The number in the subject of this phish may vary. This phish typically originates from a non-Cornell account. The sender may appear as "Cornell via E-Doc <[user]@icloud.com>". The QR code within directs to a fake login page. Do not scan the QR code nor reply to the sender. If you entered your credentials into the linked page, change your NetID password immediately at https://netid.cornell.edu.
At Cornell we value your privacy. To view our university's privacy practices, including information use and third parties, visit University Privacy.