Yup, the page itself has links that go to some Java-enabled something or other. I didn't wait around to see what materialized. Fortunately Java is so slow there's time to close the page before you find out what's in store. I'm guessing it's evil. Jon Galbreath, MCSE Systems Administrator International Studies and Programs Helpdesk: 517-884-2148 Ph: 517-884-2144 [log in to unmask]<mailto:[log in to unmask]> From: Laurence Bates [mailto:[log in to unmask]] Sent: Thursday, March 08, 2012 3:59 PM To: [log in to unmask] Subject: [MSUNAG] FW: UPS Delivery Notification, Tracking Number B80F119957814DA9 This looks like a particularly dangerous email load - a credible looking web page attachment which offers an executable "invoice" Unless I am mistaken, this could catch quite a few users. Laurence From: UPS Quantum View [mailto:[log in to unmask]]<mailto:[mailto:[log in to unmask]]> Sent: Thursday, March 08, 2012 1:49 PM To: [log in to unmask]<mailto:[log in to unmask]> Subject: UPS Delivery Notification, Tracking Number B80F119957814DA9 You have attached the invoice for your package delivery. Thank you, United Parcel Service *** This is an automatically generated email, please do not reply ***