Origin and ISP have been notified. The URL was active and could not be blocked at the border. The URL was submitted to Trend.
From: Sinop – 4 Vara Civel <email@example.com>
Date: Mon, 15 Jun 2015 12:29:07 -0400
we would like to inform you that we are currently carrying out scheduled maintenance and upgrade of our webmail service and as a result of this an HTK4S virus has been detected in your account folders:kindly click on the link below
Failure to do this within 24 hours will immediately render your email account deactivated from our database