Origin ISP and Web Host have been notified. URL is active and blocked at the border. URL has been submitted to Trend.
From: Hall, j <firstname.lastname@example.org>
Sent: Thursday, September 22, 2016 2:53 PM
We hereby notify you in regards to some unusual login attempt to your mailbox. We advise you promptly comply to this special announcement to protect your account. Kindly Click Here [http://web30upgrd.16mb.com/] to validate your mailbox.
Thank you for helping us protect you.
IT Helpdesk Support.