https://login.teams-mail-microsofts.com/

Impersonating Microsoft

Intent: Credential collection

• Domain is not operated by Microsoft
• Domain name closely resembles Microsoft's real domain
• TLS certificate has no organization information
• Domain not registered through Microsoft's usual registrar
• Domain was registered very recently

Microsoft sign-in page with account login fields and recovery links