There are very sophisticated phishing schemes so any site asking you to provide a username and password means you should be a red-alert to check the URL as its very common for people to duplicate the look and feel of the Microsoft and Google login pages so cybercriminals can steal your account
For Microsoft: The ONLY URLs are
- login.microsoftonline.com (the most common business login URL)
- login.live.com (more likely for non business accounts)
For Google - the ONLY URL is
- accounts.google.com
Real world cybercriminal phishing site pictured:
