This phish attempts to pretend that your account is marked for deletion and will be going away if you do not take action. The message seems to be urgent and threatens action if the user does not click on the link.
Going through the messsage section by section, there are several issues that give it away as a phish.
- The “From” address looks like it is sent from “PSU” or “PSU Admin” but if you examine the email address, it is a “ziggo.nlis” adress and has nothing to do with Penn State.
- Official correspondence would reference Penn State, not “PSU”.
- There is no greeting.
- The text is in all capital letters.
- You are given a link to “verify-now.” Penn State does not ask users to verify their accounts with a link.
Subject: “Message from admin-support” or “WARNING!!!”
Date: June 25, 2016 9:17 AM
From: “PSU” <email@example.com>
YOUR ACCOUNT IS MARKED AND WILL BE DEACTIVATED IF NOT VERIFIED NOW.
Verify-now (http://www.gloomky.com/wp-admin/css/PSU/ <- The link given has nothing to do with Penn State – it’s a gloomky.com address designed to harvest passwords.