Annotations
This phish originates from a various non-Cornell email addresses. The day in the subject may vary and the body image may vary as seen in the two examples here. The sender may appear as ""Cornell.edu Portal" <[username]@dannalegal.com>" or "Cornell.edu Portal <[username]@jimbarbrealtyinc.com>" among other non-Cornell domains. The link within directs to a fake Microsoft-branded login page. Do not follow the link nor contact the sender. If you entered your credentials into the page linked within the email, change your NetID password immediately.