There are very sophisticated phishing schemes so any site asking you to provide a username and password means you should be a red-alert to check the URL as its very common for people to duplicate the look and feel of the Microsoft and Google login pages so cybercriminals can steal your account 

For Microsoft: The ONLY URLs are
For Google - the ONLY URL is

Real world cybercriminal phishing site pictured: