Origin ISP have been notified. URL is active and blocked at the border. URL has been submitted to Trend.
From: Ksu Help Desk [email@example.com]
Sent: Friday, October 31, 2014 12:31 PM
A phishing attempt was made to perform unusual activities/access on your email account from an unknown IP. As part of our ongoing commitment to provide the “Best protection, we therefore ask you fill in your online data correctly to update your account. You’ll need to update the settings on your email account by clicking on this link: http://www.formget.com/app/forms/view/aAIn-93986
Thanks for your co-operation.