Microsoft IT Support case ID: Email De-activation Request
This phish typically originates from a non-Cornell address. The sender may appear as "airbubble@t-online.de <AIRBUBBLE@t-online.de>". The link within directs to a fake "email verification" form. Do not follow the link nor contact the sender. If you entered your credentials into the linked page, change your NetID password immediately at https://netid.cornell.edu.
We received a request from you to deactivate your College/University Email Address some days ago and this has been processed by our administrator.
We believe this request might be sent in error or by an unauthorized user.
If you do not request for your email deactivation or you think you received this message in error, kindly Verify your email right away to keep away from Deactivation
Warm Regards,
IT Support Center
Instructor.