==============================================================
SECURITY TRAINING COPY, saved from a student inbox.
Every link below is defanged so it cannot be clicked:
  hxxp means http, hxxps means https, and [.] means a dot.
All people, schools, and addresses in this email are fictional.
==============================================================

From: it-helpdesk@kestre1valley.test (Kestrel Valley IT Help Desk)
Reply-To: account-restore-team@example.net
To: jordan.reyes@kestrelvalley.test
Date: Mon, 14 Sep 2026 05:47:12 -0400
Subject: URGENT: Final notice, your school account will be DISABLED today

Dear Student,

Our security system detected unusual sign-in activity on your
Kestrel Valley student account. To protect the district network,
your account will be DISABLED at 3:00 PM TODAY unless you verify
your identity.

Step 1. Verify your account now:
hxxps://kestrelvalley-verify[.]test/login

Step 2. Confirm your password on the secure district portal:
hxxps://kestrelvalley[.]test[.]account-check[.]example[.]com/sso

Step 3. As a thank-you for verifying quickly, claim a free
$25 gift card for the school store:
hxxp://student-rewards[.]example[.]org/claim

If you cannot open the links, reply to this email with your
student ID number and your current password, and we will
verify your account for you.

Do not ignore this message. Accounts that are not verified
today cannot be restored.

Thank you,
IT Help Desk
Kestrel Valley School District

Technology help: hxxps://www[.]kestrelvalley[.]test/technology/help
Privacy policy: hxxps://www[.]kestrelvalley[.]test/privacy