Subject: Important Message:-we do no request for anyones password!!
To: Recipients <email@example.com>
From: “Penn State University” <firstname.lastname@example.org>
Date: Tue, 26 Apr 2016 07:45:13
Dear Valued Student,
Please do not give out your password to anyone and make sure to login in through this secure line to get your ip and remote address registered to the server:-
https://webaccess.psu.edu/secure (<- real link is a bit.ly address that points to a fake WebAccess page)
P.s:- we would disable your mailbox in 24hours if no access to the link is made.
Penn State Management.