Hacker News Reader

Every time I see a new Microsoft domain I've never seen before, I have to double check that it's actually legit. Every time I realize anew why people still fall for phishing attempts, because all these legit domains look like phishing attempts.

At least they're not sending from contoso.com ?

Note that XYZ.onmicrosoft.com is the domain you get when you sign up for hosted office 365 without a domain of your own