(a variant of this has two exclamation marks in the subject line)
From: “PSU Admin ” <nooreply@psu.edu>
Date: August 10, 2017 at 8:32:51 PM EDT
To: Recipients <nooreply@psu.edu>
Subject: Portal at Risk
Your student portal! was recently signed from an unknown Location. Please for verification to avoid closure of your account
CLICK HERE . [<–Link leads to a poor fake WebAccess page in the majureshan.com domain]
Admin office