This phish typically originates from a non-Cornell account that is spoofed to appear as a Cornell email address. The link within directs to a fake login page. Do not click the link nor reply to the sender. If you entered your credentials into the page, change your NetID password immediately at https://netid.cornell.edu.