https://office365.sist.ac.jp/user/login/

Impersonating Office365

Intent: Data collection

• Domain name closely resembles Office365's real domain
• TLS certificate has no organization information
• TLS certificate was issued very recently
• SPF record does not reference Office365's infrastructure

login page for Office365 access at Shizuoka Institute of Science and Technology