Westpac Banking Corporation <wstaus@westpac.com.au>

[Arabian Nights]

wstaus@westpac.com.au FAKE SITE please shut it down
----- Original Message -----
From: Westpac Banking Corporation
To: xxxxxx@ozemail.com.au
Sent: Wed May 26 6:14
Subject: Fwd: Account Information

On Wed May 26 6:14 , Westpac Banking Corporation sent:

Header
Return-Path: <wstaus@westpac.com.au>
Delivered-To: xxxxxx@ozemail.com.au
Received: (qmail 21156 invoked from network); 25 May 2010 22:21:07 -0000
Received: from unknown (HELO icp-qv1-irony-in1.iinet.net.au) ([203.59.1.189])
(envelope-sender <wstaus@westpac.com.au>)
by icp-qv1-smtp10.iinet.net.au (qmail-ldap-1.03) with SMTP
for <xxxxxxx@ozemail.com.au>; 25 May 2010 22:21:07 -0000
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Al/iAO/p+0tKXmzRYWdsb2JhbAB6RwEPgyCBT4g2gxUCiyQCbyIfIgMYA QEgAQGjPYFOAQGDGgEBmA+CbgiCHQQ
X-IronPort-AV: E=Sophos;i="4.53,299,1272816000";
d="scan'208,217";a="324364488"
Received: from mail.bearseusa.com (HELO beasresbs.BearseUSA.local) ([74.94.108.209])
by inbound.icp-qv1-irony-in1.iinet.net.au with ESMTP; 26 May 2010 06:21:06 +0800
Received: from westpac.com.au ([155.229.72.4]) by beasresbs.BearseUSA.local with Microsoft SMTPSVC(6.0.3790.1830);
Tue, 25 May 2010 17:21:04 -0500
From: Westpac Banking Corporation <wstaus@westpac.com.au>
To: xxxxxx@ozemail.com.au
Subject: Account Information
Date: 25 May 2010 18:14:28 -0400
Message-ID: <20100525181428.C3A177AF3A4008A8@westpac.com.au>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Return-Path: wstaus@westpac.com.au
X-OriginalArrivalTime: 25 May 2010 22:21:04.0844 (UTC) FILETIME=[90B2D0C0:01CAFC58]


HEADER ANALYSIS

203.59.1.189Australia (Perth)*
74.94.108.209United States*
155.229.72.4United States (Costa Mesa)*

[Dick]

The email address is spoofed from the Westpac server, but the site has been reported, and from the looks action has started to be taken