Hey guys, beware of: http://nagsheadwycombe.com
Here are some screenshots:
1) The Original Email (click image to enlarge)
2) Email analysis:
a) This link( http://zenithbank.com/Security/Upgrade/confirm.php) in the original email redirected to: http://www.cambridgetonight.com/verify.acc.php - a blank white page.
then from http://www.cambridgetonight.com/verify.acc.php, it redirected to http://nagsheadwycombe.com/zennn/zenn/zen/ze/1/index.html
b) Email's full header: