This scam was an attached PDF to the email. Origin ISP and web host have been notified. URL is active and blocked at the border. The URL has been submitted to Trend.
From: “Quintanilla, Yolanda I” <firstname.lastname@example.org>
Subject: FW: FW FYI: MAINTENANCE NOTICE
Date: Fri, 19 Sep 2014 07:47:12
It has come to our notice that you are yet to verify your details properly as your email Quota is almost exceeded. Maintenance has been extended till 19th of September; we are migrating to new email interface. So we are currently doing maintenance on our server. Please, visit the upgrade page below to verify your account details and avoid losing your inbox.
Your Technical Team