The email is a scam, but this post will show what happens should anyone fall for it. The email was sent to a real-estate investment blog for a company in Kazakhstan. Using variables, the scammer’s script will populate the victim’s email address as the target’s. The form itself is basic, and looks nothing like a legitimate Office 365 login screen. The message is addressed to my username, not me personally; it claims to come from the “CXO Verification Center” but there is no such thing.”]
Source: https://www.csoonline.com/article/3223193/office-365-phishing-a-quick-look-at-a-recent-example.html