Phishing emails using a compromised SUNet id. Hovering on the link reveals the malicious URL.
From: Stanford University <compromised@stanford.edu>
Sent: Wednesday, November 20, 2019 8:44 AM
To: user <user@stanford.edu>
Subject: Access locked: Server Error
Due to a server error on your e-mail, (user@stanford.edu) (7) incoming messages were delayed.
Log on to your portal to recover your delayed messages
Recover Delayed Messages
2019 Message Center