https://outlook.cmjlevi.top/login

Impersonating Microsoft Outlook

Intent: Credential collection

• Domain is not operated by Microsoft Outlook
• TLS certificate has no organization information
• Domain not registered through Microsoft Outlook's usual registrar
• SPF record does not reference Microsoft Outlook's infrastructure

Outlook-branded login page asking for a password to enter the mail management system