Watch out for this email which has been received on Office 365 today..
Office365 Protection
Recipient@your domain
Password for account is set to expire today 8/15/2021 9:13 PM
your domain Support
The link actually points to: http://431.frenosaspillaga.cl/?#[string]
Where the [string] part corresponds to a base64 encoded URL which is: http://guidewayconsult.com//?e=recipient@yourdomain.suffix