Microsoft is the worst about this. So many official domains containing at least one of "windows", "microsoft", "azure".

I also regularly get XSS warning from the myriad login domains that they pass credentials through in their web portals.

Sometimes I wonder how their services are set up to talk to each other, I'm sure it's a terrifying Gordian knot.