3 ms·

> Apple Support lives on apple.com and getsupport.apple.com, nowhere else. Meanwhile: “Microsoft support uses the following domains to send emails: microsoft.

> Apple Support lives on apple.com and getsupport.apple.com, nowhere else. Meanwhile: “Microsoft support uses the following domains to send emails: microsoft.com microsoftsupport.com mail.support.microsoft.com office365support.com techsupport.microsoft.com” [1] [1] https://learn.microsoft.com/en-us/troubleshoot/azure/general/email-domains-support-agent https://learn.microsoft.com/en-us/troubleshoot/azure/general...

throwaway290 8mo ago
That's just for support. Legit password resets for example come from more random top level domains with "microsoft" in it, like microsoftonline.com Another fun one is facebook, they use facebookmail.com or whatever else for serious security stuff
- e40 8mo ago
  The number of redirects while using ms properties is just insane. It makes white listing them in uBO impossible because they redirect so fast, through multiple domains. The White listing is needed to sometimes make them work.
  - throwaway290 8mo ago
    It's a thing with google and facebook too. If you login to youtube or go to facebook account settings, at least 3 redirects through very random places. I guess 3 is not a lot compared to microsoft's 15.
- CraigRood 8mo ago
  Is this because at one point <username>@facebook.com was a valid communication method? Great concept to be fair, but once you pull back the first layer you can immediately see its problems.
- Metacelsus 8mo ago
  >Legit password resets for example come from more random top level domains with "microsoft" in it, like microsoftonline.com Or aka.ms
deng 8mo ago
Also, Microsoft regularly sends me legitimate emails regarding "Microsoft Rewards" that are absolutely indistinguishable from phishing, like "Total Prize Drop is here! Your chance to win 1,000,000 USD cash grand prize or one of three customizable Mercedes-Benz cars!", complete with links to login pages and everything. So like this one, just as mail: https://xcancel.com/bing/status/2034720189003231410 https://xcancel.com/bing/status/2034720189003231410 The first time I got those I couldn't believe these were legitimate. Thank you Microsoft for teaching your customers how to fall for scams!
- latexr 8mo ago
  https://xkcd.com/570/ https://xkcd.com/570/
- hombre_fatal 8mo ago
  My Mexican telcom (Telcel) does this over SMS. "Sign up for Uber Eats and win 50,000 MXN of credit https://bit.ly/1234 https://bit.ly/1234" What's funny is that they also send these over the same channel: "Warning: Telcel will never call you nor ask you for your personal info!" Gee, maybe stop priming your whole customer base to click on messages identical to spam?
- anon7000 8mo ago
  I’m a lucky duck, because Microsoft ONLY sends me emails in Spanish. Password reset? Spanish. Ad? Spanish. ToS update? Spanish. When I log in, it’s English, and I’ve never been able to find any setting anywhere in my account saying to use English. It’s so funny, I can’t even understand their ads.

throwaway290 8mo ago

That's just for support. Legit password resets for example come from more random top level domains with "microsoft" in it, like microsoftonline.com Another fun one is facebook, they use facebookmail.com or whatever else for serious security stuff

e40 8mo ago
The number of redirects while using ms properties is just insane. It makes white listing them in uBO impossible because they redirect so fast, through multiple domains. The White listing is needed to sometimes make them work.
- throwaway290 8mo ago
  It's a thing with google and facebook too. If you login to youtube or go to facebook account settings, at least 3 redirects through very random places. I guess 3 is not a lot compared to microsoft's 15.
CraigRood 8mo ago
Is this because at one point <username>@facebook.com was a valid communication method? Great concept to be fair, but once you pull back the first layer you can immediately see its problems.
Metacelsus 8mo ago
>Legit password resets for example come from more random top level domains with "microsoft" in it, like microsoftonline.com Or aka.ms

deng 8mo ago

Also, Microsoft regularly sends me legitimate emails regarding "Microsoft Rewards" that are absolutely indistinguishable from phishing, like "Total Prize Drop is here! Your chance to win 1,000,000 USD cash grand prize or one of three customizable Mercedes-Benz cars!", complete with links to login pages and everything. So like this one, just as mail: https://xcancel.com/bing/status/2034720189003231410 https://xcancel.com/bing/status/2034720189003231410 The first time I got those I couldn't believe these were legitimate. Thank you Microsoft for teaching your customers how to fall for scams!

latexr 8mo ago
https://xkcd.com/570/ https://xkcd.com/570/
hombre_fatal 8mo ago
My Mexican telcom (Telcel) does this over SMS. "Sign up for Uber Eats and win 50,000 MXN of credit https://bit.ly/1234 https://bit.ly/1234" What's funny is that they also send these over the same channel: "Warning: Telcel will never call you nor ask you for your personal info!" Gee, maybe stop priming your whole customer base to click on messages identical to spam?
anon7000 8mo ago
I’m a lucky duck, because Microsoft ONLY sends me emails in Spanish. Password reset? Spanish. Ad? Spanish. ToS update? Spanish. When I log in, it’s English, and I’ve never been able to find any setting anywhere in my account saying to use English. It’s so funny, I can’t even understand their ads.