[pca]

Doesn't Microsoft use a thousand different domains, most of which look sketchy? What if you receive an email from [e-mail]? Could you immediately tell that it is not legitimate compared to, e.g. [e-mail]?

[cdolan]

My favorite:

aka.ms

Or “cudaserv.com”, which is auto enabled link scanning for Office365