From: “firstname.lastname@example.org” <email@example.com>
Sent: Wednesday, May 10, 2017 7:33:51 PM
Subject: Action required on your webmail
We have upgraded our webmail access to new version, click here [<–Link leads to a fake WebAccess page in the onlinechasejp.com domain] within 48 hours to verify your webmail on our new server or your email will be temporarily disable.
Penn State University