[Cornell] Important Notification.
This phish typically originates from a non-Cornell sender. The sender may appear as "CORNELL <[six alphanumeric characters]@mit.edu>". Do not click the link within the email. The link directs to a fake clone of CUWebLogin. If you entered your credentials into the form, change your NetID password immediately at https://netid.cornell.edu.