Q&A Is this legit? - microsoftonline.com

upnorth

Moderator
Verified
Staff member
Malware Hunter
Jul 27, 2015
4,368
Sadly there is many scam and fraudulent sites and even subdomains, but try use the link I shared and add the specific subdomain in your search. It should be registered to the same owner. Otherwise you can always start doing a bit deeper check. Here's a few tips and links that hope fully might help as a start.
 

LeMinhThanh

From LMT Anti Logger
Verified
Developer
Apr 11, 2020
162
It’s legit
1608373154076.png
 
Last edited:

Jaspion

Level 17
Verified
Jun 5, 2013
817

Attachments

  • top-100-websites-1.jpg
    top-100-websites-1.jpg
    1.4 MB · Views: 171
  • sshot-2020-12-20-00-16-37.png
    sshot-2020-12-20-00-16-37.png
    538.7 KB · Views: 165
  • sshot-2020-12-20-00-22-34.png
    sshot-2020-12-20-00-22-34.png
    91.5 KB · Views: 167

Jaspion

Level 17
Verified
Jun 5, 2013
817
More intriguing news, and something I forgot to mention. The original subdomain I mentioned stopped working just as I posted my questions here.

Today if you go to the mall's website and try the sign-up link for the car prize, you'll be taken to a onmicrosoft.com subdomain. There's a lot of phishing reports about this online, more so than the other domain.

I wonder why.
 

roger_m

Level 33
Verified
Content Creator
Dec 4, 2014
2,289
you'll be taken to a onmicrosoft.com subdomain. There's a lot of phishing reports about this online, more so than the other domain.
It's also legit.
 

upnorth

Moderator
Verified
Staff member
Malware Hunter
Jul 27, 2015
4,368
2020-12-20-11-48-01.png

onmicrosoft.com subdomain. There's a lot of phishing reports about this online, more so than the other domain.

I wonder why.
onmicrosoft.com is found here.

Today if you go to the mall's website and try the sign-up link for the car prize
The problem here is not the 100% legit Microsoft links. It's the malls website and extra so it's so called webmaster.
 

Jaspion

Level 17
Verified
Jun 5, 2013
817
2020-12-20-11-48-01.png


onmicrosoft.com is found here.


The problem here is not the 100% legit Microsoft links. It's the malls website and extra so it's so called webmaster.
Ok, the mall's website looks like this:

Code:
https://apiacesso.b2clogin.com/apiacesso.onmicrosoft.com/oauth2/v2.0/authorize?client_id={REDACTED}&response_type=code&redirect_uri=https://plazasulshopping.com.br/usuario/autenticacao&response_mode=query&scope=openid&p=B2C_1A_signup
(client id redacted)

Perhaps not in this case, but could phishing agents be abusing these Microsoft domains?
 
Top