From: “XXXX XXXX XXXX” <firstname.lastname@example.org>
Sent: Monday, January 9, 2017 9:06:49 PM
Subject: IT Service Desk
Due to our recent IP routine check, we have reasons to believe that your PSU E-Mail Account has been violated and access by a third party. Kindly click HERE [<– links to a fake WebAccess page in the guncelim.net domain] and verify your mailbox to avoid deactivation.
IT Service Desk