logoalt Hacker News

JumpCrisscrosstoday at 10:06 AM2 repliesview on HN

> Apple Support lives on apple.com and getsupport.apple.com, nowhere else.

Meanwhile: “Microsoft support uses the following domains to send emails:

microsoft.com

microsoftsupport.com

mail.support.microsoft.com

office365support.com

techsupport.microsoft.com” [1]

[1] https://learn.microsoft.com/en-us/troubleshoot/azure/general...


Replies

dengtoday at 12:01 PM

Also, Microsoft regularly sends me legitimate emails regarding "Microsoft Rewards" that are absolutely indistinguishable from phishing, like "Total Prize Drop is here! Your chance to win 1,000,000 USD cash grand prize or one of three customizable Mercedes-Benz cars!", complete with links to login pages and everything. So like this one, just as mail: https://xcancel.com/bing/status/2034720189003231410

The first time I got those I couldn't believe these were legitimate. Thank you Microsoft for teaching your customers how to fall for scams!

throwaway290today at 10:32 AM

That's just for support. Legit password resets for example come from more random top level domains with "microsoft" in it, like microsoftonline.com

Another fun one is facebook, they use facebookmail.com or whatever else for serious security stuff

show 3 replies