atwest Bank Plc <onlinesecurity@natwest.co.uk>

[SlapHappy]

* 77.221.130.42 Colocation And Virtual Hosting n/a Russian Federation

Received: by 10.217.61.7 with SMTP id h7csp457627wex;
Wed, 17 Oct 2012 06:29:45 -0700 (PDT)
Received: by 10.152.104.77 with SMTP id gc13mr5017499lab.16.1350480584215;
Wed, 17 Oct 2012 06:29:44 -0700 (PDT)
Return-Path: <z62191@srv042.infobox.ru>
Received: from out-relay-04.infobox.org (out-relay-04.infobox.org.
[77.221.130.197])
by mx.google.com with ESMTP id k6si13026403lbn.26.2012.10.17.06.29.43;
Wed, 17 Oct 2012 06:29:44 -0700 (PDT)
Received-SPF: neutral (google.com: 77.221.130.197 is neither permitted nor denied
by best guess record for domain of z62191@srv042.infobox.ru)
client-ip=77.221.130.197;
Authentication-Results: mx.google.com; spf=neutral (google.com: 77.221.130.197
is neither permitted nor denied by best guess record for domain of
z62191@srv042.infobox.ru) smtp.mail=z62191@srv042.infobox.ru
Received: from srv042.infobox.ru (srv042.infobox.ru [77.221.130.42])
by out-relay-04.infobox.org (Postfix) with ESMTP id 1B7657BCA51
for <>; Wed, 17 Oct 2012 17:29:43 +0400 (MSK)
Received: by srv042.infobox.ru (Postfix, from userid 2571)
id DE66F8980E; Wed, 17 Oct 2012 17:29:42 +0400 (MSK)
To:
Subject: Natwest: Review Your Account
From: Natwest Bank Plc <onlinesecurity@natwest.co.uk>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20121017132942.DE66F8980E@srv042.infobox.ru>
Date: Wed, 17 Oct 2012 17:29:42 +0400 (MSK)

Dear Valued Customer
Due to a recent security check on NatWest online banking.
We require you to confirm your details by clicking on the logon link below

LOGON
"http:/ /www.cunipicnaturaliss.com/wp-admin/includes/index.htm" << Phishing link.

Failure to do this within 48hrs will lead to access suspension

Sorry for the inconvienence

Regards