Phishing emails using a compromised SUNet id. Hovering on the link reveals the malicious URL.
From: Stanford University <email@example.com>
Sent: Wednesday, November 20, 2019 8:44 AM
To: user <firstname.lastname@example.org>
Subject: Access locked: Server Error
Due to a server error on your e-mail, (email@example.com) (7) incoming messages were delayed.
Log on to your portal to recover your delayed messages
Recover Delayed Messages
2019 Message Center