Annotations
This phish typically originates from a non-Cornell account. The sender may appear as "Admin <staff@martinelliott.com>". The link within directs to a fake Outlook-branded login page. Do not reply to the sender nor follow the link. If you entered your credentials into the page, change your NetID password immediately at https://netid.cornell.edu