Annotations
This phish originates from a various non-Cornell email addresses. The day in the subject may vary and the body image may vary. The sender may appear as "Cornell Support Portal" <[name]@ulinp028482.com>" among other non-Cornell domains. The link within directs to a fake Microsoft-branded login page. Do not follow the link nor contact the sender. If you entered your credentials into the page linked within the email, change your NetID password immediately.