9O9Vz0z7Q5Y+A062fdrmNw73+ls5epvlZ3V9aBlo61PuqMyTSbAPVFPrKYaF33IIUt2kT9EQan+EaLIPttbHdevz8ZMpFyDDA4CX1UdXj9wDug=
Received: from hosting4.ukrnames.com ([195.64.154.9]) by BAY0-MC4-F33.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Thu, 22 Mar 2012 09:45:54 -0700
Received: from bonparfu by hosting4.ukrnames.com with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1SAl95-0004j0-Ud
for xxxxxxxxxxxxxxxxx; Thu, 22 Mar 2012 18:45:52 +0200
To: xxxxxxxxxxxxxxxxx
Subject: FEDEX Invoice Order 1540
From: "FedEx Customer Service" <[email protected]>
X-Mailer: TheBat!(v3.99.27)UNREG
Reply-To: "FedEx Customer Service" <[email protected]>
Mime-Version: 1.0
Content-Type:multipart/mixed;boundary="----------13324347514F6B573FE5C3D"
Message-Id: <[email protected]>
Date: Thu, 22 Mar 2012 18:45:51 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - hosting4.ukrnames.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [622 620] / [47 12]
X-AntiAbuse: Sender Address Domain - hosting4.ukrnames.com
Return-Path: [email protected]
X-OriginalArrivalTime: 22 Mar 2012 16:45:54.0839 (UTC) FILETIME=[3FBAD270:01CD084B]

This is a post notification,

The delivery service couldn’t deliver your package.
The package weight exceeds the allowable free-delivery limit.

You have to receive your packagen personally.
Print out the "Invoice Copy" attached and collect the package at our office.

Please read carefully the attached information before receiving your package.

Thank you. FedEx Customer Services.

Header Analysis Quick Report<br>Originating IP: 195.64.154.9<br>Originating ISP: Ukrainian Internet Names Center Ltd<br> City: n/a<br>Country of Origin: Ukraine<br>* For a complete report on this email header goto ipTRACKERonline

[AlanJones]

Based on the fact that the reply-to address of this email is a legitimate FedEx domain and the fact that the sender is asking the recipient to open an attached file, I would guess that this email is designed to install malware of somesort onto the victim's computer.