http:/ /www.cclservicos.com.br/ml1.php

Received: by 10.52.88.176 with SMTP id bh16mr2879253vdb.132.1339099224255;
Thu, 07 Jun 2012 13:00:24 -0700 (PDT)
Return-Path: <web@smtp.t5.com.br>
Received: from smtp.t5.com.br (rede17-server119.t5.com.br. [201.33.17.119])
by mx.google.com with ESMTP id p20si1503148vcu.4.2012.06.07.13.00.23;
Thu, 07 Jun 2012 13:00:24 -0700 (PDT)
Received-SPF: pass (google.com: domain of web@smtp.t5.com.br designates
201.33.17.119 as permitted sender) client-ip=201.33.17.119;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
web@smtp.t5.com.br designates 201.33.17.119 as permitted sender)
smtp.mail=web@smtp.t5.com.br
Received: by smtp.t5.com.br (Postfix, from userid 90)
id 48E4A2D5C31; Thu, 7 Jun 2012 17:00:21 -0300 (BRT)
To: XXXXXX@gmail.com
Subject: http:/ /www.cclservicos.com.br/ml1.php
From: bellionbash@yahoo.com <bellionbash@yahoo.com>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 7bit
Message-Id: <20120607200021.48E4A2D5C31@smtp.t5.com.br>
Date: Thu, 7 Jun 2012 17:00:21 -0300 (BRT)

http:/ /204.93.211.119/~allenhil/static/img/titles/Fniagara/Fniagara/Bank/To/update/update.do.html"
^^Phishing website link.
Dear Customer,


We detected irregular activity on your First Niagara Account on 07 June 2012. For your protection, you must update your Account and verify this activity before you can continue using your Account.

To access your statement, just click on the link below :

[MyAccount Activity Verification Process >] This instruction has been sent to You.

Thank you
Customers Support Service
First Niagara Bank- Internet Banking.